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CONTINUING 
THE LEGACY OF 
ALVIN A. ARENS 


ALVIN A. ARENS: The author team of Randy Elder, 
Mark Beasley, and newest member of the author team, 
Chris Hogan, are pleased to continue the outstand- 
ing legacy of our book’s founding author, Al Arens, in 
this 16th edition of Auditing and Assurance Services: An 
Integrated Approach. As was done for the 15th edition, we 
again dedicate this new edition to Al’s memory. 


Randy and Mark joined Al as coauthors on this textbook 
in the 8th edition, and have been honored to continue 
Al’s leadership in helping shape classroom instruction 
and student learning about auditing concepts and their 
practical implementation around the world. Since the 
first edition was published, this textbook has impacted 
audit education for over 30 years in the U.S. and glob- 
ally, including seven different language translations. 
Al’s leadership at national and international levels and —_ November 24, 1935 — December 6, 2010 
his commitment to expanding knowledge through the 

development of educational materials, including this textbook, continue to inspire 
us as we strive to advance his legacy for future generations of auditing professionals. 


Al was the PricewaterhouseCoopers Auditing Professor and member of the Account- 
ing & Information Systems faculty in the Eli Broad College of Business at Michigan 
State University from 1968 through 2007. Thus, we are especially pleased to have Chris 
Hogan, Professor at Michigan State University, join the author team on this edition, 
continuing the Michigan State connection started by Al. 


Among his many honors, Al was selected as one of five national auditing educators 
to hold a Price Waterhouse Auditing professorship, was honored as AICPA Educator 
of the Year, served on the AICPA Auditing Standards Board, and was President of the 
American Accounting Association. Al taught accounting, mainly auditing, with a 
passion that is legendary. He had a heart for sharing his knowledge of auditing with 
students throughout his career. 


This 16th edition continues his outstanding legacy in audit education. 
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PREFACE 


INTEGRATED APPROACH FOR RISK ASSESSMENT 
AND AUDIT DECISION MAKING 


Auditing and Assurance Services: An Integrated Approach is an introduction to auditing and 
other assurance services. It is intended for either a one-quarter or one-semester course 
at the undergraduate or graduate level. This book is also appropriate for introductory 
professional development courses for CPA firms, internal auditors, and government 
auditors. 

The primary emphasis in this text is on the auditor’s decision-making process 
in a financial statement audit, as well as an integrated audit of both financial state- 
ments and internal control over financial reporting required for accelerated filer 
public companies. We believe that the most fundamental concepts in auditing con- 
cern determining the nature and amount of evidence the auditor should gather after 
considering the unique circumstances of each engagement. If students of auditing 
understand the objectives to be accomplished in a given audit area, the risks related to 
the engagement, and the decisions to be made, they should be able to determine the 
appropriate evidence to gather and how to evaluate the evidence obtained. 

Our objective is to provide up-to-date coverage of globally recognized audit- 
ing concepts with practical examples of the implementation of those concepts in 
real-world settings. The collective experience of the author team in the practice of 
auditing is extensive. We have all worked in the auditing profession involving both 
large international audit firms and regional firms. Members of our author team have 
taught extensively in continuing education for either large international or small CPA 
firms and have been involved in standards setting activities of the Auditing Standards 
Board and the PCAOB. One author served over seven years as one of the board mem- 
bers of the Committee of Sponsoring Organizations of the Treadway Commission 
(COSO). These experiences provide unique perspectives about the integration of 
auditing concepts in real-world settings. 

As the title of this book reflects, our purpose is to integrate the most important 
internationally recognized concepts of auditing in a logical manner to assist stu- 
dents in understanding audit decision making and evidence accumulation in today’s 
complex, global auditing environment. For example, developments related to issues 
affecting auditing in a global and economically volatile environment are described 
throughout the book and are emphasized in selected mid-chapter vignettes and 
homework problems. Key concepts related to risk assessment as emphasized in stan- 
dards issued by the Auditing Standards Board (ASB) and the International Auditing 
and Assurance Standards Board (IAASB), including emphasis on significant risks, 
are integrated into all of the planning chapters, as well as each chapter dealing with 
a particular transaction cycle and related accounts. Our coverage of internal control 
is related to tests of controls and substantive tests of transactions that are performed 
in a financial statement audit and an integrated audit of financial statements and 
internal control over financial reporting, with an emphasis on the requirements of 
PCAOB Auditing Standards. Tests of controls and substantive tests of transactions 
are, in turn, related to the tests of details of financial statement balances for the area. 
Audit sampling is applied to the evaluation of audit evidence rather than treated as a 
separate topic. Risk assessment, technology, fraud, and auditing of internal control 
issues are integrated throughout the chapters. 
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WHAT?’S NEW IN THIS EDITION 


Current Coverage 


AICPA Clarity Projects 


Coverage of Revised 
AICPA Code of 
Professional Conduct 


Expanded Coverage of 
Professional Skepticism 
and Auditor Judgment 
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New auditing standards are released without regard to textbook revision cycles. As audit- 
ing instructors, we appreciate how critical it is to have the most current content available. 
This edition includes complete coverage of the AICPA Clarity Project, including guidance 
in the recently issued SAS No. 130 An Audit of Internal Control Over Financial Reporting That Is 
Integrated With an Audit of Financial Statements and new PCAOB standards including Standard 
No. 18, Related Parties. We are committed to continually providing you with up-to-date 
content in this dynamic global auditing environment and will keep you updated with 
highlights posted on our Web site of major changes in new standards as they are issued. 


As part of the effort to converge U.S. auditing standards with international standards, the 
AICPA Auditing Standards Board (ASB) recently completed its Clarity Project to redraft 
most of the existing GAAS standards to not only align them with the ISAs, but to also 
make them easier to read, understand, and apply. Chapter 2 provides an overview of the 
major implications of the clarified standards, including the new principles that provide 
the framework to help auditors fulfill the objectives of the audit of financial statements 
in accordance with AICPA auditing standards and the new Codification of Statements on 
Auditing Standards. Chapter 3 contains examples of the new standard auditor’s report 
format updated by the Clarified SASs. All remaining chapters of the textbook reflect the 
various revisions resulting from the issuance of the Clarity standards. 

The AICPA’s Accounting and Review Services Committee (ARSC) has largely 
completed a similar Clarity Project affecting compilation and review standards with 
the issuance of SSARS No. 21, Statement on Standards for Accounting and Review Services: 
Clarification and Recodification. In redrafting SSARS, the ARSC used similar redrafting 
standards as those used by the Auditing Standards Board. Changes resulting from the 
redrafting of SSARS are addressed in Chapter 25. Additionally, that chapter also high- 
lights forthcoming changes in Statements on Standards for Attestation Engagements 
(SSAEs) resulting from the AICPA’s Clarity Project affecting attestation standards, 
which was recently voted for final issuance by the ASB. 


The AICPA recently restructured its Code of Professional Conduct to align it with inter- 
national standards. The organization of the Code now presents the Principles as part 
of the Preface and then includes Rules for members in public practice separately 
from Rules for members in business and others. Chapter 4 has been substantially 
revised to provide an overview of the key elements of the revised Code based on this 
new structure. 


With the profession’s continued focus on the importance of applying appropriate lev- 
els of professional skepticism, we have expanded coverage of this topic in Chapter 6, 
along with integrated coverage in later chapters, including Chapter 10, which ad- 
dresses the auditor’s responsibilities for detecting fraud. We discuss the importance of 
a questioning mindset and the need to critically evaluate audit evidence to strengthen 
student awareness of the elements of effective professional skepticism. 

To assist auditors with maintaining an appropriate level of professional skepti- 
cism when making professional judgments during an audit, this edition features the 
Center for Audit Quality’s Professional Judgment Resource, which outlines key elements 
of a process that auditors apply when making professional judgments. Chapter 6 
illustrates an effective decision-making process that guides auditors’ thinking to help 
them be aware of their own judgment tendencies, traps, and biases. We have added 
homework problems that expose students to this judgment framework and a number 
of the common traps and biases. 
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The requirements of the Sarbanes—Oxley Act of 2002 and the PCAOB Auditing 
Standard 5 (AS 5) that impact accelerated filer public companies, and the risk assess- 
ment standards issued by the Auditing Standards Board are integrated throughout the 
text. Chapter 2 emphasizes the importance of understanding the client’s business and 
its environment, including internal control. Chapter 3 highlights reporting on internal 
controls over financial reporting for auditors of accelerated filer public companies. 

We have always emphasized understanding the client’s business and industry in 
planning. For the 16th edition we reorganized Chapters 8-12 to include expanded 
coverage of the auditor’s performance of risk assessment procedures, including the 
identification of significant risks. Chapter 9 addresses the performance of risk assess- 
ment procedures to address the risk of material misstatement, followed in Chapter 10 
with discussion of assessing and responding to the risk of fraud. 

Our coverage in Chapters 11 and 12 of internal controls, including coverage of 
IT general and application controls, has been restructured to reflect key elements of 
COSO’s 2013 revision of its Internal Control—Integrated Framework and to better inte- 
grate the auditor’s consideration of both manual and automated controls. Chapter 11 
introduces students to important elements of effective internal controls, including 
those related to IT, while Chapter 12 outlines the auditor’s responsibilities to under- 
stand the design and operating effectiveness of internal control, and also highlights 
auditor reports on internal control over financial reporting. Subsequent chapters that 
focus on the transaction cycles include extensive coverage of internal controls to help 
students understand how the auditor's consideration of internal controls is integrated 
for audits of the financial statements and internal controls over financial reporting. 


Chapter 1 introduces the importance of considering international auditing standards 
developments, followed by discussion in Chapter 2 about the role of the International 
Auditing and Assurance Standards Board (IAASB) in the issuance of international 
standards on auditing (ISAs) and the Auditing Standards Board’s efforts to con- 
verge U.S. standards to international standards. Chapter 3 highlights implications 
for auditor reports on companies reporting under International Financial Reporting 
Standards (IFRS). Several chapters throughout the book include text or mid-chapter 
vignette coverage of international issues, and international issues are also addressed in 
homework problems. 


With the increasing volume and complexity of various types of financial instruments 
and challenges associated with fair value accounting, Chapter 23 addresses issues as- 
sociated with auditing financial instruments and obtaining sufficient appropriate 
audit evidence for fair value account estimates. We believe this guidance will help 
strengthen student understanding of the challenges associated with auditing financial 
instruments. 


With more organizations taking advantage of cloud computing options and third 
party IT service providers, there is a greater need for information about the design and 
operating effectiveness of internal controls provided by these external service pro- 
viders. This 16th edition contains expanded coverage of service organization control 
(SOC) reports issued by service center auditors. Both Chapters 12 and 25 reflect the 
new guidance for service auditors reporting on internal controls at service organiza- 
tions, including coverage of the different types of reports provided in SOC 1, SOC 2, 
and SOC 3 engagements. 
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Expanded Coverage 

on Risk Assessment 
Procedures and 
Understanding Internal 
Control 


Emphasis on 
International Issues 


Coverage of Financial 
Instruments 
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Controls (SOC) Reports 


New Coverage of 
Preparation Service 
Engagements 


New Concept Checks 


Expanded Homework 
Material 


Data Analysis Problems 


Hillsburg Hardware 
Annual Report 


Pinnacle Manufacturing 
Integrated Case 
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The issuance of SSARS No. 21 introduced a new type of nonattest engagement service 
that allows nonissuers to engage a CPA to help management prepare monthly, quar- 
terly, or annual financial statements without providing any assurance on the financial 
statements or issuing a report, even if the financial statements are expected to be used 
by, or provided to, a third party. Chapter 25 describes this new type of service and dis- 
tinguishes it from compilation and review engagement requirements. 


A new feature in the 16th edition is the inclusion of Concept Checks periodically 
within each chapter that highlight short-answer questions to help students recap con- 
tent covered within different sections of the chapter. These short in-chapter review 
questions are intended to help call student attention to key concepts as they read the 
material in the chapter. 


We are excited about the inclusion of a number of changes to the end-of-chapter home- 
work material for all chapters. For the 16th edition, we have partnered with Becker CPA 
Review to include new multiple choice problems from their CPA exam preparation 
materials. These problems, which are included in all 26 chapters, are labeled with the 
Becker logo. Additionally, each chapter identifies new or revised Discussion Questions 
and Problems that instructors can use in class to generate discussion about important 
topics addressed in each chapter. These problems are highlighted by an “in-class” dis- 
cussion icon in the margin next to the related homework problem. Each chapter also 
identifies homework problems that require students to research standards and other 
material using the Internet. While many of these research problems expose students 
to standards, such as those on the PCAOB Web site, other problems require students to 
examine recently issued financial statements or other corporate filings, or they expose 
students to best practices thought papers as part of the assignment. Sample problems, 
assignable in MyAccountingLab, provide an introduction to the CPA Exam format and 
an opportunity for early practice with CPA exam-style questions. 


CPA firms expect auditors to analyze data using spreadsheets and audit software. A 
number of the problems in the text can be completed using Excel templates avail- 
able on the text Web site. These problems are indicated by a spreadsheet icon in the 
margin next to the problem. CPA firms increasingly emphasize data analytics and 
increasingly use audit software to perform audit testing including tests for fraud. 
We have included selected problems using ACL in several chapters in the text. These 
problems are related to the topic of the chapter so that students can see how audit 
software is used to perform specific types of audit tests. Guidance for students on the 
use of ACL is included on the text Web site. 


The annual report for the Hillsburg Hardware Company is included as an insert to the 
text. Financial statements and other information included in the annual report are 
used in examples throughout the text to illustrate chapter concepts. The annual re- 
port also includes management’s report on internal control required by Section 404a 
and the auditor’s report required by Section 404b, consistent with PCAOB Auditing 
Standard No. 5. 


The Pinnacle Manufacturing integrated case is based on a large, multi-division com- 
pany. The case has been revised and expanded to now consist of seven parts included 
at the end of the chapter to which that part relates. Each part of the case is designed 
to give students hands-on experience, and the parts of the case are connected so that 
students will gain a better understanding of how the parts of the audit are integrated 
by the audit process. 
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The text is divided into six parts. The chapters are relatively brief and designed to be 
easily read and comprehended by students. 


Part I, The Auditing Profession (Chapters I-5) The book begins with an open- 
ing vignette featuring a Big 4 public accounting firm’s assurance report contained 
in the Corporate Sustainability Report issued by United Parcel Service (UPS), to 
help students see the increasingly important role of auditors in providing assur- 
ance on a broad range of information important to key stakeholders. Chapter 1 in- 
troduces key provisions of the Sarbanes—Oxley Act, including the creation of the 
PCAOB and Section 404 internal control reporting requirements. Chapter 2 covers 
the CPA profession, with particular emphasis on the standards setting responsibili- 
ties of the International Auditing and Assurance Standards Board ([AASB) and the 
PCAOB and how those responsibilities differ from those of the AICPA Auditing 
Standards Board (ASB). Chapter 2 provides in-depth coverage of the AICPA Clarity 
Project and resulting changes to AICPA auditing standards. Chapter 3 provides a 
detailed discussion of audit reports issued under AICPA and PCAOB standards, in- 
cluding a separate section on the report on internal control over financial report- 
ing for an accelerated filer public company. The chapter also emphasizes conditions 
affecting the type of report the auditor must issue and the type of audit report ap- 
plicable to each condition under varying levels of materiality. Chapter 4 explains 
ethical dilemmas, professional ethics, and independence, and it features the newly 
revised AICPA Code of Professional Conduct. Chapter 5 ends this part with an investi- 
gation of auditors’ legal liability. 


Part 2, The Audit Process (Chapters 6-13) The first two of these chapters deal 
with auditor and management responsibilities, professional skepticism, a profes- 
sional judgment framework for auditor decision making, audit objectives, gen- 
eral concepts of evidence accumulation, and audit documentation, including the 
management assertions and evidence concepts in the risk assessment standards. 
Chapter 8 deals with planning the engagement, including understanding the com- 
pany’s business and its industry as part of the auditor's risk assessment procedures, 
using analytical procedures as an audit tool, and making preliminary judgments 
about materiality. Chapter 9 provides expanded coverage of the auditor’s perfor- 
mance of risk assessment procedures used to assess the risk of material misstate- 
ment due to fraud or error and how the auditor responds to risks of significant 
misstatement with further audit procedures. Fraud auditing is the focus of Chapter 
10, which builds upon risk assessment concepts covered in the previous chapter to 
illustrate how risk assessment includes the assessment of fraud risk. The chapter 
also includes specific examples of fraud and discusses warning signs and proce- 
dures performed in response to heightened fraud risk. Chapter 11 outlines the key 
components of an effective system of internal controls over financial reporting, 
consistent with the 2013 revision of COSO’s Internal Control—Integrated Framework. 
Because most internal control systems are heavily dependent on information tech- 
nologies, this chapter integrates coverage of IT general controls and application 
controls. Chapter 12 shows how effective internal controls can reduce planned au- 
dit evidence in the audit of financial statements, and it outlines procedures auditors 
perform as tests of those controls to support a low control risk assessment. The 
chapter also describes how auditors of accelerated filer public companies integrate 
evidence to provide a basis for their report on the effectiveness of internal control 
over financial reporting with the assessment of control risk in the financial state- 
ment audit. Chapter 13 summarizes Chapters 6 through 12 and integrates them 
with the remainder of the text. 
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ORGANIZATION 


Part 3, Application of the Audit Process to the Sales and Collection Cycle 
(Chapters 14-17) These chapters apply the concepts from Part 2 to the audit of 
sales, cash receipts, and the related income statement and balance sheet accounts. 
The appropriate audit procedures for accounts in the sales and collection cycle are 
related to internal control and audit objectives for tests of controls, substantive 
tests of transactions, and tests of details of balances in the context of both the audit 
of financial statements and the audit of internal control over financial reporting. 

Students also learn to apply audit sampling to the audit of sales, cash receipts, and 
accounts receivable. Chapter 15 begins with a general discussion of audit sampling 
for tests of controls and substantive tests of transactions. Similarly, Chapter 17 begins 
with general sampling concepts for tests of details of balances. The next topic in each 
chapter is extensive coverage of nonstatistical sampling. The last part of each chapter 
covers statistical sampling techniques. 


Part 4, Application of the Audit Process to Other Cycles (Chapters 18-23) Each 
of these chapters deals with a specific transaction cycle or part of a transaction cycle 
in much the same manner as Chapters 14 through 17 cover the sales and collection 
cycle. Each chapter in Part 4 demonstrates the relationship of internal controls, tests 
of controls, and substantive tests of transactions for each broad category of transac- 
tions to the related balance sheet and income statement accounts. We integrate dis- 
cussion of implications related to the audit of internal control throughout all these 
transaction cycle chapters. Cash and financial instruments are studied late in the text 
to demonstrate how the audit of cash and financial instrument balances is related to 
most other audit areas. 


Part 5, Completing the Audit (Chapter 24) This part includes only one chapter, 
which deals with performing additional tests to address presentation and disclosure 
objectives, summarizing all audit tests, reviewing audit documentation, obtaining 
management representations in an integrated audit of financial statements and inter- 
nal control, communicating with those charged with governance, and all other as- 
pects of completing an audit. 


Part 6, Other Assurance and Nonassurance Services (Chapters 25 and 26) 
The last two chapters deal with various types of engagements and reports, 
other than the audit of financial statements using generally accepted account- 
ing principles. Topics covered include assurance services; review, compilation, 
and preparation services; agreed-upon procedures engagements; attestation 
engagements; other audit engagements; internal financial auditing; governmental 
financial auditing; and operational auditing. This edition also includes expanded 
coverage of service organization control (SOC) reports on internal controls at 
external service providers. 


SUPPLEMENTS 


Instructor’s Resource Center www.pearsonglobaleditions.com/arens This 
password-protected site is accessible from the catalog page for Auditing and Assurance 
Services, 16th ed., and hosts the following resources: 
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Image Library The Image Library allows access to most of the images and illustra- 
tions featured in the text. 


Instructor’s Resource Manual Suggestions for each chapter include: Homework 
problems, how learning objectives correlate with chapter problem material, and vi- 
sual aids that can be added to PowerPoint slides or used on document cameras or 
overhead projectors. Chapters have been designed so that their arrangement and se- 
lection provide maximum flexibility in course design. Sample syllabi and suggested 
term projects are provided. 


Solutions Manual Included are detailed solutions to all the end-of-chapter exercises, 
problems, and cases. Guidelines for responses to review questions and discussion 
questions are offered. 


Test Item File & TestGen The Test Item File includes multiple choice exercises, 
true/false responses, essay questions, and questions related to the chapter vignettes. 
To assist the instructor in selecting questions for use in examinations and quizzes, 
each question has been assigned one of three difficulty ratings—easy, medium, or 
challenging. In addition, questions that uniquely relate to the integrated audits of 
large public companies or to the provisions of the Sarbanes—Oxley Act and Section 
404 have been separately labeled for easy identification by the professor. TestGen 
testing software is an easy-to-use computerized testing program. It can create exams 
as well as evaluate and track student results. All Test Item File questions are available 
in the TestGen format. 


PowerPoint Slides PowerPoint presentations are available for each chapter of the 
text. Instructors have the flexibility to add slides and/or modify the existing slides to 
meet course needs. 


Enhanced Companion Web Site Pearson’s Learning on the Internet Partnership 
offers the most expansive Internet-based support available. Our Web site provides 
a wealth of resources for students and faculty. Periodically, faculty will be able to ac- 
cess electronic summaries and PowerPoint slides of the most recent changes to pro- 
fessional standards and summaries of major issues affecting the auditing profession. 
This will help instructors to stay informed of emerging issues. 


MyAccountingLab® MyAccountingLab is an online homework, tutorial, and assess- 
ment program designed to work with this text to engage students and improve re- 
sults. Within its structured environment, students practice what they learn, test their 
understanding, and receive immediate feedback to help them better absorb course 
material and understand difficult concepts. 
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Summary of the Audit Process 


PHASE | 
Plan and design an 
audit approach 


PHASE II 
Perform tests of 
controls and 
substantive tests 
of transactions 


PHASE III 

Perform substantive 
analytical procedures 
and tests of details 
of balances 


PHASE IV 
Complete the 
audit and 
issue an 

audit report 


Accept client and perform 
initial audit planning 


Understand the client’s 
business and industry 


Perform preliminary 
analytical procedures 


Set preliminary judgment 
of materiality and 
performance materiality 


Identify significant risks 
due to fraud or error 


Assess inherent risk 


Understand internal control 
and assess control risk 


Finalize overall audit 
strategy and audit plan 


Plan 
to reduce 
assessed level of 
control 
risk? 


Perform tests of controls* 


Perform substantive tests 
of transactions 


Assess likelihood of misstatements 


in financial statements 


High or 


Medium 
£ unknown 


Perform substantive 
analytical procedures 


Perform tests of key items 


Perform additional tests 
of details of balances 


Perform additional tests for 
presentation and disclosure 


Accumulate final evidence 


Evaluate results 


Issue audit report 


Communicate with audit 
committee and management 


*The extent of tests of controls is determined by planned reliance on controls. For public 
companies required to have an audit of internal control, testing must be sufficient to issue 
an opinion on internal control over financial reporting. 
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THE AUDITING 
\ PROFESSION 


CHAPTERS I-5 


hese first five chapters in PART |! provide background 
for performing financial audits, which is our primary 
focus. This background will help you understand why 
auditors perform audits the way they do. 


Chapters | and 2 describe assurance services, 
including auditing and the role of certified public 
accounting (CPA) firms and other organizations in 
performing audits of financial statements and other 
information. 


Chapter 3 provides a detailed discussion of audit 
reports, which are the final products of audits. 


Chapters 4 and 5 emphasize the regulation and 
oversight of CPA firms through ethical standards and 
the legal responsibilities of auditors. 
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THE DEMAND FOR AUDIT 


AND OTHER ASSURANCE 
SERVICES 


Monozukuri by KOBELCO 


Kobe Steel, Ltd. (KOBELCO), one of Japan’s leading steelmakers and supplier of aluminum and 
copper products, has been around for more than a century since their establishment in 1905. 
Apart from involving themselves in the metal industry, KOBELCO has interests in wholesale 
power supply, machinery, construction machinery, real estate, and electronic materials. 


KOBELCO conducts Corporate Social Responsibility (CSR) activities that contribute to the 
environment and society through monozukuri (or manufacturing). The literal translation of 
monozukuri is ‘production’. ‘Mono’ means the the thing which is made and ‘Zukuri means the 
act of making. The closest concept in 
the English language to monozukuri is 
‘craftsmanship’. This is a key element 
of the company’s philosophy. Japan 
is a country that is prone to many 
natural disasters like typhoons, earth- 
quakes and landslides. The company 
aims to protect lives and livelihoods 
from these disasters. It is constantly 
developing technology in different 
fields using the monozukuri concept. 


It is important to note that natural 
disasters management is costly. It 
was estimated that $14.5 to $34.6 billion lost in the 2011 Tohoku earthquake and tsunami. 
15,893 people were confirmed dead, 6,152 were injured, and 2,572 people are still reported 
missing. Any repeat of the Tohoku earthquake and tsunami will be devastating to Japan. 
Monozukuri disaster protective technologies could hopefully mitigate both human tragedy 
and monetary losses from similar disasters in the future. 


KOBELCO established a Compliance Committee to advise the board of directors to facilitate 
discussion, make proposals, and conduct follow-up verification related to important CSR issues 
(especially environmental management activities). KOBELCO has adopted specific CSR guidelines 
in the form of their Corporate Code of Ethics. The CSR Committee compiles information con- 
cerning the CSR activities and publishes it each year in the form of the Kobe Steel Group Sustain- 
ability Report. For example, KOBELCO donated 200 million yen and relief goods in the form of 
construction equipment valued at 100 million yen to the Tohoku earthquake and tsunami relief. 


The company requires their corporate auditing system to be strong and independent as 
required in the Companies Act of Japan. The Audit and Supervisory Board would have inde- 
pendent members that are independent of the Board of Directors and members from within 
the management. Apart from the external auditors, the company engages a team of Internal 
Auditors who operate as an independent entity in the company. 


Sources: KOBELCO’s CSR website http://www.kobelco.co.jp/english/about_kobelco/csr/index. 
html (Accessed 9 October 2015), SA Partners (2012) Toyota's Monozukuri, SA Partners LLP, 
Caerphilly, United Kingdom apartners.com/wp-content/uploads/20 | 2/08/Toyotas-Monozukuri.pdf 
(Accessed 9 October 2015). 


Each chapter’s opening story illustrates important auditing principles based on realistic situations. Some of 
these stories are based on public information about real companies, whereas others are fictitious. Any re- 
semblance in the latter stories to real firms, companies, or individuals is unintended and purely coincidental. 


CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


I-1 Describe auditing. 

1-2 Distinguish between auditing 
and accounting. 

1-3 Explain the importance of 
auditing in reducing information 
risk. 

1-4 List the causes of information 
risk, and explain how this risk 
can be reduced. 

1-5 Describe assurance services 
and distinguish audit services 
from other assurance and 
nonassurance services provided 
by CPAs. 

1-6 Differentiate the three main 
types of audits. 

1-7 Identify the primary types 
of auditors. 

1-8 Describe the requirements 
for becoming a CPA. 
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The opening example involving KOBELCO illustrates the increasingly important role CSR and corporate 
governance reporting, compliance and assurance to a broad range of stakeholders. Of course, reporting on the finan- 
cial statements of public companies, as well as private companies, government units, and nonprofit entities, remains 
a primary role of auditors. In addition, auditors provide assurance on internal control over financial reporting for 
larger public companies. 

This chapter introduces auditing and other assurance services provided by auditors, as well as auditors’ role in 
society. These services provide value by offering assurance on financial statements, the effectiveness of internal con- 
trol, and many other types of information. There is also a discussion of the types of audits and auditors, including 
the requirements for becoming a certified public accountant (CPA). 


NATURE OF AUDITING 
‘OBJECTIVE 1-1 We have introduced the role of auditors in society and how auditors provide assurance 


on financial statements. Auditors also provide assurance on the effectiveness of inter- 
nal control over financial reporting, as well as many other types of information such 
as corporate sustainability reports. We now examine auditing more specifically using 
the following definition: 


Describe auditing. 


Auditing is the accumulation and evaluation of evidence about information to determine and 


report on the degree of correspondence between the information and established criteria. 
Auditing should be done by a competent, independent person. 


The definition includes several key words and phrases. For ease of understanding, 
we'll discuss the terms in a different order than they occur in the description. 


To do an audit, there must be information in a verifiable form and some standards 
(criteria) by which the auditor can evaluate the information. This information can take 
many forms. Auditors routinely perform audits of quantifiable information, including 
companies’ financial statements and individuals’ federal income tax returns. Auditors 
also audit more subjective information, such as the effectiveness of computer systems 
and the efficiency of manufacturing operations. 

The criteria for evaluating information also vary depending on the information 
being audited. In the audit of historical financial statements by CPA firms, the cri- 
teria may be U.S. generally accepted accounting principles (GAAP) or International 
Financial Reporting Standards (IFRS). This means that in an audit of Apple’s finan- 
cial statements, the CPA firm will determine whether Apple’s financial statements 
have been prepared in accordance with GAAP. For an audit of internal control over 
financial reporting, the criteria will be a recognized framework for establishing inter- 
nal control, such as Internal Control—Integrated Framework issued by the Committee of 
Sponsoring Organizations of the Treadway Commission (widely known as COSO). 

For the audit of tax returns by the Internal Revenue Service (IRS), the criteria are 
found in the Internal Revenue Code. In an IRS audit of Apple’s corporate tax return, the 
internal revenue agent uses the Internal Revenue Code as the criteria for correctness, 
rather than GAAP. 

For more subjective information, it is more difficult to establish criteria. Typi- 
cally, auditors and the entities being audited agree on the criteria well before the audit 
starts. For example, in an audit of the effectiveness of specific aspects of computer 
operations, the criteria might include the allowable level of input or output errors. 


Information and 
Established Criteria 


Evidence is any information used by the auditor to determine whether the informa- 
tion being audited is stated in accordance with the established criteria. Evidence takes 
many different forms, including: 


Accumulating and 
Evaluating Evidence 


* Electronic and documentary data about transactions 
¢ Written and electronic communication with outsiders 
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* Observations by the auditor 
* Oral testimony of the auditee (client) 


To satisfy the purpose of the audit, auditors must obtain a sufficient quality and 
quantity of evidence. Auditors must determine the types and amount of evidence 
necessary and evaluate whether the information corresponds to the established 
criteria. This is a critical part of every audit and the primary subject of this book. 


The auditor must be qualified to understand the criteria used and must be competent 
to know the types and amount of evidence to accumulate in order to reach the proper 
conclusion after examining the evidence. The auditor must also have an independent 
mental attitude. The competence of those performing the audit is of little value if they are 
biased in the accumulation and evaluation of evidence. 

Auditors strive to maintain a high level of independence to keep the confidence 
of users relying on their reports. Auditors reporting on company financial statements 
are often called independent auditors. Even though such auditors are paid fees by 
the company, they are normally sufficiently independent to conduct audits that can 
be relied on by users. Even internal auditors—those employed by the companies they 
audit—usually report directly to top management and the board of directors, keeping 
the auditors independent of the operating units they audit. 


The final stage in the auditing process is preparing the audit report, which commu- 
nicates the auditor’s findings to users. Reports differ in nature, but all must inform 
readers of the degree of correspondence between the information audited and estab- 
lished criteria. Reports also differ in form and can vary from the highly technical type 
usually associated with financial statement audits to a simple oral report in the case of 
an operational audit of a small department’s effectiveness. 

The key parts in the description of auditing are illustrated in Figure 1-1 using an 
IRS agent’s audit of an individual’s tax return as an example. To determine whether 
the tax return was prepared in a manner consistent with the requirements of the fed- 
eral Internal Revenue Code, the agent examines supporting records provided by the 
taxpayer and from other sources, such as the taxpayer’s employer. After completing 
the audit, the internal revenue agent issues a report to the taxpayer assessing additional 
taxes, advising that a refund is due, or stating that there is no change in the status of 
the tax return. 


FIGURE I-1 Audit of a Tax Return 


Information 


Federal 
tax returns 

Competent, filed by 
independent Accumulates and taxpayer 


erson i 
P evaluates evidence Report on results 


Report on tax 
deficiencies 


Determines 
correspondence 


Internal Examines cancelled 
revenue checks and other 
agent supporting records 


Established criteria 


Internal Revenue 
Code and 
all interpretations 
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Competent, Independent 
Person 


Reporting 


DISTINCTION BETWEEN AUDITING AND ACCOUNTING 


Distinguish between auditing 
and accounting. 


Many financial statement users and the general public confuse auditing with account- 
ing. The confusion results because most auditing is usually concerned with accounting 
information, and many auditors have considerable expertise in accounting matters. 
The confusion is increased by giving the title “certified public accountant” to many 
individuals who perform audits. 

Accounting is the recording, classifying, and summarizing of economic events in a 
logical manner for the purpose of providing financial information for decision making. 
To provide relevant information, accountants must have a thorough understanding of 
the principles and rules that provide the basis for preparing the accounting information. 
In addition, accountants must develop a system to make sure that the entity’s economic 
events are properly recorded on a timely basis and at a reasonable cost. 

When auditing accounting data, auditors focus on determining whether recorded 
information properly reflects the economic events that occurred during the account- 
ing period. Because U.S. or international accounting standards provide the criteria for 
evaluating whether the accounting information is properly recorded, auditors must 
thoroughly understand those accounting standards. 

In addition to understanding accounting, the auditor must possess expertise in the 
accumulation and interpretation of audit evidence. It is this expertise that distinguishes 
auditors from accountants. Determining the proper audit procedures, deciding the 
number and types of items to test, and evaluating the results are unique to the auditor. 


ECONOMIC DEMAND FOR AUDITING 


Explain the importance 
of auditing in reducing 
information risk. 
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Risk 


Arens, Alvin A..2Qhl. Auditing and ARa@nbch FéhHeESAGIODET RM RRROFESS|Qebation Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action ?docID=5185606. 


Created from undip-ebooks on 2020-11-29 17:27:28. 


To illustrate the need for auditing, consider the decision of a bank officer in making 
a loan to a business. This decision will be based on such factors as previous financial 
relationships with the business and the financial condition of the business as reflected 
by its financial statements. If the bank makes the loan, it will charge a rate of interest 
determined primarily by three factors: 


1. Risk-free interest rate. This is approximately the rate the bank could earn by invest- 
ing in U.S. treasury notes for the same length of time as the business loan. 

2. Business risk for the customer. This risk reflects the possibility that the business will 
not be able to repay its loan because of economic or business conditions, such 
as a recession, poor management decisions, or unexpected competition in the 
industry. 

3. Information risk. Information risk reflects the possibility that the information 
upon which the business risk decision was made was inaccurate. A likely cause of 
the information risk is the possibility of inaccurate financial statements. 


Auditing has no effect on either the risk-free interest rate or business risk, but 
it can have a significant effect on information risk. If the bank officer is satisfied 
that there is minimal information risk because a borrower’s financial statements are 
audited, the bank’s risk is substantially reduced and the overall interest rate to the 
borrower can be reduced. The reduction of information risk can have a significant 
effect on the borrower’s ability to obtain capital at a reasonable cost. For example, 
assume a large company has total interest-bearing debt of approximately $10 billion. 
If the interest rate on that debt is reduced by only 1 percent, the annual savings in 
interest is $100 million. 


As society becomes more complex, decision makers are more likely to receive unreli- 
able information. There are several reasons for this: remoteness of information, biases 
and motives of the provider, voluminous data, and the existence of complex exchange 
transactions. 
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Remoteness of Information In a global economy, it is nearly impossible for a deci- 
sion maker to have much firsthand knowledge about the organization with which they 
do business. Information provided by others must be relied upon. When information 
is obtained from others, the likelihood of it being intentionally or unintentionally mis- 
stated increases. 


Biases and Motives of the Provider If information is provided by someone whose 
goals are inconsistent with those of the decision maker, the information may be biased 
in favor of the provider. The reason can be honest optimism about future events or an 
intentional emphasis designed to influence users. In either case, the result is a misstate- 
ment of information. For example, when a borrower provides financial statements to 
a lender, there is considerable likelihood that the borrower will bias the statements to 
increase the chance of obtaining a loan. The misstatement could be incorrect dollar 
amounts or inadequate or incomplete disclosures of information. 


Voluminous Data As organizations become larger, so does the volume of their 
exchange transactions. This increases the likelihood that improperly recorded 
information is included in the records—perhaps buried in a large amount of other 
information. For example, if a business overpays a vendor’s invoice by $2,000, it is 
unlikely to be uncovered unless the company has instituted reasonably sophisticated 
procedures to find this type of misstatement. If many minor misstatements remain 
undiscovered, the combined total can be significant. 


Complex Exchange Transactions In the past few decades, exchange transactions 
between organizations have become increasingly complex and therefore more dif- 
ficult to record properly. The increasing complexity in transactions has also resulted 
in increasingly complex accounting standards. For example, the correct accounting 
treatment of the acquisition of one entity by another poses relatively difficult 
accounting problems, especially as it relates to fair value estimations. Other exam- 
ples include properly combining and disclosing the results of operations of subsid- 
iaries in different industries and properly valuing and disclosing derivative financial 
instruments. 


After comparing costs and benefits, business managers and financial statement users 
may conclude that the best way to deal with information risk is simply to have it remain 
reasonably high. A small company may find it less expensive to pay higher interest 
costs than to incur the costs of reducing information risk. 

For larger businesses, it is usually practical to incur costs to reduce information 
risk. There are three main ways to do so. 


User Verifies Information The user may go to the business premises to examine 
records and obtain information about the reliability of the statements. Normally, this 
is impractical because of cost. In addition, it is economically inefficient for all users 
to verify the information individually. Nevertheless, some users perform their own 
verification. For example, the IRS does considerable verification of business and indi- 
vidual tax returns to determine whether the tax returns filed reflect the actual tax due 
the federal government. Similarly, if a business intends to purchase another business, 
it is common for the purchaser to use a special audit team to independently verify and 
evaluate key information of the prospective business. 


User Shares Information Risk with Management There is considerable legal prec- 
edent indicating that management is responsible for providing reliable information to 
users. If users rely on inaccurate financial statements and as a result incur a financial 
loss, they may have a basis for a lawsuit against management. A difficulty with sharing 
information risk with management is that users may not be able to collect on losses. If 
a company is unable to repay a loan because of bankruptcy, it is unlikely that manage- 
ment will have sufficient funds to repay users. 
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List the causes of information 
risk, and explain how this risk 
can be reduced. 


Reducing Information 
Risk 


FIGURE 1-2 


Relationships Among Auditor, Client, and External Users 


Auditor issues 
report relied upon 
by users to reduce 

information risk 


Client or audit 
committee hires 
auditor 


Provide capital 


External 
Users 


Client provides 
financial statements 
to users 


Audited Financial Statements Are Provided The most common way for users to 
obtain reliable information is to have an independent audit. Typically, management of 
a private company or the audit committee for a public company engages the auditor to 
provide assurances to users that the financial statements are reliable. 

External users such as stockholders and lenders who rely on those financial state- 
ments to make business decisions look to the auditor’s report as an indication of 
the statements’ reliability. Decision makers can then use the audited information on 
the assumption that it is reasonably complete, accurate, and unbiased. They value the 
auditor’s assurance because of the auditor’s independence from the client and knowl- 
edge of financial statement reporting matters. Figure 1-2 illustrates the relationships 
among the auditor, client, and financial statement users. 


CONCEPT CHECK 


1. What is meant by determining the degree of correspondence between information and 
established criteria? What is the criteria for an audit of a company’s financial statements? 


2. What are the major causes of information risk? How can information risk be reduced? 


ASSURANCE SERVICES 


Describe assurance services 
and distinguish audit services 
from other assurance and 
nonassurance services provided 
by CPAs. 
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An assurance service is an independent professional service that improves the 
quality of information for decision makers. Such services are valued because the 
assurance provider is independent and perceived as being unbiased with respect to 
the information examined. Individuals who are responsible for making business 
decisions seek assurance services to help improve the reliability and relevance of the 
information used as the basis for their decisions. 

Assurance services can be done by CPAs or by a variety of other professionals. For 
example, Consumers Union, a nonprofit organization, tests a wide variety of products 
used by consumers and reports their evaluations of the quality of the products tested in 
Consumer Reports. The organization provides the information to help consumers make 
intelligent decisions about the products they buy. Many consumers consider the infor- 
mation in Consumer Reports more reliable than information provided by the product 
manufacturers because Consumers Union is independent of the manufacturers. Simi- 
larly, the Better Business Bureau (BBB) online reliability program, the BBB Accredited 
Business Seal, allows Web shoppers to check BBB information about a company and 
be assured the company will stand behind its service. Other assurance services pro- 
vided by firms other than CPAs include the Nielsen television and Internet ratings and 
Arbitron radio ratings. 
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The need for assurance is not new. CPAs have provided many assurance services 
for years, particularly assurances about historical financial statement information. As 
a result of provisions in Section 404 of the Sarbanes—Oxley Act, CPA firms provide 
assurance on internal control over financial reporting for larger public companies. 
More recently, CPAs have expanded the types of assurance services they perform to 
include other information of interest to investors, customers, and other interested par- 
ties, such as reports on corporate social responsibility and sustainability reports. For 
example, businesses and consumers often seek assurances that companies with which 
they conduct business produce products and services in a socially responsible manner. 
The demand for assurance services continues to grow as shareholders and other stake- 
holders seek assurances about financial and nonfinancial information in addition to 
information in corporate financial reports. 


One category of assurance services provided by CPAs is attestation services. An 
attestation service is a type of assurance service in which the CPA firm issues a report 
about a subject matter or assertion that is made by another party. Primary categories 
of attestation services include: 


¢ Audit of historical financial statements 

¢ Audit of internal control over financial reporting 

° Review of historical financial statements 

* Other attestation services that may be applied to a broad range of subject 
matter 


Audit of Historical Financial Statements In an audit of historical financial 
statements, management asserts that the financial statements are fairly stated in accor- 
dance with applicable U.S. or international accounting standards. An audit of these 
statements is a form of attestation service in which the auditor issues a written report 
expressing an opinion about whether the financial statements are fairly stated in accor- 
dance with the applicable accounting standards. These audits are the most common 
assurance service provided by CPA firms. 

Audits are designed to provide reasonable assurance that the financial statements 
are free of material misstatements. Reasonable assurance is a high, but not absolute 
level of assurance. This level of assurance is usually sufficient to meet the information 
needs of financial statement users. Much of this book is about how auditors design 
tests to provide this level of assurance, considering the client’s business and industry 
and risks of material misstatements in the financial statements. 

Publicly traded companies in the United States are required to have audits under 
the federal securities acts. Auditor reports can be found in all public companies’ annual 
financial reports. Most public companies’ audited financial statements can be accessed 
over the Internet from the Securities and Exchange Commission (SEC) EDGAR data- 
base or directly from each company’s Web site. Many privately held companies also 
have their annual financial statements audited to obtain financing from banks and 
other financial institutions. Government and not-for-profit entities often have audits 
to meet the requirements of lenders or funding sources. 


Audit of Internal Control over Financial Reporting For an audit of internal 
control over financial reporting, management asserts that internal controls 
have been developed and implemented following well established criteria. Section 
404 of the Sarbanes—Oxley Act requires public companies to report management's 
assessment of the effectiveness of internal control. The Act also requires auditors for 
larger public companies to attest to the effectiveness of internal control over finan- 
cial reporting. This evaluation, which is integrated with the audit of the financial 
statements, increases user confidence about future financial reporting, because 
effective internal controls reduce the likelihood of future misstatements in the 
financial statements. 
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Attestation Services 


Review of Historical Financial Statements For a review of historical financial 
statements, management asserts that the statements are fairly stated in accordance 
with accounting standards, the same as for audits. The CPA provides a lower level 
of assurance for reviews of financial statements compared to a high level for audits, 
therefore less evidence is needed. A review is often adequate to meet financial state- 
ment users’ needs. It can be provided by the CPA firm at a much lower fee than an 
audit because less evidence is needed. Many nonpublic companies use this attestation 
option to provide limited assurance on their financial statements without incurring 
the cost of an audit. 


Other Attestation Services CPAs provide numerous other attestation services. 
Typically, the CPA is engaged to provide written assurance about the reliability of an 
assertion made by management. Many of these services are natural extensions of the 
audit of historical financial statements, as users seek independent assurances about 
other types of information. For example, when a bank loans money to a company, the 
loan agreement may require the company to engage a CPA to provide assurance about 
the company’s compliance with the financial provisions of the loan. The company 
requesting the loan must assert the loan provisions to be attested to before the CPA 
can accumulate the evidence needed to issue the attestation report. 

Another type of attestation involves internal controls at service organizations. 
Many companies use a third-party service provider to process some of their account- 
ing activities, such as payroll, offsite at a separate IT service center or through cloud 
computing. The service provider often engages an auditor to provide an attestation 
report on the design and effectiveness of controls at the service organization. This 
report provides assurance to companies that use the service provider that payroll is 
accurately processed. Auditors of companies using the payroll service organization 
can also rely on the attestation report by the service company’s auditor to reduce test- 
ing of payroll activities and accounts. 


CPAs also provide other assurance services that do not meet the definition of attesta- 
tion services. These assurance services differ from attestation services in that the CPA 
is not required to issue a written report, and the assurance does not have to be about 
the reliability of another party’s assertion about compliance with specified criteria. 
These other assurance service engagements focus on improving the quality of infor- 
mation for decision makers, just like attestation services. 

CPA firms face a larger field of competitors in the market for other assurance 
services. Audits and some types of attestation services are limited by regulation to 
licensed CPAs, but the market for other forms of attestation and assurance is open to 
non-CPA competitors. For example, CPAs must compete with market research firms 
to assist clients in the preparation of customer surveys and in the evaluation of the reli- 
ability and relevance of survey information. However, CPA firms have the competitive 
advantage of their reputation for competence and independence. 

The types of assurance services that CPAs can provide are almost limitless. A survey 
of large CPA firms identified more than 200 assurance services that are currently being 
provided. Table 1-1 lists some of the other assurance service opportunities for CPAs. 
Additional information on the performance of assurance and attestation services is 
included in Chapter 25. 


Other Assurance 
Services 


“AND THE OSCAR GOES TO...” You probably recognize these statements from the Academy Awards, the Miss 
America Pageant, and the New York State Lottery drawing. What you may 


“THERE SHE IS, MISS AMERICA...” not recognize is what these well-known events have to do with assurance 


services. Each event is observed by CPAs from a major accounting firm to 
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NEW YORK STATE LOTTERY...” a member of a CPA firm, you might not win an Oscar—but you could be on 


the Oscars! 
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CORPORATE 
RESPONSIBILITY 
REPORTING 
EXPANDS 
GLOBALLY 


Companies report corporate responsibility under a 
number of terms, including corporate responsibility, 
corporate responsibility reporting, and sustain- 
ability reporting. Corporate responsibility report- 
ing continues its tremendous growth, with rapid 
increases in reporting in emerging economies, and is 
now standard practice for many companies around 
the world. Over half of companies reporting globally 
include corporate responsibility information in their 
public annual financial reports. In contrast, only 20 
percent of companies reported this information in 
2011, and less than 10 percent reported it in 2008. 
The debate has changed from whether corporate 
responsibility reporting is worth the cost, to what 
information should be reported and how it should 
be presented. As a result, corporate responsibility 
has become an important element of companies’ 
business strategies to create value for shareholders 
and other stakeholders. 


Reporting using the Global Reporting Initiative 
(GRI) guidelines is increasingly standard, with 78 
percent of reports issued by companies around the 
world prepared based on GRI guidelines. Assur- 
ance on corporate responsibility reporting is also 
becoming standard, with 59 percent of the Global 
Fortune 250 (G250) providing external assurance 
on their responsibility report. Major accounting 
firms were the choice for providing assurance for 
two-thirds of the G250 firms that issued respon- 
sibility reports with external assurance. These 
trends suggest providing assurance on corporate 
responsibility reporting will continue to be an 
area of significant growth for accounting firms. 


Source: KPMG Survey of Corporate Responsibility Reporting 201 3, 
KPMG International. 
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CPA firms perform numerous other services that generally fall outside the scope of 
assurance services. Three specific examples are: 


1. Accounting and bookkeeping services 
2. Tax services 
3. Management consulting services 


Most accounting and bookkeeping services, tax services, and management 
consulting services fall outside the scope of assurance services, although there is 
similarity between some consulting and assurance services. While the primary pur- 
pose of an assurance service is to improve the quality of information, the primary 


TABLE I-1 Other Assurance Services Examples 


Service Activities 


Other Assurance Services 


Controls over and risks related to investments, 
including policies related to derivatives 


Assess the processes in a company’s investment practices to 
identify risks and to determine the effectiveness of those 
processes 


Mystery shopping Perform anonymous shopping to assess sales personnel dealings 


with customers and procedures they follow 


Assess risks of accumulation, distribution, 
and storage of digital information 


Assess security risks and related controls over electronic data, 
including the adequacy of backup and off-site storage 


Develop fraud risk profiles, and assess the adequacy of 
company systems and policies in preventing and detecting 
fraud and illegal acts 


Fraud and illegal acts risk assessment 


Provide assurance on the amount of organic ingredients 
included in a company’s products 


Organic ingredients 


Compliance with entertainment royalty 
agreements 


Assess whether royalties paid to artists, authors, and others 
comply with royalty agreements 


ISO 9000 certifications Certify a company’s compliance with ISO 9000 quality control 
standards, which help ensure company products are of high 


quality 


Corporate responsibility and 
sustainability 


Report on whether the information in a company’s corporate 
responsibility report is consistent with company information 
and established reporting criteria 
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Nonassurance Services 
Provided by CPAs 
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purpose of a management consulting engagement is to generate a recommendation 
to management. 

Although the quality of information is often an important criterion in 
management consulting, this goal is normally not the primary purpose. For 
example, a CPA may be engaged to design and install a new information technology 
system for a client as a consulting engagement. The purpose of that engagement is 
to install the new system, with the goal of improved information being a by-product 
of that engagement. 


TYPES OF AUDITS 
OBJECTIVE 1-600 CPAs perform three primary types of audits, as illustrated with examples in Table 1-2: 


Differentiate the three main 1 Operational audit 
types of audits. 2. Compliance audit 


3. Financial statement audit 


An operational audit evaluates the efficiency and effectiveness of any part of an 
organization’s operating procedures and methods. At the completion of an operational 
audit, management normally expects recommendations for improving operations. 
For example, auditors might evaluate the efficiency and accuracy of processing pay- 
roll transactions in a newly installed computer system. Another example, where most 
accountants feel less qualified, is evaluating the efficiency, accuracy, and customer sat- 
isfaction in processing the distribution of letters and packages by a company such as 
Federal Express. 

In operational auditing, the reviews are not limited to accounting. They can include 
the evaluation of organizational structure, computer operations, production methods, 
marketing, and any other area in which the auditor is qualified. Because of the many 
different areas in which operational effectiveness can be evaluated, it is impossible to 
characterize the conduct ofa typical operational audit. In one organization, the auditor 
might evaluate the relevancy and sufficiency of the information used by management 
in making decisions to acquire new fixed assets. In a different organization, the auditor 
might evaluate the efficiency of the information flow in processing sales. 

It is more difficult to objectively evaluate whether the efficiency and effective- 
ness of operations meets established criteria than it is for compliance and financial 
statement audits. Also, establishing criteria for evaluating the information in an oper- 
ational audit is extremely subjective. In this sense, operational auditing is more like 
management consulting than what is usually considered auditing. Operational audit- 
ing is discussed in greater depth in Chapter 26. 


Operational Audits 


TABLE I-2 Examples of the Three Types of Audits 


Type of Audit Example Information Established Criteria Available Evidence 


Operational Evaluate whether the Number of payroll records Company standards Error reports, payroll 
audit computerized payroll processed in a month, for efficiency and records, and payroll 
processing for a Chinese costs of the department, effectiveness in pay- processing costs 
subsidiary is operating and number of errors made roll department 

efficiently and effectively 


Compliance Determine whether bank Company records Loan agreement Financial statements and 
audit requirements for loan provisions calculations by the 
continuation have been met auditor 


Financial Annual audit of Apple’s financial Apple’s financial statements Generally accepted Documents, records, 
statement statements accounting principles and outside sources of 
audit evidence 
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A compliance audit is conducted to determine whether the auditee is following 
specific procedures, rules, or regulations set by some higher authority. Following are 
examples of compliance audits for a private business. 


Compliance Audits 


¢ Determine whether accounting personnel are following the procedures 
prescribed by the company controller. 

¢ Review wage rates for compliance with minimum wage laws. 

* Examine contractual agreements with bankers and other lenders to be sure the 
company is complying with legal requirements. 

* Determine whether a mortgage bank is in compliance with newly-enacted 
government regulations. 


Governmental units, suchas school districts, are subject to considerable compliance 
auditing because of extensive government regulation. Many private and not-for-profit 
organizations have prescribed policies, contractual agreements, and legal require- 
ments that may require compliance auditing. Compliance audits for federally funded 
grant programs are often done by CPAs and are discussed in detail in Chapter 26. 

Results of compliance audits are typically reported to management, rather than 
outside users, because management is the primary group concerned with the extent of 
compliance with prescribed procedures and regulations. Therefore, a significant por- 
tion of work of this type is often done by auditors employed by the organizational 
units. When an organization such as the IRS wants to determine whether individuals 
or organizations are complying with its requirements, the auditor is employed by the 
organization issuing the requirements. 


A financial statement audit is conducted to determine whether the financial state- 
ments (the information being verified) are stated in accordance with specified criteria. 
Normally, the criteria are U.S. or international accounting standards, although auditors 
may conduct audits of financial statements prepared using the cash basis or some other 
basis of accounting appropriate for the organization. In determining whether financial 
statements are fairly stated in accordance with accounting standards, the auditor gath- 
ers evidence to determine whether the statements contain material errors or other mis- 
statements. The primary focus of this book is on financial statement audits. 


Financial Statement 
Audits 


According to the Association of Certified Fraud 
Examiners (ACFE), businesses lose an estimated $3.5 
billion annually to fraud and financial crime. As a 


Fraud examiners perform a variety of forensic 
investigations such as examining books and 
records to detect and trace fraudulent transac- 


FRAUD 
EXAMINERS 


USE BIG DATA 
AND OTHER 
TOOLS TO FIGHT 
FINANCIAL 
FRAUD 
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result, demand for forensic accountants continues to 
increase. The ACFE is the world’s largest anti-fraud 
organization, with nearly 75,000 members. Certified 
Fraud Examiners (CFEs) have expertise in fraud pre- 
vention, detection, and deterrence, and are trained 
to identify the warning signs of fraud and increased 
fraud risk. CFEs have a unique skill set that combines 
knowledge of complex financial transactions with an 
understanding of methods, laws, and investigation of 
fraud allegations. 

Because fraud is increasingly digital, data analytics 
is one of the best weapons in fraud detection. Cloud 
computing allows companies to consolidate data 
across locations and search for and detect unusual 
patterns in real time. For example, using Benford’s 
Law (a formula for the expected frequency of digits 
in a list of numbers), one forensic team detected that 
several call center operators had issued fraudulent 
refunds to themselves, friends, and family members 
that totaled several hundred thousand dollars. 


tions, interviewing suspects to obtain information 
and confessions, writing investigation reports, 
testifying at trials, and understanding factors that 
motivate individuals to commit fraud. Foren- 

sic accountants often work side-by-side with 
criminal justice and law enforcement personnel, 
as well as computer specialists, in conduct- 

ing fraud examinations. Such examinations may 
relate to financial statement fraud, asset misap- 
propriations, money laundering, bribery, or more 
recently, theft of information via computer hacking, 
and a long list of other fraudulent activities. 


Sources: |. The Association of Certified Fraud Examiners 
Web site (www.acfe.org); 2. Sarah Diamond, “How to Use 
Big Data to Fight Financial Fraud” (September 22, 2014) 
(www.forbes.com); 3. Jo Craven McGinty, “Accountants 
Increasingly Use Data Analysis to Catch Fraud” (December 5, 
2014) (www.wsj.com). 


As businesses increase in complexity, it is no longer sufficient for auditors to focus 
only on accounting transactions. An integrated approach to auditing considers both 
the risk of misstatements and operating controls intended to prevent misstatements. 
The auditor must also have a thorough understanding of the entity and its environment. 
This understanding includes knowledge of the client’s industry and its regulatory and 
operating environment, including external relationships, such as with suppliers, cus- 
tomers, and creditors. The auditor also considers the client’s business strategies and 
processes and critical success factors related to those strategies. This analysis helps the 
auditor identify business risks associated with the client’s strategies that may affect 
whether the financial statements are fairly stated. 


TYPES OF AUDITORS 
‘OBJECTIVE 1-700 Several types of auditors are in practice today. The most common are certified public 


accounting firms, government accountability office auditors, internal revenue agents, 


Identify the primary types ‘ 7 
ee foils and internal auditors. 


of auditors. 


Certified public accounting firms are responsible for auditing the historical financial 
statements of all publicly traded companies, most other reasonably large companies, 
and many smaller companies and noncommercial organizations. Because of the wide- 
spread use of audited financial statements in the U.S. economy, as well as businessper- 
sons’ and other users’ familiarity with these statements, it is common to use the terms 
auditor and CPA firm synonymously, even though several different types of auditors 
exist. The title certified public accounting firm reflects the fact that auditors who express 
audit opinions on financial statements must be licensed as CPAs. CPA firms are often 
called external auditors or independent auditors to distinguish them from internal auditors. 


Certified Public 
Accounting Firms 


A government accountability office auditor is an auditor working for the U.S. 


reneaet iti Government Accountability Office (GAO), a nonpartisan agency in the legislative 
Cas i ad branch of the federal government. Headed by the Comptroller General, the GAO 
uditors 


reports to and is responsible solely to Congress. 

The GAO’s primary responsibility is to perform the audit function for Congress, 
and it has many of the same audit responsibilities as a CPA firm. The GAO audits much 
of the financial information prepared by various federal government agencies before 
it is submitted to Congress. Because the authority for expenditures and receipts of 
governmental agencies is defined by law, there is considerable emphasis on compli- 
ance in these audits. 

An increasing portion of the GAO’s audit efforts are devoted to evaluating the 
operational efficiency and effectiveness of various federal programs. Also, because of 
the immense size of many federal agencies and the similarity of their operations, the 
GAO has made significant advances in developing better methods of auditing through 
the widespread use of highly sophisticated statistical sampling and computer risk 
assessment techniques. 

In many states, experience as a GAO auditor fulfills the experience requirement 
for becoming a CPA. In those states, if an individual passes the CPA examination and 
fulfills the experience stipulations by becoming a GAO auditor, he or she may then 
obtain a CPA certificate. 

As a result of their great responsibility for auditing the expenditures of the federal 
government, their use of advanced auditing concepts, their eligibility to be CPAs, 
and their opportunities for performing operational audits, GAO auditors are highly 
regarded in the auditing profession. 
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by the courts. A major responsibility of the IRS is to audit taxpayers’ returns to 
determine whether they have complied with the tax laws. These audits are solely com- 
pliance audits. The auditors who perform these examinations are called internal rev- 
enue agents. 

It might seem that the audit of returns for compliance with the federal tax laws is 
a simple and straightforward problem, but nothing is farther from the truth. Tax laws 
are highly complicated, and there are hundreds of volumes of interpretations. The tax 
returns being audited vary from the simple returns of individuals who work for only 
one employer and take the standard tax deduction to the highly complex returns of 
multinational corporations. Taxation problems may involve individual income taxes, 
gift taxes, estate taxes, corporate taxes, trusts, and so on. An auditor involved in any 
of these areas must have considerable tax knowledge and auditing skills to conduct 
effective audits. 


Internal auditors are employed by all types of organizations to audit for manage- 
ment with oversight by the board of directors, much as the GAO does for Congress. 
Internal auditors’ responsibilities vary considerably, depending on the employer. 
Some internal audit staffs consist of only one or two employees doing routine 
compliance auditing. Other internal audit staffs may have more than 100 employees 
who have diverse responsibilities, including many outside the accounting area. Many 
internal auditors are involved in operational auditing or have expertise in evaluating 
computer systems. 

To maintain independence from other business functions, the internal audit group 
typically reports directly to the president, another high executive officer, or the audit 
committee of the board of directors. However, internal auditors cannot be entirely 
independent of the entity as long as an employer—-employee relationship exists. Users 
from outside the entity are unlikely to want to rely on information verified solely by 
internal auditors because of their lack of independence. This lack of independence is 
the major difference between internal auditors and CPA firms. 

In many states, internal audit experience can be used to fulfill the experience 
requirement for becoming a CPA. Many internal auditors pursue certification as a cer- 
tified internal auditor (CIA), and some internal auditors pursue both the CPA and CIA 
designations. 


Internal Auditors 


NEXT VERSION 
OF THE CPA EXAM 
TO LAUNCH 

IN 2017 
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The AICPA will announce the next version of the 
CPA Examination in 2016, and the new version will 
launch in 2017. The revision will be based on a com- 
prehensive analysis and extensive research process 
that incorporates feedback and participation from rel- 
evant stakeholders to determine the knowledge and 
skills required of newly-licensed CPAs. CPA licensure 
requires the “three E’s” of education, examination, 
and experience. However, only the CPA examination 
is uniform among the 55 jurisdictions (the 50 states; 
Washington, DC; Puerto Rico; the Virgin Islands; 
Guam; and the Commonwealth of the Northern 
Mariana Islands); the other requirements vary among 
the jurisdictions. The changes are designed to ensure 
that the CPA exam remains relevant and continues to 
effectively protect the public interest. 

Input from focus groups has identified the 
following set of knowledge and skills: 


© Critical thinking, problem solving, analytical ability, 
professional skepticism, and adaptability 

e Strong understanding of the business environment 
and processes 


e Effective communication skills 

e Well-developed research skills 

e Ability to analyze data 

e Ethics and professional responsibilities 


The current CPA examination consists of 
four sections, and is approximately 60 percent 
knowledge and 40 percent application. The 
changes being considered are designed to increase 
testing of higher-order skills through tasks 
such as writing, research, and calculations. Also 
under consideration is replacing the Business 
Environment and Concepts (BEC) section of the 
exam with an integrative section that would cover 
topics such as corporate governance, economics, 
financial management, information systems, 
strategic planning, and operations management, 
along with simulations that would draw on 
content from the other sections of the exam. 


Source: Maintaining the Relevance of the Uniform CPA 
Examination (September 2, 2014) (www.aicpa.org). 


CERTIFIED PUBLIC ACCOUNTANT 
‘OBJECTIVE 1-8 Use of the title certified public accountant (CPA) is regulated by state law through 


the licensing departments of each state. Within any state, the regulations usually differ 
for becoming a CPA and retaining a license to practice after the designation has been 
initially achieved. To become a CPA, three requirements must be met. These are sum- 
marized in Figure 1-3. 

For a person planning to become a CPA, it is essential to know the requirements 
in the state where he or she plans to obtain and maintain the CPA designation. The 
best source of that information is the State Board of Accountancy for the state in 
which the person plans to be certified. The National Association of State Boards 
of Accountancy (NASBA) Web site (www.nasba.org) provides information on 
licensure requirements and links to the Web site of each state board. It is possible 
to transfer the CPA designation from one state to another, but additional require- 
ments often must be met for formal education, practice experience, or continuing 
education. 

Most young professionals who want to become CPAs start their careers working 
for a CPA firm. After they become CPAs, many leave the firm to work in industry, 
government, or education. These people may continue to be CPAs but often give up 
their right to practice as independent auditors. To maintain the right to practice as 
independent auditors in most states, CPAs must meet defined continuing education 
and licensing requirements. Therefore, it is common for accountants to be CPAs who 
do not practice as independent auditors. 

Information about the CPA examination can be found in The Uniform CPA 
Examination Candidate Bulletin and the Content and Skill Specifications for the Uniform CPA 
Examination, both of which can be downloaded from the CPA Examination site found 
on the AICPA Web site (www.aicpa.org). The AICPA also publishes selected examina- 
tion questions with unofficial answers indexed to the content specification outlines of 
the examination. 

Some of the questions and problems at the end of the chapters in this book 
are based on past CPA examinations. They are designated as “based on AICPA 
questions.” 


Describe the requirements for 
becoming a CPA. 


FIGURE I|-3 Three Requirements for Becoming a CPA 
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Educational 
Requirement 


Normally, an undergraduate or 
graduate degree with a major 
in accounting, including a 
minimum number of accounting 
credits. Most states 

now require 150 semester 
credit hours (225 quarter 
credits) for licensure as a CPA. 
Some states require fewer 
credits before taking the 
examination but require 150 
semester credits before 
receiving the CPA certificate. 
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Uniform CPA 
Examination Requirement 


Computer-based examination offered at 
various testing centers. Examination sections 
are as follows: 


Auditing and Attestation (AUD) 
— 4 hours 

* Financial Accounting and Reporting (FAR) 
— 4 hours 

* Regulation (REG) 
— 3 hours 

* Business Environment and Concepts (BEC) 
— 3 hours 


Some states also require a separate ethics 
examination. 


Experience 
Requirement 


Varies widely from no 
experience to 2 years, including 
auditing. Some states include 
experience working for 
governmental units or in 
industry, including internal 
auditing. 
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CONCEPT CHECK 


I. Indicate the three main types of audits. What are the similarities and differences among 


each type of audit? 


2. What are the major differences in the scope of the audit responsibilities for CPAs, GAO 


auditors, IRS agents, and internal auditors? 


SUMMARY 


This chapter defined auditing and distinguished auditing from accounting. Audits are valu- 
able because they reduce information risk, which lowers the cost of obtaining capital. The 
chapter also described attestation and assurance services, which include reports such as 
audits of historical financial statements and reports on the effectiveness of internal control 
over financial reporting. The chapter furthermore outlined different types of audits and 


auditors and requirements for becoming a CPA. 


Accounting—the recording, classifying, 
and summarizing of economic events in a 
logical manner for the purpose of providing 
financial information for decision making 


Assurance service—an independent 
P 

professional service that improves the 

quality of information for decision makers 


Attestation service—a type of assur- 
ance service in which the CPA firm issues a 
report about a subject matter or assertion 
that is the responsibility of another party 


Audit of historical financial state- 
ments—a form of attestation service in 
which the auditor issues a written report 
stating whether the financial statements 
are in material conformity with account- 
ing standards 


Audit report—the communication of 
audit findings to users 


Auditing—the accumulation and evalu- 
ation of evidence about information to 
determine and report on the degree of 
correspondence between the information 
and established criteria 


Certified public accountant—a person 
who has met state regulatory require- 
ments, including passing the Uniform 
CPA Examination, and has thus been cer- 
tified; a CPA may have as his or her pri- 
mary responsibility the performance of 
the audit function on historical financial 
statements of commercial and noncom- 
mercial financial entities 


Compliance audit—(1) a review of an 
organization’s financial records performed 
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ESSENTIAL TERMS 


to determine whether the organization is 
following specific procedures, rules, or 
regulations set by some higher authority; (2) 
an audit performed to determine whether 
an entity that receives financial assistance 
from the federal government has complied 
with specific laws and regulations 


Evidence—any information used by 
the auditor to determine whether the 
information being audited is stated in 
accordance with established criteria 


Financial statement audit—an audit 
conducted to determine whether the 
overall financial statements of an entity 
are stated in accordance with specified 
criteria (usually U.S. or international 
accounting standards) 


Government accountability office 
auditor—an auditor working for the 
U.S. Government Accountability Office 
(GAO); the GAO reports to and is respon- 
sible solely to Congress 


Independent auditors—certified pub- 
lic accountants or accounting firms that 
perform audits of commercial and non- 
commercial entities 


Information risk—the risk that infor- 
mation upon which a business decision is 
made is inaccurate 


Internal auditors—auditors employed 
by a company to audit for the company’s 
board of directors and management 

Internal control over financial 
reporting—an engagement in which the 
auditor reports on the effectiveness of 


internal control over financial reporting; 
such reports are required for accelerated 
filer public companies under Section 404 
of the Sarbanes—Oxley Act 

Internal revenue agents —auditors who 
work for the Internal Revenue Service 
(IRS) and conduct examinations of 
taxpayers’ returns 

Operational audit —a review of any part 
of an organization’s operating procedures 
and methods for the purpose of evaluating 
efficiency and effectiveness 

Review of historical financial state- 
ments—a form of attestation in which 


a CPA firm issues a written report that 
provides less assurance than an audit as 
to whether the financial statements are 
in material conformity with accounting 
standards 


Sarbanes-Oxley Act—a federal securi- 
ties law passed in 2002 that provides for 
additional regulation of public companies 
and their auditors; the Act established the 
Public Company Accounting Oversight 
Board and also requires auditors of larger 
public companies to audit the effective- 
ness of internal control over financial 
reporting 


REVIEW QUESTIONS 


1-1 (OBJECTIVE 1-1) Aishah is a tax auditor from the Inland Revenue Board Malaysia, and she 
is auditing Kimmie Berhad. What is the information and established criteria that Aishah 
needs to know for the audit? 


1-2 (OBJECTIVE 1-2) In the conduct of audits of financial statements, it would be a serious 
breach of responsibility if the auditor did not thoroughly understand accounting. How- 
ever, Many competent accountants do not have an understanding of the auditing process. 
What causes this difference? 

1-3 (OBJECTIVE 1-3) Discuss changes in accounting and business operations over the last de- 
cade that have increased the need for independent audits. 

1-4 (OBJECTIVE 1-3) Distinguish among the following three factors impacting a loan interest 
rate: risk-free interest rate, business risk, and information risk. Which one or ones does the 
auditor reduce by performing an audit? 

1-5 (OBJECTIVE 1-4) Identify the three main ways information risk can be reduced. What are 
the advantages and disadvantages of each? 

1-6 (OBJECTIVE 1-4) Explain how the increased use of fair value accounting might increase 
information risk. 

1-7 (OBJECTIVE 1-5) Explain audit services, attestation services, and assurance services, and 
give examples of each. 

1-8 (OBJECTIVES 1-1, 1-7) Provide examples of different forms of evidence Aisha the tax audi- 
tor will need in the audit the tax returns of Kimmie Berhad. 

1-9 (OBJECTIVES 1-6, 1-7) Define and explain in brief operational audits that can be conduct- 
ed by an internal auditor in a manufacturing company. 

1-10 (OBJECTIVES 1-5, 1-6) What is the data required by the auditor about the client’s business 
during an audit of their financial statements? Explain how this knowledge may be useful in 
performing other assurance or consulting services for the client. 

I-11 (oBjective 1-8) Identify the four parts of the Uniform CPA Examination. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


1-12 (OBJECTIVES 1-1, 1-3, 1-5) The following questions deal with audits by CPA firms. Choose 
the best response. 


a. Which of the following best describes why an independent auditor is asked to express 
an opinion on the fair presentation of financial statements? 

(1) Itis difficult to prepare financial statements that fairly present a company’s financial 

position, operations, and cash flows without the expertise of an independent auditor. 
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(2) Itismanagement’s responsibility to seek available independent aid in the appraisal 
of the financial information shown in its financial statements. 

(3) The opinion of an independent party is needed because a company may not be 
objective with respect to its own financial statements. 

(4) Itis acustomary courtesy that all stockholders of a company receive an indepen- 
dent report on management’s stewardship of the affairs of the business. 


b. Which of the following professional services is an attestation engagement? 
(1) A consulting service engagement to provide computer-processing advice to a 
client 
(2) An engagement to report on compliance with statutory requirements 
(3) Anincome tax engagement to prepare federal and state tax returns 
(4) The preparation of financial statements from a client’s financial records 


c. Which of the following attributes is likely to be unique to the audit work of CPAs as 
compared to the work performed by practitioners of other professions? 
(1) Independence (3) Due professional care 
(2) Competence (4) Complex body of knowledge 


1-13 (OBJECTIVES 1-6, 1-7) The following questions deal with types of audits and auditors. 
Choose the best response. 
a. Operational audits generally have been conducted by internal auditors and 
governmental audit agencies but may be performed by certified public accountants. 
A primary purpose of an operational audit is to provide 
(1) ameans ofassurance that internal accounting controls are functioning as planned. 
(2) ameasure of management performance in meeting organizational goals. 
(3) the results of internal examinations of financial and accounting matters to a com- 
pany’s top-level management. 
(4) aid to the independent auditor, who is conducting the audit of the financial 
statements. 
b. Which of the following best describes the operational audit? 
(1) It requires the constant review by internal auditors of the administrative controls 
as they relate to the operations of the company. 
(2) It concentrates on implementing financial and accounting control in a newly 
organized company. 
(3) It focuses on verifying the fair presentation of a company’s results of operations. 
(4) It concentrates on seeking aspects of operations in which waste could be reduced 
by the introduction of controls. 
c. Compliance auditing often extends beyond audits leading to the expression of 
opinions on the fairness of financial presentation and includes audits of efficiency, 
economy, effectiveness, as well as 


(1) accuracy. (3) evaluation. 
(2) adherence to specific rules (4) internal control. 
or procedures. 


DISCUSSION QUESTIONS AND PROBLEMS 


1-14 (OBJECTIVE 1-5) The list below indicates various audit, attestation, and other engage- 
ments involving auditors. 


1. A report on the effectiveness of internal control over financial reporting as required 
by Section 404 of the Sarbanes-Oxley Act. 


2. An auditor’s report on whether the financial statements are fairly presented in accor- 
dance with International Financial Reporting Standards. 
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3. An engagement to help a company structure a merger transaction to minimize the 
taxes of the combined entities. 
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4. A report stating whether the company has complied with restrictive covenants 
related to officer compensation and payment of dividends contained in a bank loan 
agreement. 


5. A report on the effectiveness of internal controls at a company that provides payroll 
processing for other companies. 


6. An examination report stating whether a company’s statement of greenhouse gas 
emissions is presented in conformity with standards issued by the World Business 
Council for Sustainable Development and the World Resources Institute. 


7. Evaluating the voting process and certifying the outcome for Rolling Stone Magazine's 
“Greatest Singer of All Time” poll. 


8. A report indicating whether a governmental entity has complied with certain govern- 
ment regulations. 


9. A review report that provides limited assurance about whether financial statements 
are fairly stated in accordance with U.S. GAAP. 


10. A report about management’s assertion on the effectiveness of controls over the 
availability, reliability, integrity, and maintainability of its accounting information 
system. 


11. Anevaluation of the effectiveness of key measures used to assess an entity’s success in 
achieving specific targets linked to an entity’s strategic plan and vision. 


Required a. Explain the relationships among audit services, attestation services, and other assur- 
ance and nonassurance services provided by CPAs. 


b. For each of the services listed above, indicate the type of service from the list that follows. 


(1) An audit of historical financial statements. 
(2) Anattestation service other than an audit service. 
(3) Anassurance or nonassurance service that is not an attestation service. 


I-15 (oBjectivE 1-3) Busch Corporation has an existing loan in the amount of $6 million 
with an annual interest rate of 6.0%. The company provides an internal company-prepared 
financial statement to the bank under the loan agreement. Two competing banks have 
offered to replace Busch Corporation’s existing loan agreement with a new one. United 
National Bank has offered to loan Busch $6 million at a rate of 5.0% but requires Busch 
to provide financial statements that have been reviewed by a CPA firm. First City Bank 
has offered to loan Busch $6 million at a rate of 4.0% but requires Busch to provide finan- 
cial statements that have been audited by a CPA firm. Busch Corporation’s controller 
approached a CPA firm and was given an estimated cost of $35,000 to perform a review 
and $60,000 to perform an audit. 


Required a. Explain why the interest rate for the loan that requires a review report is lower than 
that for the loan that does not require a review. Explain why the interest rate for the 
loan that requires an audit report is lower than the interest rate for the other two 
loans. 


b. Calculate Busch Corporation’s annual costs under each loan agreement, including in- 
terest and costs for the CPA firm’s services. Indicate whether Busch should keep its 
existing loan, accept the offer from United National Bank, or accept the offer from 
First City Bank. 


c. Assume that United National Bank has offered the loan at a rate of 4.5% with a re- 
view, and the cost of the audit has increased to $80,000 due to new auditing standards 
requirements. Indicate whether Busch should keep its existing loan, accept the offer 
from United National Bank, or accept the offer from First City Bank. 


d. Discuss why Busch may desire to have an audit, ignoring the potential reduction in 
interest costs. 


e. Explain how a strategic understanding of the client’s business may increase the value 
of the audit service. 
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1-16 (OBJECTIVES 1-3, 1-4, 1-5) Top Gear is a television series about cars broadcast by the BBC. 
The program features races between the different presenters of the show and their celeb- 
rity friends. The races reveal the strengths and weaknesses of featured cars. 


Detailed car reviews can be found at http://www.topgear.com/car-reviews. 


a. In what ways are the reviews of cars on Top Gear similar to assurance services provided 
by CPA firms? 

b. Compare the concept of information risk introduced in this chapter with the infor- 
mation risk problem faced by potential car buyers. 


c. Compare the four causes of information risk faced by users of financial statements as 
discussed in this chapter with those faced by a buyer of a car. 


d. Compare the three ways users of financial statements can reduce information risk 
with those available to a buyer of a car. 


1-17 (OBJECTIVE 1-1) Gregor Olson works at the National Bank branch in Copenhagen. 
According to the bank’s records, there is currently an outstanding loan of $380,000 
to Danville Bus Services, acompany that schedules charter bus trips between Copenhagen 
and other cities in Scandinavia. The company recently missed a loan payment, and Olson 
is becoming concerned about whether Danville will be able to repay the full amount of 
the loan. According to the documents held by the bank, the collateral on the loan con- 
sists of 20 large buses. Each bus has an average estimated value of $25,000. As part of his 
investigation of the company, Olson wants to make sure that these buses still exist. 
Olson decides that the best way to handle the situation would be to hire an auditor 
to count the buses. Olson therefore engages the services of Annaliese Haraldsson, CPA, 
who Olson knows has an extensive background in auditing automobile, bus, and truck- 
ing companies. Olson gives Haraldsson the buses’ registration information, which was 
provided to the bank when the original loan documents were signed. He then asks her to 
investigate the company and write a report that includes the following information: 


1. Which of the 20 registered buses is parked in Danville’s parking lot on the night of 
August 31, 2008. 


2. If Danville Bus Services actually owns or is responsible for maintaining the buses. 
3. The physical condition of each bus, using the guidelines poor, good, and excellent. 


The fair market value of each bus, using the current “blue book” for buses, which esti- 
mates the approximate wholesale prices of all used bus models, using the poor, good, and 
excellent conditions guidelines established in Part 3. 


a. For each of the following parts of the definition of auditing, state which part of the 
preceding narrative fits the definition: 
(1) Information 
(2) Established criteria 
(3) Accumulating and evaluating evidence 
(4) Competent, independent person 
(5) Reporting results 


b. What difficulties might Haraldsson encounter when performing this audit? 


1-18 (OBJECTIVE 1-7) 


a. The following parts of the definition of auditing are related to the narrative: 

(1) Haraldsson is being asked to issue a report about qualitative and quantitative 
information for the buses. The buses and their value are therefore the information 
with which she is concerned. 

(2) There are four established criteria which must be evaluated and reported by Haralds- 
son: existence of the buses on the night of August 31, 2008, ownership of each 
bus by Danville Bus Services, physical condition of each bus and fair market value 
of each bus. 
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Required 


Required 


Required 


(3) Annaliese Haraldsson will accumulate and evaluate four types of evidence: 
(a) Count the buses to determine their existence. 
(b) Use registrations documents held by Olson for comparison to the serial 
number on each bus to determine ownership. 
(c) Examine the buses to determine each bus’s physical condition. She can 
examine the bus’s condition herself or hire an expert to do so. 
(d) Examine the blue book to determine the fair market value of each bus. 

(4) Annaliese Haraldsson, CPA, appears qualified, as a competent, independent person. 
She is a CPA, and she spends most of her time auditing used automobile, bus, and 
truck dealerships, and has experience that is consistent with the nature of the 
engagement. 

(5) The report results are to include: 

(a) which of the 20 buses are parked in Danville’s parking lot the night of August 31. 
(b) whether all of the buses are owned by Danville Bus Services. 

(c) the condition of each bus, using established guidelines. 

(d) fair market value of each bus using the current blue book for buses. 


b. The only parts of the audit that will be difficult for Haraldsson are: 

(1) Evaluating the condition, using the guidelines of poor, good, and excellent. It is 
highly subjective to do so. One method is to find the “blue book” value. (Note: 
Kelley Blue Book is a United States automotive vehicle valuation company that 
gives used vehicle pricing information. Because of its popularity, the term “blue 
book” has become synonymous with the car’s market value.) If she uses a different 
criterion than the “blue book,” the fair market value will not be meaningful. Her 
experience will be essential in using this guideline. 

(2) Determining the fair market value, unless it is clearly defined in the blue book for 
each condition. 


1-19 (OBJECTIVES 1-6, 1-7) In the normal course of performing their responsibilities, auditors 
often conduct audits or reviews of the following: 


1. Customs officer would make sure that a shopkeeper records and remits all the Goods 
and Service Tax collected to the government in a timely manner. 


2. A Chartered Accountant makes sure that his client provides the correct amount of 
depreciation in this year’s accounts. 

3. There is a need to evaluate whether the sales system is capable to providing alerts to 
management when a client has been late paying the amounts owed. 

4. Financial statements for use by shareholders when there is an internal audit staff. 


5. Verification by the Quality Engineer before the accountant can issue a credit note for 
a return of faulty goods by a customer. 


6. Controls of the procurement of food at a Muslim restaurant to ensure the restaurant 
is in compliance with local government and halal food regulations. 


7. The backup of client’s payment information at an e-commerce website. 
8. Departmental budgets for the use of factory management. 
9. Operations of the customs department to determine whether the custom officers are 
using their time efficiently in investigating Goods and Service Tax evasion. 
10. Review of how long the accounts department takes to issue an official receipt to a 
customer who has paid using a bank transfer. 
11. Financial statements of a foreign branch of the company to make sure that the cut-off 
dates of the branch are the same with the holding company. 


12. Disbursements of federal aid to flood victims in the countryside. 


Required a. For these 12 examples, state the most likely type of auditor (Chartered Accountant, 
GAO, IRS, or internal) to perform each. 
b. In each example, state the type of audit (financial statement audit, operational 
audit, or compliance audit). 
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1-20 (OBJECTIVES 1-3, 1-5) Dave Czarnecki is the managing partner of Czarnecki and Hogan, 
a medium-sized local CPA firm located outside of Chicago. Over lunch, he is surprised 
when his friend James Foley asks him, “Doesn't it bother you that your clients don’t look 
forward to seeing their auditors each year?” Dave responds, “Well, auditing is only one of 
several services we provide. Most of our work for clients does not involve financial state- 
ment audits, and our audit clients seem to like interacting with us.” 


a. Identify ways in which a financial statement audit adds value for clients. 
b. List other services other than audits that Czarnecki and Hogan likely provides. 


c. Assume Czarnecki and Hogan has hired you as a consultant to identify ways in which 
they can expand their practice. Identify at least one additional service that you believe 
the firm should provide and explain why you believe this represents a growth oppor- 
tunity for CPA firms. 


1-21 (OBJECTIVE 1-5) There are many types of information that require assurance. 
Individually or in groups, identify the following types of assurance services. 


a. Identify three or more assurance services that are likely to be provided only by public 
accounting firms. 


b. Identify three or more assurance services that are likely to be provided by assurance 
providers other than public accounting firms. 


c. Identify three or more assurance services that may be provided by public accounting 
firms or other assurance providers. 


1-22 (OBJECTIVE 1-5) As discussed in the chapter opening vignette and on page 33, companies 
are increasingly issuing reports on corporate social responsibility. Visit the Global Report- 
ing Initiative Web site (www.globalreporting.org) and answer the following questions. 


a. What is the vision and mission of the Global Reporting Initiative? 

b. What is a sustainability report? Explain the use of sustainability reports in integrated 
reporting. 

c. Explain the two “in accordance” GRI guideline reporting options. What is the GRI 
guidance on assurance for “in accordance” reports? 


1-23 (OBJECTIVE 1-8) Individuals are licensed as CPAs by individual states. Information on the 
requirements for each state can be found on the National Association of State Boards of Ac- 
countancy (NASBA) Web site (www.nasba.org). The Uniform CPA Examination is adminis- 
tered by the American Institute of Certified Public Accountants (AICPA), and information on 
CPA examination requirements can be found on the AICPA Web site (www.aicpa.org). 


a. Identify the education requirements to be eligible to sit for the CPA exam in your state. 
Include any specific educational content requirements. 


b. List the work experience requirements in your state. Is experience in industry as an 
accountant or an internal auditor sufficient to be eligible to become a CPA? 


c. List any frequently asked questions (FAQ), if there are any, related to experience and 
education requirements for your state, along with a summary of the responses. 


d. What are the Elijah Watts Sells awards? 
e. What was the passing rate for each exam section in the most recent quarter? 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 
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Describe the nature of CPA 


firms and what they do. 
Describe the structure 

of CPA firms. 

Understand the role of the 
Public Company Accounting 
Oversight Board and the 
effects of the Sarbanes—Oxley 
Act on the CPA profession. 
Summarize the role 

of the Securities and 
Exchange Commission in 
accounting and auditing. 
Describe the key functions 
performed by the AICPA. 
Understand the role of 
international auditing 
standards and their relation 
to U.S. auditing standards. 
Use U.S. auditing standards 
as a basis for further study. 
Identify quality control 


standards and practices within 


the accounting profession. 
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THE CPA PROFESSION 


Good Auditing Includes Good Client Service 


“It had been a good week,” thought Jeanine Wilson, as she drove out of the parking lot 
of Solberg Paints on Friday afternoon. Just a few months earlier, she graduated from State 
University and had already passed three parts of the CPA examination. Still, Jeanine did not 
think her transition to professional life had been all that smooth, and she was surprised at how 
much there still was to learn. But she had made great progress on the Solberg engagement. 


John Hernandez was the audit senior on the Solberg Paints audit, and he had a reputation as 
a patient teacher and supervisor. Jeanine was not disappointed. At the start of the engage- 
ment, John told her, “Don’t 
be afraid to ask questions. If 
you see anything that seems 
unusual, let’s discuss it. And 
most importantly, if you have 
any ideas that will help the cli- 
ent, bring them up. The client 
expects us to deliver more 
than an audit report.” 


“Pd say | delivered,” thought 
Jeanine. She found an error in 
the way the company had cal- 
culated LIFO inventory that 
was going to save the client a significant amount of taxes. But her biggest contribution almost 
did not happen. Jeanine read as much as she could about paint manufacturers and learned about 
some new production control methods that seemed like they could apply to Solberg. She was 
afraid to bring it up, thinking that she couldn’t possibly know anything that the client didn’t al- 
ready know, but John encouraged her to discuss it with the client. The result was that the client 
wanted to meet further with Jeanine’s firm to better understand how they could improve their 
production processes. 


By Friday, the audit was basically completed, and the partner, Bill Marlow, was at the client's 
office to complete his review of the audit files. Jeanine was surprised to hear him say to her, 
“What are you doing on the |5th? We're going to meet with the client to discuss our audit 
findings. You’ve made a real contribution on this audit, and I’d like you to be there.” Jeanine 
tried not to show her excitement too much, but she couldn’t hide the smile on her face. “Yes, 
it had been a good week.” 


We learned in the first chapter that auditing plays an important role in society by reducing information risk and 
facilitating access to capital and that audit firms provide additional, value-added service to their clients. As the 
opening story to this chapter demonstrates, audit professionals at all experience levels serve as valued advisors to 
their clients. This chapter describes the organization of CPA firms and the types of services they provide. We also 
discuss the effects on auditing of the Sarbanes—Oxley Act and the Public Company Accounting Oversight Board 
(PCAOB), as well as other standards and regulatory agencies that influence auditor performance. 


CERTIFIED PUBLIC ACCOUNTING FIRMS 


Except for certain governmental organizations, the audits of all general use financial OBJECTIVE 2-10 
statements in the United States are done by CPA firms. The legal right to perform 


audits is granted to CPA firms by regulation in each state. CPA firms also provide 
many other services to their clients, such as tax and advisory services. 


Describe the nature of CPA firms 
and what they do. 


It is estimated that more than 85,000 CPA firms exist in the United States. These firms 
range in size from 1 person to more than 50,000 partners and staff. Table 2-1 provides 
revenue and other data for some of the largest accounting firms in the United States. 
Three size categories are used to describe CPA firms: Big Four international firms, 
national and regional firms, and local firms. 


Types of CPA Firms 


* Big Four international firms. The four largest CPA firms in the United States are 
called the “Big Four” international CPA firms. They are the first four firms 
listed in Table 2-1. These four firms have offices throughout the United States 


TABLE 2-1 Revenue and Other Data for the Largest CPA Firms in the United States 


Percentage of Total 
Revenue from 
Accounting and 


2014 Net Revenue— Auditing/Taxes/ 
Size by U.S. Only U.S. Management 
Revenue (in $ millions) Partners Professionals Offices Consulting and Other 
BIG FOUR 
| Deloitte $ 14,908.0 3,030 50,562 107 29/18/53 
2 PwC $ 11,724.0 2,691 33,024 72 41/28/31 
= 3 Ernst & Young $ 9,900.0 2,700 26,100 80 36/29/35 
5 4 KPMG'") $ 6,870.0 1,813 20,113 101 34/28/38 
2 5 McGladrey $ 1,470.7 644 5,075 75 41/36/23 
: 6 Grant Thornton $ 1,382.5 529 4,692 57 41/28/31 
5 7 BDO $ 833.0 346 2,967 52 58/32/10 
2 8 Crowe Horwath $ 686.6 MS/ 2,315 29 28/24/48 
3 9 CBIZ/Mayer Hoffman McCann”) $ 600.0 429 1,832 103 30/35/35 
8 10 CliftonLarsonAllen $ 598.4 225 3,245 29 40/33/27 
° 
: 
8 50 Frank, Rimerman + Co. $ 70.2 23 267 5 27/62/11 
= 75 Freed Maxick CPAs $ 45.5 85 240 4 38/38/24 


() KPMG's office figure comprises business offices, rather than every physical location. 
) Only the six largest national/regional firms are listed. 
8) Office figures are for CBIZ; MHM has 34 offices. 


Source: Data from Accounting Today (www.accountingtoday.com). 
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and throughout the world. The Big Four firms audit nearly all of the largest 
companies both in the United States and worldwide and many smaller com- 
panies as well. 

* National/Regional firms. National CPA firms in the United States have offices in 
most major cities while regional firms have several offices in a state or region 
and serve a large radius of clients. The six largest of the national/regional firms 
are listed in Table 2-1. These firms are large but considerably smaller than the 
Big Four. The national/regional firms perform the same services as the Big 
Four firms and compete directly with them for clients. Many of these firms 
are affiliated with firms in other countries and therefore have an international 
capability. 

* Local firms. Some local firms have only one office and serve clients primar- 
ily within commuting distances while others may have several offices. 
The larger local firms compete for clients with other CPA firms, includ- 
ing national, regional, and Big Four firms. Many of the large local firms 
are affiliated with associations of CPA firms to share resources for such 
things as technical information and continuing education. Many of these 
firms also have international affiliations. Most small local CPA firms have 
fewer than 25 professionals in a single-office firm. They perform audits and 
related services primarily for smaller businesses and not-for-profit entities, 
although some have one or two clients with public ownership. Many small 
local firms do not perform audits and primarily provide accounting and tax 
services to their clients. 


As discussed in Chapter 1, CPA firms provide audit services, as well as other attesta- 
tion and assurance services. Additional services commonly provided by CPA firms 
include accounting and bookkeeping services, tax services, and management con- 
sulting and risk advisory services. CPA firms continue to develop new products and 
services, such as financial planning, business valuation, forensic accounting, and 
information technology advisory services. 


Activities of CPA Firms 


* Accounting and bookkeeping services. Many small clients with limited account- 
ing staff rely on CPA firms to prepare their financial statements. Some small 
clients lack the personnel or expertise to use accounting software to maintain 
their own accounting records. Thus, CPA firms perform a variety of account- 
ing and bookkeeping services to meet the needs of these clients. In some cases, 
the CPA firm is engaged by the client to help them prepare financial statements 
mostly for management’s internal use. In many cases in which the financial 
statements are to be given to a third party, the client may engage the CPA to 
compile financial statements that are accompanied by a compilation report, 
which indicates the CPA assembled the statements but provides no assurance 
to third parties. In other situations, the client may engage the CPA to provide 
some assurance on those statements by performing a review or even an audit 
of the financial statements. As Table 2-1 (p. 49) shows, attestation services and 
accounting and bookkeeping services are a major source of revenue for most 
large CPA firms. 

* Tax services. CPA firms prepare corporate and individual tax returns for both 
audit and nonaudit clients. Almost every CPA firm performs tax services, 
which may include estate tax, gift tax, tax planning, and other aspects of tax 
services. For many small firms, such services are far more important to their 
practice than auditing, as most of their revenue may be generated from tax 
services. 

¢ Management consulting and risk advisory services. Most CPA firms provide certain 
services that enable their clients to operate their businesses more effectively. 
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These services are called management consulting, management advisory ser- 
vices, or risk advisory services. These services range from simple suggestions 
for improving the client’s accounting system to advice in risk management, 
internal controls, information technology and e-commerce system design, 
mergers and acquisitions due diligence, business valuations, and actuarial bene- 
fit consulting. A number of organizations outsource or co-source their internal 
audit function to CPA firms. Many large CPA firms have departments involved 
exclusively in management consulting and risk advisory services with little 
interaction with the audit or tax staff. 


Although the Sarbanes-Oxley Act and Securities and Exchange Commission 
(SEC) restrict auditors from providing many consulting services to public company 
audit clients, some services are allowed, and audit firms are not restricted from pro- 
viding consulting to private companies and public companies that are not audit cli- 
ents. Table 2-1 shows that management consulting and other risk advisory services 
are a significant source of revenue for most accounting firms. 


STRUCTURE OF CPA FIRMS 
CPA firms vary in the nature and range of services offered, which affects the organiza- ‘OBJECTIVE 2-200 


tion and structure of the firms. Three main factors influence the organizational struc- 


2 Describe the structure of CPA 
ture of all firms: 


firms. 


1. The need for independence from clients. Independence permits auditors to remain 
unbiased in drawing conclusions about the financial statements. 

2. The importance of a structure to encourage competence. Competence permits auditors 
to conduct audits and perform other services efficiently and effectively. 

3. The increased litigation risk faced by auditors. Audit firms continue to experience 
increases in litigation-related costs. Some organizational structures afford a 
degree of protection to individual firm members. 


Six organizational structures are available to CPA firms. Except for the proprietor- 
ship, each structure results in an entity separate from the CPA personally, which helps 
promote auditor independence. The last four organizational structures provide some 
protection from litigation loss. 


Organizational 
Structures 


Proprietorship Only firms with one owner can operate in this form. Traditionally, all 
one-owner firms were organized as proprietorships, but most have changed to orga- 
nizational forms with more limited liability because of litigation risks. 


General Partnership This form of organization is the same as a proprietorship, 
except that it applies to multiple owners. This organizational structure has also 
become less popular as other forms of ownership that offer some legal liability pro- 
tection became authorized under state laws. 


General Corporation The advantage of a corporation is that shareholders are liable 
only to the extent of their investment in the corporation. Most CPA firms do not orga- 
nize as general corporations because they are prohibited by law from doing so in most 
States. 


Professional Corporation A professional corporation (PC) provides professional ser- 
vices and is owned by one or more shareholders. PC laws in some states offer personal 
liability protection similar to that of general corporations, whereas the protection in 
other states is minimal. This variation makes it difficult for a CPA firm with clients in 
different states to operate as a PC. 
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TABLE 2-2 Staff Levels and Responsibilities 


Staff Level Average Experience Typical Responsibilities 


Staff Assistant 0-2 years Performs most of the detailed audit work. 


Senior or in-charge auditor 2-5 years Coordinates and is responsible for the performance of audit procedures, including 
supervising and reviewing staff work. 


Manager and Senior Manager 5-10 years Helps the in-charge plan and manage the audit, reviews the in-charge’s work, and manages 
relations with the client. A manager may be responsible for more than one engagement 
at the same time. 


Partner 10+ years Reviews the overall audit work and is involved in significant audit decisions. A partner is an 
owner of the firm and therefore has the ultimate responsibility for conducting the audit 
and serving the client. 


Limited Liability Company A limited liability company (LLC) combines the most 
favorable attributes of a general corporation and a general partnership. An LLC is 
typically structured and taxed like a general partnership, but its owners have limited 
personal liability similar to that of a general corporation. All of the states have LLC 
laws, and most also allow accounting firms to operate as LLCs. 


Limited Liability Partnership A limited liability partnership (LLP) is owned by one 
or more partners. It is structured and taxed like a general partnership, but the per- 
sonal liability protection of an LLP is less than that of a general corporation or an LLC. 
Partners of an LLP are personally liable for the partnership’s debts and obligations, their 
own acts, and acts of others under their supervision. Partners are not personally liable 
for liabilities arising from negligent acts of other partners and employees not under 
their supervision. It is not surprising that all of the Big Four firms and many smaller 
firms now operate as LLPs. 


The organizational hierarchy in a typical CPA firm includes partners or shareholders, 
managers, supervisors, seniors or in-charge auditors, and assistants. A new employee 
usually starts as an assistant and spends 2 or 3 years in each classification before 
achieving partner status. The titles of the positions vary from firm to firm, but the 
structure is similar in all. When we refer in this text to the auditor, we mean the person 
performing some aspect of an audit. It is common to have one or more auditors from 
each level on larger engagements. 

Table 2-2 summarizes the experience and responsibilities of each classification 
level within CPA firms. Advancement in CPA firms is fairly rapid, with evolving duties 
and responsibilities. In addition, audit staff members usually gain diversity of experi- 
ence across client engagements. Because of advances in computer and audit technol- 
ogy, as well as offshoring of more basic tasks, beginning assistants on the audit are 
rapidly given greater responsibility and challenges. 

The hierarchical nature of CPA firms helps promote competence. Individuals at 
each level of the audit supervise and review the work of others at the level just below 
them in the organizational structure. A new staff assistant is supervised directly by the 
senior or in-charge auditor. The staff assistant’s work is then reviewed by the in-charge 
as well as by the manager and partner. 


Hierarchy of a Typical 
CPA Firm 


CONCEPT CHECK 


I. State the four major types of services CPAs perform, and explain each. 


2. Identify the six organizational structures available to CPA firms. Why are most CPA 
firms not organized as general partnerships? 
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SARBANES-OXLEY ACT AND PUBLIC COMPANY 
ACCOUNTING OVERSIGHT BOARD 


Triggered by the bankruptcies and alleged audit failures involving such companies 
as Enron and WorldCom, the Sarbanes—Oxley Act is considered by many to be the 
most important legislation affecting the auditing profession since the 1933 and 1934 
Securities Acts. The provisions of the Act dramatically changed the relationship 
between publicly held companies and their audit firms. 

The Sarbanes-Oxley Act established the Public Company Accounting 
Oversight Board (PCAOB), appointed and overseen by the SEC. The PCAOB pro- 
vides oversight for auditors of public companies; establishes auditing, attestation, 
and quality control standards for public company audits; and performs inspections 
of audit engagements as well as the quality controls at audit firms performing those 
audits. As a result of the 2010 Dodd-Frank financial reform legislation, auditors of 
brokers and dealers registered with the Securities and Exchange Commission are 
also required to register with the PCAOB, are subject to inspections, and must follow 
PCAOB auditing and attestation standards. 

The PCAOB conducts inspections of registered accounting firms to assess their 
compliance with the rules of the PCAOB and SEC, professional standards, and each 
firm’s own quality control policies. The PCAOB requires annual inspections of 
accounting firms that audit more than 100 issuers (public companies) and inspections 
of other registered firms at least once every three years. The largest eight firms listed 
in Table 2-1 (p. 49) are inspected annually. Any violations could result in disciplinary 


Understand the role of the Public 
Company Accounting Oversight 
Board and the effects of the 
Sarbanes—Oxley Act on the CPA 
profession. 


action by the PCAOB and be reported to the SEC and state accountancy boards. 


DEVELOPING 
AUDIT QUALITY 
INDICATORS 
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Has audit quality improved since the passage and 
implementation of the Sarbanes-Oxley Act? This is a 
question that is of interest to regulators, audit firms, 
and users of financial statements. Audit partners at 
the largest firms believe that audit quality has im- 
proved, and many point to a decline in the frequency 
of financial statement restatements as evidence of 
improvement. However, PCAOB audit engagement 
inspection findings, which are publicly available, 
document an increase in audit deficiencies over the 
last decade. In addition, the PCAOB has publicly 
disclosed quality control deficiencies for all four of 
the large international audit firms. 

One of the difficulties in answering whether audit 
quality has improved is that there is no agreed-upon 
definition, or measurement, of audit quality. The 
auditing profession’s standards describe quality as 
a function of many aspects, including leadership 
within the firms (‘tone at the top”), independence, 
integrity, objectivity, personnel management, client 
acceptance and continuation policies and proce- 
dures, engagement performance, and monitoring. In 
an effort to provide measures of audit quality, the 
PCAOB, the AICPA’s Center for Audit Quality, and 
many of the large audit firms are developing sets of 
potential “Audit Quality Indicators,” or AQIs, that 
may be informative about performance on individual 
audit engagements and at the firm level. 

Proposals for use of AQIs include sharing the AQIs 
with the audit committee of the board of directors 
of an existing or potential audit engagement client 


and publicly disclosing the data at the firm level. The 
premise underlying such disclosure is that buyers of 
audit services—especially audit committees—will 
have new information to use as part of auditor hiring 
and retention decisions. Examples of potential AQIs 
include measures of engagement team experience and 
industry expertise; measures related to time spent 
on the audit engagement for each staffing level (e.g., 
partner, manager, staff) and the timing of those hours 
(e.g., hours spent on planning versus year-end audit 
procedures); workloads for individual staff, including 
average number of hours per week; and findings from 
the firm’s internal monitoring process. 

Regulators and professionals are optimistic about 
the potential benefits of measuring and disclosing 
AQlIs. The process of measuring and disclosing these 
factors will focus the attention of the audit partner 
on important factors such as staff workloads and 
partner-staff hour ratios, which is likely to have an 
additional positive impact on audit quality. 


Sources: |. CAQ Approach to Audit Quality Indicators, Center 
for Audit Quality (www.thecaq.org); 2. Greg Jonas, PCAOB 
Office of Research and Analysis Director, “Update on Audit 
Quality Indicators” (December 10, 2013) (pcaobus.org); 

3. Ken Tysiac, “SOX’s Anniversary Marked with Congres- 
sional Debate on Benefits and Costs,” Journal of Accountancy 
(July 26, 2012) (journalofaccountancy.com); 4. Ken Tysiac, 
“CAQ Proposes an Approach to Communicating Audit 
Quality Indicators,” Journal of Accountancy (April 24, 2014) 
(journalofaccountancy.com). 


SECURITIES AND EXCHANGE COMMISSION 


Summarize the role of the 
Securities and Exchange 
Commission in accounting 
and auditing. 
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The Securities and Exchange Commission (SEC), an agency of the federal gov- 
ernment, assists in providing investors with reliable information upon which to 
make investment decisions. The Securities Act of 1933 requires most companies 
planning to issue new securities to the public to submit a registration statement to 
the SEC for approval. The Securities Exchange Act of 1934 provides additional pro- 
tection by requiring public companies and others to file detailed annual reports 
with the commission. The commission examines these statements for complete- 
ness and adequacy before permitting the company to sell its securities through the 
securities exchanges. 

Although the SEC requires considerable information that is not of direct interest 
to CPAs, the securities acts of 1933 and 1934 require financial statements, accom- 
panied by the opinion of an independent public accountant, as part of a registration 
statement and subsequent reports. 

Of special interest to auditors are several specific reports that are subject to 
the reporting provisions of the securities acts. The most important of these are as 
follows: 


* Form S-1. “S” forms apply to the Securities Act of 1933 and must be completed 
and registered with the SEC when a company plans to issue new securities to 
the public. The S-1 form is the general form used when there is no specifically 
prescribed form. The others are specialized forms. For example, S-11 is for reg- 
istration of securities of certain real estate companies. 

* Form 8-K. This report is filed to report significant events that are of interest to 
public investors. Such events include the acquisition or sale of a subsidiary, a 
change in officers or directors, an addition of a new product line, or a change in 
auditors. 

¢ Form 10-K. This report must be filed annually within 60 to 90 days after the 
close of each fiscal year, depending on the size of the company. Extensive 
detailed financial information, including audited financial statements, is con- 
tained in this report. 

¢ Form 10-Q. This report must be filed quarterly for all publicly held companies. 
It contains certain financial information and requires auditor reviews of the 
financial statements before filing with the commission. 


Because large CPA firms usually have clients that must file one or more of these 
reports each year, and the rules and regulations affecting filings with the SEC are 
extremely complex, most CPA firms have specialists who spend a large portion of 
their time ensuring that their clients satisfy all SEC requirements. 

The SEC has considerable influence in setting generally accepted accounting 
principles (GAAP) and disclosure requirements for financial statements as a result 
of its authority for specifying reporting requirements considered necessary for 
fair disclosure to investors, such as the requirement to file financial statement 
data in XBRL format. The SEC has power to establish rules for any CPA associated 
with audited financial statements submitted to the commission. The attitude of 
the SEC is generally considered in any major change proposed by the Financial 
Accounting Standards Board (FASB), the independent organization that estab- 
lishes U.S. GAAP. 

The SEC requirements of greatest interest to CPAs are set forth in the commis- 
sion’s Regulation S-X, Accounting Series Releases, and Accounting and Auditing 
Enforcement Releases. These publications constitute important regulations, as well as 
decisions and opinions on accounting and auditing issues affecting any CPA dealing 
with publicly held companies. 


AMERICAN INSTITUTE OF CERTIFIED PUBLIC 
ACCOUNTANTS (AICPA) 
CPAs are licensed by the state in which they practice, but a significant influence on ‘OBJECTIVE 2-5 9 


CPAs is exerted by their national professional organization, the American Institute 
of Certified Public Accountants (AICPA). Membership in the AICPA is restricted 
to CPAs, but not all members are practicing as independent auditors. Many members 
formerly worked for CPA firms but are currently working in government, industry, and 
education. AICPA membership is voluntary, so not all CPAs join. With over 400,000 
CPAs, the AICPA is the largest professional association for CPAs in the United States. 
The AICPA sets professional requirements for CPAs, conducts research, and 
publishes materials on many different subjects related to accounting, auditing, attesta- 
tion and assurance services, management consulting services, and taxes. The AICPA also 
promotes the accounting profession through organizing national advertising campaigns, 
promoting new assurance services, and developing specialist certifications to help mar- 
ket and ensure the quality of services in specialized practice areas. For example, the asso- 
ciation currently offers specialty designations in business valuation, financial planning, 
information technology, financial forensics, and global management accounting. 


Describe the key functions 
performed by the AICPA. 


The AICPA sets standards and rules that all members and other practicing CPAs must 
follow. Four major areas in which the AICPA has authority to set standards and make 
rules are as follows: 


Establishing Standards 
and Rules 


1. Auditing standards. The Auditing Standards Board (ASB) of the AICPA is respon- 
sible for issuing pronouncements on auditing matters in the U.S. for all entities 
other than publicly traded companies and broker-dealers registered with the SEC. 
ASB pronouncements are called Statements on Auditing Standards (SASs). 
They are further discussed later in this chapter and throughout the text. 

2. Compilation and review standards. The Accounting and Review Services Committee is 
responsible for issuing pronouncements of the CPA’s responsibilities when a CPA is 
associated with financial statements of privately owned companies that are not au- 
dited. They are called Statements on Standards for Accounting and Review Services 
(SSARS), and they provide guidance for performing preparation, compilation, and re- 
view services. In both a preparation service and a compilation service, the accountant 
helps the client prepare financial statements without providing any assurance. When 
a client engages a CPA to perform a compilation service, the CPA issues a compilation 
report; however, in a preparation service no report is issued by the CPA, but the face of 
the financial statements must include a statement that “no assurance is provided.” In 
a review service, the accountant performs inquiry and analytical procedures that pro- 
vide a reasonable basis for expressing limited assurance on the financial statements. 

3. Other attestation standards. Statements on Standards for Attestation Engagements 
are standards that may be used to provide assurance on nonfinancial information, 
and are also used to develop standards for specific attestation services. For example, 
detailed standards have been developed for reports on prospective financial infor- 
mation in forecasts and projections. Attestation standards are studied in Chapter 25. 

4. Code of Professional Conduct. The AICPA Professional Ethics Executive Committee 
sets rules of conduct that CPAs are required to meet. The rules and their relation- 
ships to ethical conduct are the subject of Chapter 4. 


In addition to writing and grading the CPA examination, the AICPA performs many 
educational and other functions for CPAs. The association supports research by its 
own research staff and provides grants to others. It also publishes a variety of materi- 
als, including journals such as the Journal of Accountancy, industry audit guides for sev- 
eral industries, periodic updates of the Codification of Statements on Auditing Standards, 
and the Code of Professional Conduct. 


Other AICPA Functions 
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CPAs must meet continuing education requirements to maintain their licenses to 
practice and to stay current on the extensive and ever-changing body of knowledge in 
accounting, auditing, attestation and assurance services, management consulting and 
risk advisory services, and taxes. The AICPA provides a considerable number of semi- 
nars and educational aids in a variety of subjects, such as online continuing education 
opportunities and reference materials in its CPExpress online learning library and its 
daily email alert about emerging professional issues through its CPA Letter Daily. 


INTERNATIONAL AND U.S. AUDITING STANDARDS 
‘OBJECTIVE 2-600 Auditing standards provide requirements and application and other explanatory mate- 


rial to aid auditors in fulfilling their professional responsibilities in the audit of histori- 
Understand the role of inter- ; . ; . : F i 
aacorallaudiéneistandands and cal financial statements. They include consideration of professional qualities such as 
their relation to U.S. auditing competence and independence, reporting requirements, and evidence. The three main 
standards. sets of auditing standards are International Standards on Auditing, AICPA auditing 
standards for entities other than public companies, and PCAOB Auditing Standards. 


International Standards on Auditing (ISAs) are issued by the International Auditing 
and Assurance Standards Board (IA ASB) of the International Federation of Accountants 
(IFAC). IFAC is the worldwide organization for the accountancy profession, with over 
175 member organizations in 130 countries, representing more than 2.5 million accoun- 
tants throughout the world. The IAASB works to improve the uniformity of auditing 
practices and related services throughout the world by issuing pronouncements on a 
variety of audit and attest functions and by promoting their acceptance worldwide. 

ISAs do not override a country’s regulations governing the audit of financial or 
other information, as each country’s own regulations generally govern audit practices. 
These regulations may be either government statutes or statements issued by regula- 
tory or professional bodies, such as the Australian Auditing & Assurance Standards 
Board or Spain’s Instituto de Contabilidad y Auditoria de Cuentas. Most countries, 
including the United States, base their auditing standards on ISAs, modified as appro- 
priate for each country’s regulatory environment and statutory requirements. 

The Auditing Standards Board in the U.S. has revised its audit standards to con- 
verge with the international standards. In addition, the PCAOB considers existing 
international standards in developing its standards. As a result, U.S. standards are 
mostly consistent with international standards, except for certain requirements that 
reflect unique characteristics of the U.S. environment, such as legal and regulatory 
requirements. For example, PCAOB Standard 5 (AS 5) addresses audits of internal 
control over financial reporting required by the Sarbanes—Oxley Act. 


International Standards 
on Auditing 


Auditing standards for private companies and other entities in the United States are 
established by the Auditing Standards Board (ASB) of the AICPA. These standards are 
referred to as Statements on Auditing Standards (SASs). Because the ASB has harmo- 
nized its agenda with the IAASB, the AICPA auditing standards are similar to the ISAs, 
although there are some differences. When developing a new SAS, the ASB uses the 
ISA as the base standard and then modifies that base standard only when modifica- 
tions are appropriate for the U.S. environment. If an auditor in the United States is 
auditing historical financial statements in accordance with ISAs, the auditor must meet 
any ISA requirements that extend beyond the requirements in the AICPA standards. 

Prior to passage of the Sarbanes—Oxley Act, the ASB established auditing stan- 
dards in the U.S. for private and public companies. The PCAOB now has responsibil- 
ity for auditing standards for U.S. public companies and broker-dealers registered with 
the SEC, while the ASB continues to provide auditing standards for private companies 
and other entities. The AICPA auditing standards are also referred to as U.S. generally 
accepted auditing standards (GAAS). 


AICPA Auditing 
Standards 
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CONVERGENCE 
AND CLARITY 
PROJECT 
COMPLETION 


IMPAC 


TS 


AUDITING 
STANDARDS 


CPAs in the U.S. need to be familiar with inter- 
national standards on auditing and attest services 
(ISAs) as these standards become accepted world- 
wide and are more common in cross-border opera- 
tions and financing. To address this need, the AICPA 
Auditing Standards Board (ASB) embarked on its Clar- 
ity Project to redraft existing AICPA auditing standards 
to align them with the ISAs and to make them easier 
to read, understand, and apply. The ASB completed 
this project for auditing standards in 2014. 

The ASB concluded that it should move its 
standard-setting process to be more formally aligned 
with international standards on auditing and the 
international standard-setting process. The ASB 
redrafted existing AICPA auditing standards to align 
them with the respective ISAs and in the future will 
develop new SASs in conjunction with the [AASB as 
it develops new ISAs. When developing a new AICPA 
auditing standard, the ASB uses the new ISA as the 
base standard and modifies that base when appropri- 
ate for the U.S. environment. 

Simultaneously with the move toward interna- 
tional convergence, the ASB Clarity Project was 
intended to make the U.S. auditing standards easier 
to read, understand, and apply. As the ASB redrafted 
existing guidance, each modified SAS now: 


* Briefly introduces the standard and its context 
within the audit of financial statements; 


Establishes objectives for each of the standards 
and aligns those objectives with the overall 
objective of an audit of financial statements 

and the overall objective of the auditor in 
conducting the audit; 

Includes a definition section, where relevant, in 
each standard; 

Separates requirements from applications or 
other explanatory material; 

Uses formatting techniques, such as bulleted lists, 
to enhance readability; and 

Includes special considerations in the audits of 
smaller, less complex entities and governmental 
audits. 


The overall objective of the ASB Clarity Project 
is to clarify and converge AICPA audit, attest, and 
quality control standards with the standards of the 
IAASB. With the completion of the Clarity Project 
for auditing standards, the ASB has now begun 
clarifying the Statements on Standards for Attestation 
Engagements 


Sources: |. “Financial Reporting Whitepaper: The AICPA’s 
Guide to Clarified and Converged Standards for Auditing and 
Quality Control” (www.aicpa.org); 2. “Clarified Statements 
on Auditing Standards” (www.aicpa.org); 3. “Attestation 
Clarity Project” (www.aicpa.org). 
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The PCAOB initially adopted existing auditing standards established by the ASB as 
interim audit standards. In addition, the PCAOB considers international auditing stan- 
dards when developing new standards. As a result, auditing standards for U.S. public 
and private companies are mostly similar. Standards issued by the PCAOB apply only 
to the audits of U.S. public companies and other SEC registrants including brokers 
and dealers, and are referred to as “the standards of the Public Company Accounting 
Oversight Board (United States)” in the audit reports of public companies. When ref- 
erenced in this text, we refer to these standards as PCAOB Auditing Standards. 

Figure 2-1 summarizes the relations among international auditing standards, 
AICPA auditing standards, and PCAOB auditing standards. International auditing 
standards as adopted by standard-setting bodies in individual countries apply to 


FIGURE 2-1 Relation of U.S. and International Auditing Standards 


International 
Standards on 
Auditing 


Applicable to entities 
outside the United States 


AICPA Auditing 
Standards 


Applicable to private 
entities in the United States 


Applicable to U.S. Public 
Companies and other SEC 
registrants, including 
broker-dealers 


PCAOB 
Auditing Standards 
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PCAOB Auditing 
Standards 


audits of entities outside the United States. AICPA auditing standards are similar to 
international auditing standards and apply to the audits of private companies and 
other entities in the United States. PCAOB auditing standards apply to audits of U.S. 
public companies and other SEC registrants. 

The overlapping ovals illustrate that there are more similarities than differences 
in the three sets of standards. The auditing concepts illustrated throughout this book 
are generally applicable to all audits. When we refer to “auditing standards,” the term 
applies to all audits unless otherwise noted. 


ORGANIZATION OF U.S. AUDITING STANDARDS 


Use U.S. auditing standards as a 
basis for further study. 


Purpose 
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As part of its Clarity Project, the ASB issued a Preface to the Codification of Auditing 
Standards that contains the “Principles Underlying an Audit in Accordance with 
Generally Accepted Auditing Standards” (referred to as the principles). The principles 
underlying an audit provide a framework to help auditors fulfill the following two 
objectives when conducting an audit of financial statements: 


1. Obtain reasonable assurance about whether the financial statements as a whole 
are free from material misstatement, whether due to fraud or error, thereby 
enabling the auditor to express an opinion on whether the financial statements 
are presented fairly, in all material respects, in accordance with an applicable 
financial reporting framework; and 

2. Report on the financial statements, and communicate as required by GAAS, in 
accordance with the auditor’s findings. 


While the principles are not requirements and do not carry any authority, they are 
used as a framework to provide the structure for the clarified Codification. This structure 
is organized around the following principles, which are summarized in Figure 2-2: 


¢ Purpose of an audit (Purpose) 

* Personal responsibilities of the auditor (Responsibilities) 

¢ Auditor actions in performing the audit (Performance) 

¢ Reporting (Reporting) 

When the PCAOB initially adopted ASB standards as interim standards, they 
adopted the framework existing at that time. This framework was referred to as the 10 
generally accepted auditing standards (GAAS), classified into three categories: general 
standards, standards of field work, and reporting standards. These 10 GAAS standards 
generally address the same concepts as the principles. The PCAOB is reorganizing their 
standards using a topical framework, which would eliminate the 10 GAAS standards 
from the PCAOB standards. We use the ASB principles as a basis for discussing the con- 
tent of U.S. auditing standards since this framework is relevant to all auditing standards. 


The purpose of an audit is to provide financial statement users with an opinion issued 
by the auditor on whether the financial statements are presented fairly, in all mate- 
rial respects, in accordance with the applicable financial reporting framework. That 
opinion enhances the users’ degree of confidence they can place in the information 
presented in the financial statements. 

An audit is conducted based on the premise that management is responsible for 
the preparation of the financial statements in accordance with the applicable financial 
reporting framework selected by management and that management has designed, 
implemented, and maintained internal control relevant to the preparation and presen- 
tation of financial statements that are free of material misstatements. An auditor also 
presumes that management will provide the auditor access to all information relevant 
to the preparation and presentation of financial statements, including unrestricted 
access to persons within the entity from whom the auditor may obtain audit evidence. 
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FIGURE 2-2. AICPA Principles Underlying an Audit 


Purpose of an Audit 


* Provide an opinion about the financial 
statements 


Responsibilities 
Possess appropriate competence and 
capabilities 
* Comply with ethical requirements 


* Maintain professional skepticism and 
exercise professional judgment 


Performance 


¢ Obtain reasonable assurance about 
whether financial statements are free 
of material misstatement 


* Plan work and supervise assistants 


¢ Determine and apply materiality level 
or levels 


* Identify and assess risks of material 
misstatement based on under- 
standing of entity and its environment, 
including internal controls 


* Obtain sufficient appropriate audit 
evidence 


Reporting 
¢ Express opinion on financial statements 
in a written report 


° Whether financial statements are 
presented fairly in accordance with 
financial reporting framework 


Principles related to the auditor’s responsibilities in the audit stress important personal 
qualities that the auditor should possess. 


Appropriate Competence and Capabilities Auditors are responsible for having 
appropriate competence and capabilities to perform the audit. This is normally inter- 
preted as requiring the auditor to have formal education in auditing and accounting, 
adequate practical experience for the work being performed, and continuing profes- 
sional education. Court cases clearly demonstrate that auditors must be technically 
qualified and experienced in those industries in which their clients are engaged. 

In any case in which the CPA or the CPA’s assistants are not qualified to perform 
the work, a professional obligation exists to acquire the requisite knowledge and skills, 
suggest someone else who is qualified to perform the work, or decline the engagement. 


Comply with Relevant Ethical Requirements The AICPA Code of Professional Conduct 
outlines the ethical requirements for CPAs who practice in accounting firms or work 
in organizations as part of management. The Code and auditing standards stress the 
need for independence in an audit engagement. Of particular importance are require- 
ments for CPA firms to follow several practices to increase the likelihood of indepen- 
dence of all personnel. For example, there are established procedures on larger audits 
when there is a dispute between management and the auditors. Specific methods to 
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ensure that auditors maintain their independence and comply with other relevant 
ethical requirements are studied in Chapter 4. 


Maintain Professional Skepticism and Exercise Professional Judgment Auditors 
are responsible for maintaining professional skepticism and exercising professional 
judgment throughout the planning and performance of the audit. Auditing standards 
describe professional skepticism as an attitude that includes a questioning mind, 
being alert to conditions that might indicate possible misstatements due to fraud or 
error, and a critical assessment of audit evidence. Simply stated, auditors are to remain 
alert for the possibility of the presence of material misstatements whether due to 
fraud or error throughout the planning and performance of an audit. 

In making judgments about the presence of material misstatements, auditors 
are responsible for applying relevant training, knowledge, and experience in making 
informed decisions about the courses of action that are appropriate in the circum- 
stances of the audit engagement. Auditors are responsible for fulfilling their duties 
diligently and carefully. 


Responsibilities related to the performance of the audit relate to auditor actions con- 
cerning evidence accumulation and other activities during the actual conduct of the 
audit. To express an opinion on the financial statements, the auditor obtains reason- 
able assurance about whether the financial statements as a whole are free from mate- 
rial misstatement, whether due to fraud or error. To obtain reasonable assurance, the 
auditor fulfills several performance responsibilities. 


Adequate Planning and Supervision The auditor is responsible for sufficiently 
planning an audit to ensure an adequate audit and proper supervision of assistants. 
Supervision is essential in auditing because a considerable portion of the audit is done 
by less experienced staff members. 


Determine and Apply Materiality Levels Because the auditor’s opinion is about 
whether the financial statements contain material misstatements, the auditor is 
responsible for determining and applying an appropriate materiality level or levels 
throughout the audit. A misstatement is considered material if knowledge of the 
misstatement will affect a decision of a reasonable user of the financial statements. 
Chapters 3 and 8 discuss how auditors determine and apply materiality levels. 


Assess Risks of Material Misstatement To adequately perform the audit, the audi- 
tor is responsible for assessing the risks that the financial statements contain material 
misstatements and then performing further audit procedures in response to those 
risks to determine if material misstatements exist. To adequately assess the risk of 
material misstatements, the auditor must have an understanding of the client’s busi- 
ness and industry. This understanding helps the auditor identify significant client 
business risks that impact the risk of significant misstatements in the financial state- 
ments. For example, to audit a bank, an auditor must understand the nature of the 
bank’s operations, federal and state regulations applicable to banks, and risks affecting 
significant accounts such as loan loss reserves. 

One of the most widely accepted concepts in the theory and practice of auditing is 
the importance of the client’s system of internal control for mitigating client business 
risks, safeguarding assets and records, and generating reliable financial information. 
If the auditor is convinced that the client has an excellent system of internal control, 
one that includes adequate internal controls for providing reliable data, the amount 
of audit evidence to be accumulated can be significantly less than when controls are 
not adequate. In some instances, internal control may be so inadequate as to preclude 
conducting an effective audit. 


Sufficient Appropriate Evidence The auditor is responsible for obtaining sufficient 
appropriate audit evidence about whether material misstatements exist by designing 
and implementing appropriate responses to the assessed risks. Decisions about how 
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much and what types of evidence to accumulate for a given set of circumstances require 
professional judgment. A major portion of this book is concerned with the study of 
evidence accumulation and the circumstances affecting the amount and types needed. 


The principles related to reporting note that the auditor is responsible for expressing 
an opinion in the form of a written report about whether the financial statements 
are presented fairly, in all material respects, in accordance with the applicable finan- 
cial reporting framework. This opinion is based on the evaluation of audit evidence 
obtained and the auditor’s findings. If an opinion cannot be expressed, the auditor’s 
report should state that conclusion. 


The principles underlying auditing standards are too general to provide meaningful 
guidance, so auditors turn to the SASs issued by the AICPA and the PCAOB auditing 
standards (ASs) for more specific guidance. In this book, we refer to these pronounce- 
ments as auditing standards, and we distinguish between AICPA and PCAOB stan- 
dards only when there are substantive differences. Auditing standards are regarded as 
authoritative literature, and every member who performs audits of historical financial 
statements is required to follow them under the AICPA Code of Professional Conduct. The 
AICPA and the PCAOB issue new statements when an auditing problem arises of suf- 
ficient importance to warrant an official interpretation. At this writing, SAS 129 and 
AS18 were the last ones issued by the AICPA and PCAOB, respectively, and incorpo- 
rated into the text materials, but readers should be alert to subsequent standards that 
influence auditing requirements. 


All SASs issued by the AICPA are given two classification numbers: an SAS and an 
AU-C number that indicates its location in the Codification of Auditing Standards. Both 
classification systems are used in practice. For example, the Statement on Auditing 
Standards, Substantive Changes Related to Using the Work of Internal Auditors, is SAS No. 
128 and AU-C 610. The SAS number identifies the order in which it was issued 
in relation to other SASs; the AU-C number identifies its location in the AICPA 
Codification of all SASs. The AU-C section numbering is equivalent to the ISA num- 
bers. The letter “C” is used to distinguish clarified standards from earlier standards 
issued by the AICPA. 

Auditing Standards issued by the PCAOB are also numbered consecutively (e.g., 
AS1, AS2). The AICPA standards adopted by the PCAOB as interim standards retained 
the original AU classification that was used for those standards. The PCAOB is pro- 
posing a numerical reorganization of their standards by topical area. This would avoid 
confusion with the AICPA AU-C section numbering, but also facilitate comparison of 
the two sets of auditing standards. 


Although the auditing standards are authoritative guidance for members of the profes- 
sion, they provide less direction to auditors than might be assumed. A limited number 
of specific audit procedures are required by the standards, and there are no specific 
requirements for auditors’ decisions, such as determining sample size, selecting sample 
items from the population for testing, or evaluating results. Many practitioners believe 
that the standards should provide more clearly defined guidelines for determining the 
extent of evidence to be accumulated. Such specificity would eliminate some difficult 
audit decisions and provide a line of defense for a CPA firm charged with conducting 
an inadequate audit. However, highly specific requirements could turn auditing into 
mechanistic evidence gathering, devoid of professional judgment. From the point of 
view of both the profession and the users of auditing services, there is probably greater 
harm in defining authoritative guidelines too specifically than too broadly. 

The AICPA principles and the auditing standards should be viewed by practitioners 
as minimum standards of performance rather than as maximum standards or ideals. At the 
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AUDIT QUALITY 
AROUND THE 
WORLD 


Global audit quality is of interest to U.S. investors, 
as many multinational companies are listed on a 

U.S. stock exchange. Non-US. audit firms of foreign 
companies listed on a U.S. stock exchange are 
required to register with the PCAOB and are subject 
to inspections, similar to U.S. audit firms. Currently, 
there are over 900 foreign audit firms registered 
with the PCAOB. However, the PCAOB has been 
unable to conduct inspections of audit firms in 
certain countries, including several European Union 
countries, China, and Hong Kong, primarily because 
the PCAOB has been denied access under local laws. 
U.S. investors must then rely on audit regulators in 
those countries to provide oversight of these audit 
firms. The list of audit firms that have not yet been 
inspected by the PCAOB is publicly available so that 
investors have knowledge and can “invest at their 
own risk.” 

Audit regulators from around the world are 
collaborating through the International Federation 
of Independent Audit Regulators (IFIAR) to share 
knowledge with a goal of improving audit quality. The 
membership of IFIAR has grown in recent years as 
more independent audit regulatory bodies are estab- 
lished and now consists of independent audit regula- 
tors from 51 jurisdictions, including the U.S. As one 


example of their knowledge-sharing efforts, IFIAR 
conducts surveys related to inspection findings. Their 
recent survey from year 2014 inspection findings 
identified similar deficiencies in audit engagements 

of publicly traded companies around the world. The 
most common themes in the inspection findings for 
the 29 countries participating in the survey relate 

to deficiencies in auditing fair value measurements, 
internal control testing, and revenue recognition. 
These findings are consistent with the prior year’s 
IFIAR survey results, as well as with audit deficien- 
cies identified in the PCAOB inspection process in 
the U.S., suggesting audit firms around the world face 
similar challenges. 

IFIAR encourages audit firms to use the survey 
evidence and individual inspection findings to 
identify the root causes of the audit deficiencies as 
well as actions to improve quality. Collectively, the 
regulators and audit firms hope to work together to 
reduce the number of audit deficiencies and improve 
audit quality. 


Sources: |. International Federation of Independent Audit 
Regulators Report on 2014 Survey of Inspection Findings 
(March 3, 2015) (www..ifiar.org); 2. PCAOB International 
Inspections (www.pcaobus.org/international). 


same time, the existence of auditing standards does not mean the auditor must always 
follow them blindly. If an auditor believes that the requirement of a standard is impracti- 
cal or impossible to perform, the auditor is justified in following an alternative course of 
action, provided that sufficient appropriate evidence is obtained. Similarly, if the issue in 
question is immaterial in amount, it is also unnecessary to follow the standard. However, 
the burden of justifying departures from the standards falls on the auditor. 

When auditors desire more specific guidelines, they must turn to less authori- 
tative sources, including textbooks, journals, and technical publications. Materials 
published by the AICPA, such as the Journal of Accountancy and industry audit guides, 
furnish assistance on specific questions. We provide further study of the standards 
and make frequent reference to specific standards throughout the text. 


CONCEPT CHECK 


1. What is the role of the Public Company Accounting Oversight Board? 


2. What roles are played by the American Institute of Certified Public Accountants for its 
members? 


3. Describe the relations among international auditing standards, AICPA auditing standards, 
and PCAOB auditing standards. 


QUALITY CONTROL 


Identify quality control standards 
and practices within the account- 
ing profession. 
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For a CPA firm, quality control comprises the methods used to ensure that the firm 
meets its professional responsibilities to clients and others. These methods include the 
organizational structure of the CPA firm and the procedures the firm establishes. For 
example, a CPA firm might have an organizational structure that ensures the techni- 
cal review of every engagement by a partner who has expertise in the client’s industry. 
Auditing standards require each CPA firm to establish quality control policies and 
procedures. The standards recognize that a quality control system can provide only 
reasonable assurance, not a guarantee, that auditing standards are followed. 


Quality control is closely related to but distinct from auditing standards. To ensure 
that the principles in auditing standards are followed on every audit, a CPA firm follows 
specific quality control procedures that help it meet those standards consistently on 
every engagement. Quality controls are therefore established for the entire CPA firm, 
whereas auditing standards are applicable to individual engagements. 


Each firm should document its quality control policies and procedures. Procedures 
should depend on such things as the size of the firm, the number of practice offices, 
and the nature of the practice. The quality control procedures of a 150-office inter- 
national firm with many complex, multinational clients should differ considerably 
from those of a five-person firm specializing in small audits in one or two industries. 

The system of quality control should include policies and procedures that address 
six elements. These are listed in Table 2-3 with brief descriptions and procedural 
examples that firms might use to satisfy the requirement. 


Elements of Quality 
Control 


It should be noted that public accounting firms must be enrolled in an AICPA-approved 
practice-monitoring program for members in the firm to be eligible for membership in 
the AICPA. Practice-monitoring, also known as peer review, is the review, by CPAs, of 
another CPA firm’s compliance with its quality control system. The purpose of a peer 
review is to determine and report whether the CPA firm being reviewed has developed ade- 
quate quality control policies and procedures and follows them in practice. Unless a firm 
has a peer review, all members of the CPA firm lose their eligibility for AICPA membership. 

The AICPA Peer Review Program is administered by the state CPA societies under 
the overall direction of the AICPA peer review board. Reviews are conducted every 


Peer Review 


TABLE 2-3 Elements of Quality Control 


Element Summary of Requirements Example of a Procedure 


Leadership responsibilities 
for quality within the 
firm (“tone at the top”) 


The firm should promote a culture that quality is essential in performing 
engagements and should establish policies and procedures that support 
that culture. 


The firm’s training programs emphasize the 
importance of quality work, and this is 
reinforced in performance evaluation and 
compensation decisions. 


Relevant ethical 
requirements 


All personnel on engagements should maintain independence in mind 
and in appearance, perform all professional responsibilities with 
integrity, and maintain objectivity in performing their professional 
responsibilities. 


Each partner and employee must answer an 
“independence questionnaire” annually, 
dealing with such things as stock ownership 
and membership on boards of directors. 


Acceptance and con- Policies and procedures should be established for deciding whether to ac- A client evaluation form, dealing with such 


tinuation of client re- 
lationships and specific 
engagements 


cept or continue a client relationship or specific engagement. These pol- 
icies and procedures should minimize the risk of associating with a client 
whose management lacks integrity. The firm should also only undertake 
engagements that can be completed with professional competence. 


matters as predecessor auditor comments 
and evaluation of management, must be 
prepared for every new client before 
acceptance. 


Human resources 


Policies and procedures should be established to provide the firm with 


reasonable assurance that 


All new personnel should be qualified to perform their work competently. 
Work is assigned to personnel who have adequate technical training 
and proficiency. 

All personnel should participate in continuing professional education 
and professional development activities that enable them to fulfill their 
assigned responsibilities. 

Personnel selected for advancement have the qualifications necessary 
for the fulfillment of their assigned responsibilities. 


Each professional must be evaluated on every 


engagement using the firm’s individual 
engagement evaluation report. 


Engagement performance 
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Monitoring 


Policies and procedures should exist to ensure that the work performed 


by engagement personnel meets applicable professional standards, legal 
and regulatory requirements, and the firm’s standards of quality. 


Policies and procedures should exist to ensure that the other quality con- 


trol elements are being effectively applied. 


The firm’s director of accounting and auditing is 


The quality control partner must test the 


available for consultation and must approve 
all engagements before their completion. 


quality control procedures at least annually 
to ensure the firm is in compliance. 
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Relationships Among Auditing Standards, Quality Control, 
AICPA Practice Centers, and Peer Review 


FIGURE 2-3 


Quality control 


Standards Auditing standards 


Standards applicable to a Standards applicable to 
CPA firm to aid in satisfying each audit 
auditing standards 


Audit practice 


and quality centers Becrreview 


Organizations intended to Method to determine 

help firms meet quality whether a CPA firm meets 
control standards and audit quality control standards 
standards 


three years, and are normally performed by a CPA firm selected by the firm being 
reviewed, although the firm can request that it be assigned a reviewer through the 
administering state society. Firms required to be registered with and inspected by 
the PCAOB must be reviewed by the AICPA National Peer Review Committee to 
evaluate the non-SEC portion of the firm’s accounting and auditing practice that is 
not inspected by the PCAOB. After the review is completed, the reviewers issue a 
report stating their conclusions and recommendations. Results of the peer review are 
included in a public file by the AICPA. 

Peer review benefits individual firms by helping them meet quality control stan- 
dards, which, in turn, benefits the profession through improved practitioner perfor- 
mance and higher-quality audits. A firm having a peer review can further benefit if 
the review improves the firm’s practice, thereby enhancing its reputation and effec- 
tiveness and reducing the likelihood of lawsuits. Of course, peer reviews are expensive 
to conduct, so the benefits come at a cost. 


The AICPA has established audit practice and quality centers as resource centers to 
improve audit practice quality. The Center for Audit Quality (CAQ) is a public 
policy organization affiliated with the AICPA serving investors, public company audi- 
tors, and the capital markets. The Center’s mission is to foster confidence in the audit 
process and to make public company audits even more reliable and relevant for inves- 
tors. The Private Companies Practice Section (PCPS) provides practice management 
information to firms of all sizes. 

In addition to these firm resources, the AICPA has established audit quality cen- 
ters for governmental audits and employee benefit plan audits. Figure 2-3 summarizes 
the relationships among auditing standards, quality control, the audit practice and 
quality centers, and peer review in ensuring audit quality. 


SUMMARY 


This chapter discussed the nature of the CPA profession and the activities of CPA firms. 
Because CPA firms play an important social role, several organizations, including the PCAOB, 
SEC, and AICPA, provide oversight to increase the likelihood of appropriate audit quality and 
professional conduct. These are summarized in Figure 2-4. Shaded circles in the figure indi- 
cate items discussed in this or the last chapter. The AICPA Code of Professional Conduct provides 
a standard of conduct for practitioners and is discussed in Chapter 4. The potential for legal 
liability is also a significant influence on auditor conduct and is discussed in Chapter 5. 
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FIGURE 2-4 


Ways the Profession and Society Encourage CPAs to Conduct 
Themselves at a High Level 


Auditing 
CPA standards 


examination 


Quality 
control 


Continuing 
education 
requirements 


Conduct 


Legal 


CPA firm liability 
personnel 


Peer review 


PCAOB and SEC 


AICPA 
Practice and 
quality centers 


Code of 
Professional 


Conduct 


American Institute of Certified Pub- 
lic Accountants (AICPA)—a voluntary 
organization of CPAs that sets professional 
requirements, conducts research, and pub- 
lishes materials relevant to accounting, 
auditing, advisory services, and taxes 
Center for Audit Quality (CAQ)—a 
public policy organization with a mission 
to foster confidence in the audit process 
and to make public company audits even 
more reliable and relevant for investors 
Generally accepted auditing standards 
(GAAS)—refers to AICPA auditing stan- 
dards developed and issued in the form of 
Statements on Auditing Standards (SASs) 
and codified in AU-C sections in the Codifi- 
cation of Auditing Standards 

International Standards on Auditing 
(ISAs)—statements issued by the Interna- 
tional Auditing and Assurance Standards 
Board of the International Federation of 
Accountants to promote international 
acceptance of auditing standards 

Peer review—the review by CPAs of a 
CPA firm’s compliance with its quality 
control system 


ESSENTIAL TERMS 


Principles underlying an audit— 
framework helpful in understanding and 
explaining an audit; provide a structure 
for the Codification of Statements on Auditing 
Standards 

Public Company Accounting Oversight 
Board (PCAOB)—board created by the 
Sarbanes-Oxley Act; oversees auditors 
of public companies and broker-dealers, 
including establishing auditing, attestation, 
and quality control standards and performing 
inspections of registered accounting firms 
Quality control—methods used by a CPA 
firm to ensure that the firm meets its profes- 
sional responsibilities to clients and others 
Securities and Exchange Commission 
(SEC)—a federal agency that oversees the 
orderly conduct of the securities markets; 
the SEC assists in providing investors in pub- 
lic corporations with reliable information 
upon which to make investment decisions 
Statements on Auditing Standards 
(SASs)—pronouncements issued by the 
Auditing Standards Board of the AICPA 
applicable to audits of entities other than 
public issuers 


REVIEW QUESTIONS 


2-1 (OBJECTIVES 2-1, 2-2, 2-8) What major characteristics of the organization and conduct of 
CPA firms permit them to fulfill their social function competently and independently? 
2-2 (OBJECTIVE 2-3) What events led to the creation of the Public Company Accounting 
Oversight Board and what is their role in the oversight of audit firms? 
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2-3 (OBJECTIVE 2-4) Describe the role of the SEC in society and discuss its relationship with 
and influence on the practice of auditing. 

2-4 (OBJECTIVE 2-5) The International Framework for Assurance Engagements is the interna- 
tional version of AICPA Statements on Standards for Attestation. This framework provides 
a frame of reference for assurance practitioners. Why is the framework needed? 

2-5 (OBJECTIVES 2-3, 2-5, 2-6) Who is responsible for establishing auditing standards for 
audits of public companies in your country? Who is responsible for establishing auditing 
standards for audits of private companies in your country? Explain. 

2-6 (OBJECTIVE 2-6) Describe the role of International Standards on Auditing. What is the 
relationship between International Standards on Auditing and U.S. auditing standards? 
2-7 (OBJECTIVES 2-4, 2-7) Distinguish between auditing standards and generally accepted 
accounting principles, and give two examples of each. 

2-8 (OBJECTIVE 2-7) Give a brief outline of the principles related to the auditor’s responsibil- 
ities in the audit, and discuss important personal qualities that the auditor should possess 
based on auditing standards and codes. 

2-9 (OBJECTIVE 2-7) In some instances, the underlying AICPA standards could be consid- 
ered too general for in-depth guidance, so auditors frequently turn to the SASs issued by 
the ASB for more specific guidance. Collectively, these statements constitute generally 
accepted auditing standards (GAAS) and are often referred to as auditing standards, SASs, 
or GAAS. Comment on and evaluate standards of performance. 

2-10 (OBJECTIVE 2-8) What are the elements of quality control when dealing with a CPA firm? 
2-11 (OBJECTIVE 2-8) The following is an example of a CPA firm’s quality control proce- 
dure requirement: “Any person being considered for employment by the firm must have 
completed a basic auditing course and have been interviewed and approved by an audit part- 
ner of the firm before he or she can be hired for the audit staff.” Which element of quality 
control does this procedure affect, and what is the importance of having the requirement? 
2-12 (OBJECTIVE 2-8) State what is meant by the term peer review. What are the implications 
of peer review for the profession? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


2-13 (OBJECTIVE 2-7) The following questions deal with auditing standards. Choose the best 
response. 


a. Which of the following best describes what is meant by U.S. auditing standards? 
(1) Acts to be performed by the auditor 
(2) Measures of the quality of the auditor’s performance 
(3) Procedures to be used to gather evidence to support financial statements 
(4) Audit objectives generally determined on audit engagements 


b. The Responsibilities principle underlying AICPA auditing standards includes a 
requirement that 
(1) the audit be adequately planned and supervised. 
(2) the auditor’s report state whether or not the financial statements conform to 
generally accepted accounting principles. 
(3) professional judgment be exercised by the auditor. 
(4) informative disclosures in the financial statements be reasonably adequate. 


c. What is the general character of the responsibilities characterized by the Performance 

principles? 

(1) The competence, independence, and professional care of persons performing the audit 

(2) Criteria for the content of the auditor’s report on financial statements and 
related footnote disclosures 

(3) The criteria of audit planning and evidence gathering 

(4) The need to maintain an independence in mental attitude in all matters pertain- 
ing to the audit 


2-14 (OBJECTIVE 2-8) The following questions concern quality control standards. Choose 
the best response. 
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a. The nature and extent of a CPA firm’s quality control policies and procedures depend on 


The CPA The Nature of the Cost-benefit 
Firm’s Size CPA Firm’s Practice Considerations 
(1) Yes Yes Yes 
(2) Yes Yes No 
(3) Yes No Yes 
(4) No Yes Yes 


b. Which of the following are elements of a CPA firm’s quality control that should be 
considered in establishing its quality control policies and procedures? 


Human Resources Monitoring Engagement Performance 
(1) Yes Yes No 
(2) Yes Yes Yes 
(3) No Yes Yes 
(4) Yes No Yes 


c. One of a CPA firm’s basic objectives is to provide professional services that conform 
with professional standards. Reasonable assurance of achieving this objective is pro- 
vided through 
(1) asystem of quality control. 

(2) asystem of peer review. 
(3) continuing professional education. 
(4) compliance with generally accepted reporting standards. 
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DISCUSSION QUESTIONS AND PROBLEMS 


2-15 (OBJECTIVE 2-7) Sarah O’Hann enjoyed taking her first auditing course as part of her 
undergraduate accounting program. While at home during her semester break, she and 
her father discussed the class, and it was clear that he didn’t really understand the nature of 
the audit process as he asked the following questions: 
a. What is the main objective of the audit of an entity’s financial statements? 
b. The audit represents the CPA firm’s guarantee about the accuracy of the financial 
statements, right? 
c. Isn’t the auditor’s primary responsibility to detect all kinds of fraud at the client? 
d. Given the CPA firm is auditing financial statements, why would they need to under- 
stand anything about the client’s business? 
e. What does the auditor do in an audit other than verify the mathematical accuracy of 
the numbers in the financial statements? 


Required If you were Sarah, how would you respond to each question? 


2-16 (OBJECTIVE 2-8) For each of the following procedures taken from the quality control man- 
ual of a CPA firm, identify the applicable element of quality control from Table 2-3 on page 63. 


a. Appropriate accounting and auditing research requires adequate technical reference 
materials. Each firm professional has online password access through the firm’s Web 
site to electronic reference materials on accounting, auditing, tax, SEC, and other 
technical information, including industry data. 

b. The partners accept responsibility for leading and promoting a quality assurance cul- 
ture within the firm and for providing and maintaining a quality assurance manual and 
all other necessary practical aids and guidance to support engagement quality. 

c. Each office of the firm shall be visited at least annually by review persons selected by 
the director of accounting and auditing. Procedures to be undertaken by the review- 
ers are illustrated by the office review program. 

d. Audit engagement team members enter their electronic signatures in the firm’s 
engagement management software to indicate the completion of specific audit 
program steps. At the end of the audit engagement, the engagement management 
software will not allow archiving of the engagement file until all audit program steps 
have been electronically signed. 

e. At all stages of any engagement, an effort is made to involve professional staff at 
appropriate levels in the accounting and auditing decisions. Various approvals of the 
manager or senior accountant are obtained throughout the audit. 

f. No employee will have any direct or indirect financial interest, association, or rela- 
tionship (for example, a close relative serving a client in a decision-making capacity) 
not otherwise disclosed that might be adverse to the firm’s best interest. 

g. Individual partners submit the nominations of those persons whom they wish to 
be considered for partner. To become a partner, an individual must have exhibited a 
high degree of technical competence; must possess integrity, motivation, and judg- 
ment; and must have a desire to help the firm progress through the efficient dispatch 
of the job responsibilities to which he or she is assigned. 

h. Through our continuing employee evaluation and counseling program and through 
the quality control review procedures as established by the firm, educational needs 
are reviewed and formal staff training programs modified to accommodate changing 
needs. At the conclusion of practice office reviews, apparent accounting and auditing 
deficiencies are summarized and reported to the firm’s director of personnel. 

i. All potential new clients are reviewed before acceptance. The review includes con- 
sultation with predecessor auditors, and background checks. All new clients are ap- 
proved by the firm management committee, including assessing whether the firm 
has the technical competence to complete the engagement. 

j. Each audit engagement must include a concurring partner review of critical audit decisions. 
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2-17 (OBJECTIVES 2-6, 2-7) You have been asked to make a presentation in your International 
Business class about how globalization is impacting the auditing profession. In prepara- 
tion, you met with your auditing professor and discussed these questions: 
a. What organizations are responsible for establishing U.S. auditing standards used by CPA 
firms when auditing financial statements prepared by organizations based in the U.S.? 
b. What organization is responsible for establishing auditing standards internationally? 
. To what extent are AICPA auditing standards and international auditing standards similar? 
d. What is the process the AICPA Auditing Standards Board (ASB) uses to develop 
AICPA auditing standards? 
e. To what extent are PCAOB auditing standards impacted by international standards? 
f. What auditing standards should an audit firm follow when they audit a client located in a 
foreign country that is listed on both a foreign stock exchange and a U.S. stock exchange? 


fe) 


Briefly outline key points that you would make in your presentation to address these questions. 


2-18 (OBJECTIVE 2-6) For each engagement described below, indicate whether the engage- 
ment is likely to be conducted under international auditing standards, or auditing standards 
of a specific country, 
a. An audit of a private company in Egypt with no public equity or debt. 
b. An audit of a Genovian private company with public debt in Genovia (Genovia is a 
fictional European country.) 
c. Anaudit of a Hong Kong stock broker registered with the Hong Kong Stock Exchange 
d. An audit of a Sony Electronics of Japan that is also listed in the United States and 
whose financial statements will be filed with the SEC. 
e. An audit of the American Red Cross. 
f. An audit of a British private company to be used for a loan from a publicly traded 
bank in the United Kingdom 
g. An audit of a German multinational with businesses in 30 countries around the world. 
h. An audit of a Singaporean public company that is a subsidiary of a Japanese company 
that will be used for reporting by the parent company in Japan. 


2-19 (OBJECTIVE 2-7) Ray, the owner of a small company, asked Holmes, a CPA, to conduct 
an audit of the company’s records. Ray told Holmes that an audit was to be completed in 
time to submit audited financial statements to a bank as part of a loan application. Holmes 
immediately accepted the engagement and agreed to provide an auditor’s report within 
three weeks. Ray agreed to pay Holmes a fixed fee plus a bonus if the loan was granted. 
Holmes hired two accounting students to conduct the audit and spent several hours 
telling them exactly what to do. Holmes told the students not to spend time reviewing 
internal controls but instead to concentrate on proving the mathematical accuracy of the 
ledger accounts and summarizing the data in the accounting records that supported Ray’s 
financial statements. The students followed Holmes’s instructions and after two weeks 
gave Holmes the financial statements, which did not include footnotes. Holmes reviewed 
the statements and prepared an unmodified auditor’s report. The report did not refer to 
generally accepted accounting principles or to the consistent application of such principles. 


Briefly describe each of the principles underlying AICPA auditing standards and indicate 
how the action(s) of Holmes resulted in a failure to comply with each principle. 


Organize your answer as follows:* 
Holmes’ Actions Resulting in Failure to 
Brief Description of Principle Comply with the Principle 


2-20 (OBJECTIVE 2-6) International Standards on Auditing (ISAs) are issued by the International 
Auditing and Assurance Standards Board (I[AASB). Use the IAASB Web site to learn more 
about the IAASB and its standard-setting activities. 

a. What is the objective of the IAASB? Who uses International Standards on Auditing? 

b. Summarize the due process followed by the IAASB in setting standards. 

c. How is the IAASB committed to transparency in the standard-setting process? 


* Based on AICPA question paper, American Institute of Certified Public Accountants. 
1 The IAASB Web site can be accessed at www.iaasb.org. 
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LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


3-1 Describe the parts of the 
standard unmodified opinion 
audit report for nonpub- 
lic entities under AICPA 
auditing standards. 

3-2 Specify the conditions required 
to issue the standard unmodi- 
fied opinion audit report. 

3-3 Understand reporting on 
financial statements and inter- 
nal control under PCAOB 
auditing standards. 

3-4 Describe the five circum- 
stances when an empha- 
sis-of-matter explanatory 
paragraph or nonstandard 
wording is appropriate 
to include in an unmodi- 
fied opinion audit report. 

3-5 Identify the types of audit 
reports that can be issued 
when an unmodified opin- 
ion is not justified. 

3-6 Explain how materiality affects 
audit reporting decisions. 

3-7 Draft appropriately modified 
opinion audit reports under 
a variety of circumstances. 

3-8 Determine the appro- 
priate audit report for a 
given audit situation. 

3-9 Understand use of interna- 
tional accounting and auditing 
standards by U.S. companies. 
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The Audit Report Was Timely, But at What Cost? 


Halvorson & Co., CPAs, was hired as the auditor for Machinetron, Inc., a company that manu- 
factured high-precision, computer-operated lathes. The owner, Al Trent, hired Halvorson to 
conduct the upcoming audit and assist with an initial public offering registration with the SEC. 


Because Machinetron’s mac- 
hines were large and complex, 
they were expensive. Each sale 
was negotiated _ individually 
by Trent, and the sales often 
transpired over several months. 
Improper recording of one or 
two machines could represent 
a material misstatement of the 
financial statements. 


The engagement partner in 
charge of the Machinetron 
audit was Bob Lehman, who 
had significant experience 
auditing manufacturing compa- 
nies. He recognized the risk 
for improper recording of sales, 
and he insisted that his staff 
confirm all receivables at year- 
end directly with customers. 
Lehman conducted his review 
of the Machinetron audit files 
the same day that Trent wanted to file the company’s registration statement for the initial pub- 
lic stock offering with the SEC. Lehman saw that a receivable for a major sale at year-end was 
supported by a fax, rather than the usual written confirmation reply. Apparently, relations with 
this customer were “touchy,” and Trent had discouraged the audit staff from communicating 
with the customer. 


At the end of the day, there was a meeting attended by Lehman, Trent, the underwriter of the 
stock offering, and the company’s attorney. Lehman indicated that a better form of confirma- 
tion would be required to support the receivable. After hearing this, Trent blew his stack. 
Machinetron’s attorney offered to write a letter to Halvorson & Co. stating that in his opinion, 
a fax had legal substance as a valid confirmation reply. Lehman, feeling tremendous pressure, 
accepted this proposal and signed off on an unmodified audit opinion. 


Six months after the stock offering, Machinetron announced that its revenues for the prior year 
were overstated as a result of improperly recorded sales, including the sale supported by the 
fax confirmation. The subsequent SEC investigation uncovered that the fax was returned to the 
audit firm by Trent, not the customer. Halvorson & Co. recalled their audit report, but this was 
too late to prevent the harm done to investors. Halvorson & Co. was forced to pay substantial 
damages, and Bob Lehman was forbidden to practice before the SEC. He subsequently left 
public accounting. 
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R eports are essential to audit and assurance engagements because they communicate the auditor’s findings. Users 
of financial statements rely on the auditor’s report to provide assurance on the company’s financial statements. As 
the story at the beginning of this chapter illustrates, the auditor will likely be held responsible if an incorrect audit 
report is issued. 

The audit report is the final step in the entire audit process. The reason for studying it now is to permit reference 
to different audit reports as we study the accumulation of audit evidence throughout this text. These evidence con- 
cepts are more meaningful after you understand the form and content of the final product of the audit. We begin by 
describing the content of the standard auditor’s report. 

As discussed in Chapter 2, the AICPA Auditing Standard Board (ASB) sets standards for nonpublic entities, 
and the PCAOB sets auditing standards for public companies. Because the PCAOB adopted the existing AICPA 
standards as interim standards, auditing standards, including those related to audit reporting, were similar for 
public companies and nonpublic entities. However, as part of the AICPA Clarity Project, the ASB modified audit 
reporting for nonpublic entities to be similar to reporting under international auditing standards. As a result, the 
formats of audit reports for public and nonpublic entities currently differ, although the overall substance of the 
content in the report is similar under both AICPA and PCAOB auditing standards. 


STANDARD UNMODIFIED OPINION AUDIT REPORT FOR 
NONPUBLIC ENTITIES 
To allow users to understand audit reports, AICPA auditing standards provide uniform ‘OBJECTIVE 3-1 


wording for the auditor's report, as illustrated in the auditor’s standard unmodified 

ini dit report in Figure 3-1 (p. 72). The reference to “standard” refers to th Bescnbe ie paraiey uie Sat 
YpMion aie : P : g - P: . Pgh ee : aa as dard unmodified opinion audit 
uniform wording typically used in audit reports, while “unmodified opinion” refers to report for nonpublic entities 
the fact that the auditor’s opinion about the financial statements contains no material under AICPA auditing standards. 
exceptions or qualifications. Different auditors may alter the wording or presentation 
slightly, but the meaning will be the same. 


The auditor’s standard unmodified opinion audit report contains eight distinct 


parts, and these are labeled in bold letters in the margin beside Figure 3-1. Parte et Standard 


Unmodified Opinion 

1. Report title. Auditing standards require that the report be titled and that the title Audit Report 
include the word independent. For example, appropriate titles include “independent audi- 
tor’s report,” “report of independent auditor,” or “independent accountant’s opinion.” The 
requirement that the title include the word independent conveys to users that the audit was 
unbiased in all aspects. 

2. Audit report address. The report is usually addressed to those for whom the report 
is prepared, including the company, its stockholders, or the board of directors. In recent 
years, it has become customary to address the report to the board of directors and stock- 
holders to indicate that the auditor is independent of the company. 

3. Introductory paragraph. The first paragraph of the report indicates that the CPA 
firm has performed an audit, which distinguishes the report from a compilation or 
review report. The first paragraph also lists the financial statements that were audited, 
including the notes to the financial statements as well as the balance sheet dates and 
the accounting periods covered in the income statement and statement of cash flows. 
The wording of the financial statements in the report should be identical to the titles 
used by management on the financial statements. Notice that the report in Figure 3-1 
is on comparative financial statements. Therefore, a report on both years’ statements 
is needed. 

4. Management’s responsibility. The report must include the heading “Management's 
Responsibility for the Financial Statements” and a paragraph that describes manage- 
ment’s responsibility for the financial statements. This responsibility includes selecting 
the appropriate accounting principles and maintaining internal control over financial 
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FIGURE 3-1 


Standard Unmodified Opinion Audit Report on Comparative Statements for a U.S. 


Nonpublic Company—AlICPA Auditing Standards 


Report Title 


Audit Report Address 


Introductory Paragraph 


Management’s Responsibility 


Auditor’s Responsibility 


Scope paragraph 


Auditor’s Opinion 


Signature and Address 
of CPA Firm 


Audit Report Date (Date 
Auditor Has Obtained 
Sufficient Appropriate 

Evidence 
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ANDERSON and ZINDER, P.C. 
Certified Public Accountants 
Park Plaza East — Suite 100 
Denver, Colorado 80110 


303/359-0800 


INDEPENDENT AUDITOR’S REPORT 


To the Board of Directors and Stockholders 
General Ring Corporation 


We have audited the accompanying balance sheets of General Ring Corporation as of December 31, 2016 and 
2015, and the related statements of income, changes in stockholders’ equity, and cash flows for the years then 
ended, and the related notes to the financial statements. 


Management’s Responsibility for the Financial Statements 


Management is responsible for the preparation and fair presentation of the financial statements in accordance 
with accounting principles generally accepted in the United States of America; this includes the design, 
implementation, and maintenance of internal control relevant to the preparation and fair presentation of 
financial statements that are free from material misstatement, whether due to fraud or error. 


Auditor’s Responsibility 


Our responsibility is to express an opinion on these financial statements based on our audits. We conducted 
our audits in accordance with auditing standards generally accepted in the United States of America. Those 
standards require that we plan and perform the audit to obtain reasonable assurance about whether the 
financial statements are free of material misstatement. 


An audit involves performing procedures to obtain audit evidence about the amounts and disclosures in the 
financial statements. The procedures selected depend on the auditor’s judgment, including the assessment of 
the risks of material misstatement of the financial statements, whether due to fraud or error. In making those 
risk assessments, the auditor considers internal control relevant to the entity’s preparation and fair 
presentation of the financial statements in order to design audit procedures that are appropriate in the 
circumstances, but not for the purpose of expressing an opinion on the effectiveness of the entity’s internal 
control. Accordingly, we express no such opinion. An audit also includes evaluating the appropriateness of 
accounting policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation of the financial statements. 


We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our 
audit opinion. 

Opinion 

In our opinion, the financial statements referred to above present fairly, in all material respects, the financial 
position of General Ring Corporation as of December 31, 2016 and 2015, and the results of their operations 


and cash flows for the years then ended in accordance with accounting principles generally accepted in the 
United States of America. 


Anderson and Zinder, P.C., CPAs 


Denver, Colorado 


February 15, 2017 
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reporting sufficient for preparation of financial statements that are free of material mis- 
statements due to fraud or error. 


5. Auditor’s responsibility. This section must include the heading “Auditor’s 
Responsibility” followed by three paragraphs that describe the auditor’s responsibility. 

The first paragraph states that the auditor’s responsibility is to express an opin- 
ion on the financial statements and that the audit was conducted in accordance with 
auditing standards generally accepted in the United States of America. This paragraph 
also notes that the audit is designed to obtain reasonable assurance about whether the 
financial statements are free of material misstatement. The inclusion of the word 
material conveys that auditors are only responsible to search for significant misstate- 
ments, not minor misstatements that do not affect users’ decisions. The use of the term 
reasonable assurance is intended to indicate that an audit cannot be expected to com- 
pletely eliminate the possibility that a material misstatement will exist in the financial 
statements. In other words, an audit provides a high level of assurance, but it is not a 
guarantee. 

The second paragraph describes the scope of the audit and the evidence accumu- 
lated about the amounts and disclosures in the financial statements. This paragraph 
indicates that the procedures depend on the auditor’s judgment and includes an 
assessment of the risk of material misstatements in the financial statements. It also 
indicates that the auditor considers internal control relevant to the preparation and 
fair presentation of the financial statements in designing the audit procedures per- 
formed, but this assessment of internal control is not for the purpose of and is not 
sufficient to express an opinion on the effectiveness of the entity’s internal control. 
The last sentence of this paragraph indicates that the audit includes evaluating the 
appropriateness of accounting policies selected, the reasonableness of accounting 
estimates, and the overall financial statement presentation. 

The third paragraph indicates the auditor believes that sufficient appropriate evidence 
has been obtained to support the auditor’s opinion. 


6. Opinion paragraph. This section must include the heading “Opinion” preceding the 
final paragraph in the standard report, which states the auditor’s conclusions based on the 
results of the audit. This part of the report is so important that often the entire audit report 
is referred to simply as the auditor's opinion. The opinion paragraph is stated as an opinion 
rather than as a statement of absolute fact or a guarantee. The intent is to indicate that the 
conclusions are based on professional judgment. The phrase in our opinion indicates that 
there may be some information risk associated with the financial statements, even though 
the statements have been audited. 

A controversial part of the auditor’s report is the meaning of the term present fairly. 
Does this mean that if generally accepted accounting principles are followed, the finan- 
cial statements are presented fairly, or something more? Occasionally, the courts have 
concluded that auditors are responsible for looking beyond generally accepted account- 
ing principles to determine whether users might be misled, even if those principles are 
followed. Most auditors believe that financial statements are “presented fairly” when the 
statements are in accordance with generally accepted accounting principles, but that 
it is also necessary to examine the substance of transactions and balances for possible 
misinformation. 


7. Signature and address of CPA firm. The signature identifies the CPA firm or practi- 
tioner who performed the audit. Typically, the firm’s name is used because the entire 
CPA firm has the legal and professional responsibility to ensure that the quality of the 
audit meets professional standards. The city and state of the audit firm should also be 
indicated. 


8. Audit report date. The appropriate date for the report is the one on which the audi- 
tor completed the auditing procedures needed to obtain sufficient appropriate audit 
evidence. This date is important to users because it indicates the last day of the auditor’s 
responsibility for the review of significant events that occurred after the date of the 
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financial statements. In the audit report in Figure 3-1 (p. 72), the balance sheet is dated 
December 31, 2016, and the audit report is dated February 15, 2017. This indicates that 
the auditor searched for material unrecorded transactions and events that occurred up to 
February 15, 2017. 


CONDITIONS FOR STANDARD UNMODIFIED 
OPINION AUDIT REPORT 


‘OBJECTIVE 3-200 The standard unmodified opinion audit report is issued when the following conditions 


have been met: 
Specify the conditions required 


to issue the standard unmodified 1 


se All statements—balance sheet, income statement, statement of changes in stock- 
opinion audit report. 


holders’ equity, and statement of cash flows—are included in the financial 
statements. 

2. Sufficient appropriate evidence has been accumulated, and the auditor has con- 
ducted the engagement in a manner that enables him or her to conclude that the 
audit was performed in accordance with auditing standards. 

3. The financial statements are presented fairly in all material respects in accordance 
with U.S. generally accepted accounting principles or other appropriate account- 
ing framework. This also means that adequate disclosures have been included in 
the footnotes and other parts of the financial statements. 

4, There are no circumstances requiring the addition of an emphasis-of-matter 
paragraph or modification of the wording or auditor’s opinion in the report. 


When these conditions are met, the standard unmodified opinion audit report 
for an audit of a nonpublic company, as shown in Figure 3-1, is issued. The standard 
unmodified opinion audit report is sometimes called a clean opinion because there 
are no circumstances requiring a modification of the auditor’s opinion. The standard 
unmodified opinion audit report is the most common audit opinion. Sometimes 
circumstances beyond the client’s or auditor’s control prevent the issuance of an 
unmodified (“clean”) opinion. However, in most cases, companies make the appropri- 
ate changes to their accounting records to avoid a qualification or modification by the 
auditor. 

If any of the requirements for the standard unmodified opinion audit report are 
not met, the standard unmodified opinion audit report cannot be issued. Figure 3-2 
indicates the categories of audit reports that can be issued by the auditor. The depar- 
tures from a standard unmodified opinion audit report are considered increasingly 
severe as one moves down the figure. Financial statement users are normally much 
more concerned about a disclaimer or adverse opinion than an unmodified opinion 
audit report that contains an additional emphasis-of-matter or other matters para- 
graph. These other categories of audit reports are discussed in the following sections. 


STANDARD AUDIT REPORT AND REPORT ON INTERNAL 
CONTROL OVER FINANCIAL REPORTING UNDER PCAOB 
AUDITING STANDARDS 


‘OBJECTIVE 3-300 There are two significant audit reporting differences for public companies. First, the 


; = standard unmodified opinion audit report is different for audits of financial state- 
Understand reporting on financial f bi : S d di f 1 bi : 1 
eae a ere na ments of public companies. Second, au itors of larger public companies must also 
under PCAOB auditing standards, issue an opinion on internal control over financial reporting. 
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FIGURE 3-2 | Categories of Audit Reports 


Standard 


Unrednediopinon The conditions stated above have been met. 


Unmodified Opinion with A complete audit took place with satisfactory results and 
Emphasis-of-matter financial statements are fairly presented, but the auditor 
Explanatory Paragraph believes that it is important or is required to provide additional 
or Nonstandard Wording information. 


The auditor concludes that the overall financial statements are 
fairly presented, but the scope of the audit has been materially 
restricted or applicable accounting standards were not followed 
in preparing the financial statements. 


Qualified 


The auditor concludes that the financial statements are not fairly 


Adverse 
presented. 


He or she is unable to form an opinion as to whether the financial 


Disclaimer ‘ : : 
statements are fairly presented, or he or she is not independent. 


PCAOB standards refer to the standard unmodified opinion audit report as an 
“unqualified opinion” audit report. Throughout this book, we use the term “unmodi- 
fied opinion” to represent the term “unqualified opinion” unless the setting is clearly 
applicable only to a public company, where we use the term “unqualified opinion” 
as in PCAOB auditing standards. The standard unmodified opinion audit report for 
public companies includes three paragraphs as illustrated in Figure 3-3 (p. 76). The 
report title, address, CPA firm name, and audit report date are similar for public 
companies and nonpublic entities and are not included in Figure 3-3. The report is 
quite similar to the audit report for nonpublic entities in Figure 3-1, with some differ- 
ences in wording. 

The first paragraph is the introductory paragraph and indicates that an audit 
was performed and the financial statements that were audited. The introductory 
paragraph also indicates that the financial statements are the responsibility of 
management and that the auditor’s responsibility is to express an opinion on the 
financial statements. Note that this information is similar to the first three para- 
graphs in the standard unmodified opinion audit report for nonpublic entities in 
Figure 3-1. 

The scope paragraph is similar to the second paragraph under the auditor’s respon- 
sibilities in Figure 3-1, and indicates that an audit is designed to provide reasonable 
assurance that the financial statements are free of material misstatement. The scope 
paragraph notes that auditing is done ona test basis. 

The third paragraph is the opinion paragraph and is similar to the opinion paragraph 
included in Figure 3-1. If the auditor also issues a separate report on internal control 
over financial reporting, a fourth paragraph would follow the opinion paragraph and 
reference the audit report on internal control. 
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Standard Unmodified 
Opinion Audit Report 
for Public Companies 


Standard Unmodified Opinion Audit Report on Comparative Statements for a 
U.S. Public Company— PCAOB Auditing Standards 


FIGURE 3-3 


Introductory Paragraph We have audited the accompanying balance sheets of Westbrook Company, Inc., as of December 31, 2016 
and 2015, and the related statements of operations, equity, and cash flows for each of the three years in 
the period ended December 31, 2016. These financial statements are the responsibility of the Company’s 
management. Our responsibility is to express an opinion on the financial statements based on our audits. 


Scope Paragraph We conducted our audits in accordance with the standards of the Public Company Accounting Oversight 
Board (United States). Those standards require that we plan and perform the audit to obtain reasonable 
assurance about whether the financial statements are free of material misstatement. 
An audit includes examining, on a test basis, evidence supporting the amounts and disclosures in the 
financial statements. An audit also includes assessing the accounting principles used and significant 
estimates made by management, as well as evaluating the overall financial statement presentation. We 
believe that our audits provide a reasonable basis for our opinion. 


Opinion Paragraph In our opinion, the financial statements referred to above present fairly, in all material respects, the financial 
position of Westbrook Company, Inc., as of December 31, 2016 and 2015, and the results of its operations 
and cash flows for each of the three years in the period ended December 31, 2016, in conformity with 
accounting principles generally accepted in the United States of America. 


As discussed in Chapter 1, Section 404(b) of the Sarbanes—Oxley Act requires the audi- 
tor of a public company to report on the effectiveness of internal control over finan- 
cial reporting. Larger public companies (known as accelerated filers) are required 
by the SEC to annually obtain an auditor’s report on internal control over financial 
reporting. As noted in Chapter 1, non-accelerated filers have been permanently 
exempted from this requirement by the passage by Congress of the 2010 Dodd-Frank 
financial reform legislation. 

PCAOB Auditing Standard 5 requires the audit of internal control to be inte- 
grated with the audit of the financial statements. However, the auditor may choose 
to issue separate reports, such as the separate report on internal control over 
financial reporting shown in Figure 3-4, or in a combined report. The combined 
report on financial statements and internal control over financial reporting 
addresses both the financial statements and management’s report on internal con- 
trol over financial reporting. While the combined report is permitted, the separate 
report on internal control over financial reporting is more common and includes 
these elements: 


Reports on Internal 
Control Over Financial 
Reporting 


A title that includes the word “independent.” 

¢ The introductory, scope, and opinion paragraphs describe that the scope of the 
auditor’s work and opinion is on internal control over financial reporting, and 
the introductory paragraph highlights management’s responsibility for and its 
separate report that contains management’s assessment of internal control over 
financial reporting. 

* The introductory and opinion paragraphs also refer to the framework used to 
evaluate internal control and that the audit was conducted in accordance with 
PCAOB standards. 

* The report includes a paragraph after the scope paragraph defining internal 
control over financial reporting. 

* The report also includes an additional paragraph before the opinion that 
addresses the inherent limitations of internal control. 

¢ Although the audit opinion on the financial statements addresses multiple 

reporting periods, the auditor’s opinion about the effectiveness of internal con- 

trol is as of the end of the most recent fiscal year. 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A.,.26al. Auditing and ARanbch FéehHeEsAGIODET Ro RRROFESS|Qsbation Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action ?docID=5185606. 
Created from undip-ebooks on 2020-11-30 17:33:45. 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education Limited, 2016. ProQuest Ebook Central, http://ebookcenhapherst SoMiiDUT RERORIEBil.action?doclD=57 6606. 


* The last paragraph of the report includes a cross-reference to the auditor's sepa- 
rate report on the financial statements. 


The separate report in Figure 3-4 is an unmodified opinion on the effectiveness 
of internal control over financial reporting prepared in accordance with PCAOB 
Auditing Standard 5. The auditor may issue a qualified opinion, adverse opinion, or 
disclaimer of opinion on the operating effectiveness of internal control over finan- 
cial reporting. Conditions that require the auditor to issue a report other than an 
unmodified opinion on the operating effectiveness of internal control are discussed in 
Chapter 12, along with the effects of these conditions on the wording of the auditor’s 
report on internal control over financial reporting. 

Auditor reporting on internal controls for private companies is covered in 
Chapter 25. 


FIGURE 3-4 Separate Report on Internal Control over Financial Reporting for a U.S. Public Company 


REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM 
To the Board of Directors and Shareholders of Westbrook Company, Inc.: 


We have audited Westbrook Company, Inc.’s internal control over financial reporting as of December 31, 
2016, based on criteria established in Internal Control—Integrated Framework issued by the Committee of 
Sponsoring Organizations of the Treadway Commission (the COSO criteria). Westbrook Company, Inc.’s 
management is responsible for maintaining effective internal control over financial reporting and for its 
assessment of the effectiveness of internal control over financial reporting included in the accompanying 
Management Report on Internal Control Over Financial Reporting. Our responsibility is to express an 
opinion on the company’s internal control over financial reporting based on our audit. 


We conducted our audit in accordance with the standards of the Public Company Accounting Oversight 
Board (United States). Those standards require that we plan and perform the audit to obtain reasonable 
assurance about whether effective internal control over financial reporting was maintained in all material 
respects. Our audit included obtaining an understanding of internal control over financial reporting, 
assessing the risk that a material weakness exists, testing and evaluating the design and operating 
effectiveness of internal control based on the assessed risk, and performing such other procedures as we 
considered necessary in the circumstances. We believe that our audit provides a reasonable basis for our 
opinion. 


A company’s internal control over financial reporting is a process designed to provide reasonable assurance 
regarding the reliability of financial reporting and the preparation of financial statements for external 
purposes in accordance with generally accepted accounting principles. A company’s internal control over 
financial reporting includes those policies and procedures that (I) pertain to the maintenance of records 
that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the 
company; (2) provide reasonable assurance that transactions are recorded as necessary to permit 
preparation of financial statements in accordance with generally accepted accounting principles, and that 
receipts and expenditures of the company are being made only in accordance with authorizations of 
management and directors of the company; and (3) provide reasonable assurance regarding prevention or 
timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a 
material effect on the financial statements. 


Because of its inherent limitations, internal control over financial reporting may not prevent or detect 
misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk 
that controls may become inadequate because of changes in conditions, or that the degree of compliance 
with the policies or procedures may deteriorate. 


In our opinion, Westbrook Company, Inc., maintained, in all material respects, effective internal control 
over financial reporting as of December 31, 2016, based on the COSO criteria. 


We also have audited, in accordance with the standards of the Public Company Accounting Oversight 
Board (United States), the consolidated balance sheets of Westbrook Company, Inc., as of December 31, 
2016 and 2015, and the related consolidated statements of income, shareholders’ equity, and cash flows for 
each of the three years in the period ended December 31, 2016, of Westbrook Company, Inc., and our 
report dated February ||, 2017, expressed an unqualified opinion thereon. 
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PCAOB 
CONSIDERING 
CHANGES TO THE 
AUDIT REPORT 


The PCAOB has proposed changes to the audit 
report for audits of financial statements of public 
companies. In its August 2013 exposure draft, the 
PCAOB included a number of proposed revisions 
to the wording in the standard audit report, while 
retaining the pass/fail model whereby auditors pro- 
vide their opinion on whether or not the financial 
statements are in conformity with GAAP. 

The most notable proposed change is the require- 
ment to communicate in the audit report “critical 
audit matters,’ which represent matters the auditor 
addressed during the audit of the financial state- 
ments that involved the most difficult, subjective, or 
complex auditor judgments or that posed the most 
difficulty to the auditor in obtaining sufficient appro- 
priate evidence for forming an opinion. The PCAOB 
believes the communication of critical audit matters 
would be helpful to investors and other financial 


Apple, Chevron, and FedEx Corporation, along with 
the U.S. Chamber of Commerce, have voiced oppo- 
sition in comment letters to the PCAOB. They argue 
that the financial statements are the responsibility of 
management and that the proper source of informa- 
tion about such matters resides with management, 
not the auditor. They also note that disclosure of 
critical audit matters may publicize aspects of the 
audit process that may not be useful to investors. 
The PCAOB is evaluating these and 
other comments received about its expo- 
sure draft and will likely issue either a revised 
exposure draft or a new standard by 2016. 


Sources: |. “The Auditor’s Report on an Audit of Financial 
Statements When the Auditor Expresses an Unqualified 
Opinion,’ PCAOB Release No. 2013-005, August 13, 
2013, PCAOB Rulemaking Docket Matter No. 34 


(www.pcaobus.org); 2. “Preparers Oppose PCAOB's Plan for 
More Auditor Disclosures,” K. Tysiac, Journal of Accountancy, 
January 3, 2014 (www.journalofaccountancy.com). 


statement users who would be interested in under- 

standing challenging issues identified in the audit. 
The PCAOB’s proposal has been met with resis- 

tance. A number of well-known companies, including 


UNMODIFIED OPINION AUDIT REPORT WITH 
EMPHASIS-OF-MATTER EXPLANATORY PARAGRAPH 
OR NONSTANDARD REPORT WORDING 


Describe the five circumstances 
when an emphasis-of-matter 
explanatory paragraph or non- 
standard wording is appropriate 
to include in an unmodified 
opinion audit report. 


The remainder of this chapter deals with reports other than standard unmodified 
opinion audit reports. In certain situations, an unmodified opinion audit report on 
the financial statements is issued, but the report deviates from the standard word- 
ing. The unmodified opinion audit report with emphasis-of-matter paragraph 
or nonstandard report wording meets the criteria of a complete audit with sat- 
isfactory results and financial statements that are fairly presented, but the auditor 
believes it is important to draw the reader’s attention to certain matters or the auditor 
is required to provide additional information. In a qualified, adverse, or disclaimer 
report, the auditor either has not been able to perform a satisfactory audit, is not satis- 
fied that the financial statements are fairly presented, or is not independent. 

The following are the most important causes of the addition of an emphasis- 
of-matter paragraph or a modification in the wording of the standard unmodified 
opinion audit report under both AICPA and PCAOB audit standards: 


* Lack of consistent application of generally accepted accounting principles 
¢ Substantial doubt about going concern 

¢ Auditor agrees with a departure from promulgated accounting principles 
¢ Emphasis of other matters 

¢ Reports involving other auditors 


The first four reports all require the addition of an explanatory paragraph. In each 
case, the standard report paragraphs, including the opinion paragraph, are presented 
without changes in wording, and a separate explanatory paragraph follows the opin- 
ion paragraph. Only reports involving other auditors use different wording in the 
introductory, scope, and opinion paragraphs. 

The term “explanatory paragraph” was replaced in the AICPA auditing standards 
with “emphasis-of-matter” or “other-matter” paragraphs. “Emphasis-of-matter” para- 
graphs are used to draw the reader’s attention to information presented or disclosed 
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in the financial statements, such as a footnote disclosure. “Other-matter” paragraphs 
refer to a matter that is not presented or disclosed in the financial statements, such as 
an explanation by the auditor of responsibilities related to a law or regulation. If report- 
ing on a nonpublic entity under AICPA auditing standards, the explanatory paragraph 
should be preceded by the header “Emphasis of a Matter” for the first three types of 
explanatory paragraphs. When the auditor wishes to emphasize other matters, the 
report should include the heading “Other Matters.” These paragraphs continue to be 
referred to as explanatory paragraphs under PCAOB auditing standards. We refer to 
explanatory paragraphs in this chapter to include both emphasis-of-matter and other- 
matter paragraphs. 


Auditing standards require the auditor to call attention to circumstances in which 
accounting principles have not been consistently observed in the current period in 
relation to the preceding period. Generally accepted accounting principles require 
that changes in accounting principles or their method of application be to a preferable 
principle and that the nature and impact of the change be adequately disclosed. When 
a material change occurs, the auditor should add an explanatory paragraph after the 
opinion paragraph that discusses the nature of the change and points the reader to the 
footnote that discusses the change. The materiality of a change is evaluated based on 
the current year effect of the change. An explanatory paragraph is required for both 
voluntary changes and required changes due to a new accounting pronouncement. 
Figure 3-5 presents such an explanatory paragraph. 

It is implicit in the explanatory paragraph in Figure 3-5 that the auditor concurs 
with the appropriateness of the change in accounting principles. If the auditor does 
not concur, the change is a violation of generally accepted accounting principles and 
the auditor’s opinion must be qualified. 


Lack of Consistent 
Application of GAAP 


Consistency Versus Comparability The auditor must be able to distinguish between 
changes that affect consistency and those that may affect comparability but do not 
affect consistency. The following are examples of changes that affect consistency and 
therefore require an explanatory paragraph if they are material: 


1. Changes in accounting principles, such as a change from FIFO to LIFO inventory 
valuation 

2. Changes in reporting entities, such as the inclusion of an additional company in 
combined financial statements 

3. Corrections of errors involving principles, by changing from an accounting prin- 
ciple that is not generally acceptable to one that is generally acceptable, including 
correction of the resulting error 


Changes that affect comparability but not consistency and therefore need not be 
included in the audit report include the following: 


1. Changes in an estimate, such as a decrease in the life of an asset for depreciation 
purposes 

2. Error corrections not involving principles, such as a previous year’s mathematical 
error 


FIGURE 3-5 Explanatory Paragraph Because of Change in Accounting Principle 


INDEPENDENT AUDITOR’S REPORT 


(Same paragraphs as the standard report) 
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3. Variations in format and presentation of financial information 
4. Changes because of substantially different transactions or events, such as new 
endeavors in research and development or the sale of a subsidiary 


Items that materially affect the comparability of financial statements generally 
require disclosure in the footnotes. A qualified audit report for inadequate disclosure 
may be required if the client refuses to properly disclose the items. 


Even though the purpose of an audit is not to evaluate the financial health of the busi- 
ness, the auditor has a responsibility under auditing standards to evaluate whether the 
company is likely to continue as a going concern. For example, the existence of one 
or more of the following factors causes uncertainty about the ability of a company to 
continue as a going concern: 


1. Significant recurring operating losses or working capital deficiencies 

2. Inability of the company to pay its obligations as they come due 

3. Loss of major customers, the occurrence of uninsured catastrophes such as an 
earthquake or flood, or unusual labor difficulties 

4. Legal proceedings, legislation, or similar matters that have occurred that might 
jeopardize the entity’s ability to operate 


The auditor’s concern in such situations is the possibility that the client may not 
be able to continue its operations or meet its obligations for a reasonable period. The 
Financial Accounting Standards Board (FASB) recently clarified that management 
should consider the ability of the entity to continue its operations for a reasonable 
period not to exceed 1 year from the date the financial statements are issued. Thus, 
when the entity financial statements are based on FASB standards, the auditor’s evalu- 
ation of the time horizon would be the same as that considered by management. 

When the auditor concludes that there is substantial doubt about the entity’s 
ability to continue as a going concern, an unmodified opinion audit report with an 
explanatory paragraph is required, regardless of the disclosures in the financial state- 
ments. Figure 3-6 provides an example in which there is substantial doubt about going 
concern. 

Auditing standards permit but do not require a disclaimer of opinion when there 
is substantial doubt about going concern. The criteria for issuing a disclaimer of opin- 
ion instead of adding an explanatory paragraph are not stated in the standards, and 
this type of opinion is rarely issued in practice. An example for which a disclaimer 
might be issued is when a regulatory agency, such as the Environmental Protection 
Agency, is considering a severe sanction against a company and, if the proceedings 
result in an unfavorable outcome, the company will be forced to liquidate. 


The AICPA Code of Professional Conduct states that in unusual situations, a departure 
from a generally accepted accounting principle may not require a qualified or adverse 
opinion. However, to justify an unmodified opinion, the auditor must be satisfied and 


FIGURE 3-6 Explanatory Paragraph Because of Substantial Doubt About Going Concern 


INDEPENDENT AUDITOR’S REPORT 
(Same paragraphs as the standard report) 


The accompanying financial statements have been prepared assuming that Fairfax Company will continue as 
a going concern. As discussed in Note I! to the financial statements, Fairfax Company has suffered 
recurring losses from operations and has a net capital deficiency that raise substantial doubt about the 
company’s ability to continue as a going concern. Management’s plans in regard to these matters are also 
described in Note II. The financial statements do not include any adjustments that might result from the 
outcome of this uncertainty. 
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must state and explain, in a separate paragraph or paragraphs in the audit report, that 
adhering to the principle would produce a misleading result in that situation. 


Under certain circumstances, the CPA may want to emphasize specific matters 
regarding the financial statements, even though he or she intends to express an 
unmodified opinion. Normally, such explanatory information should be included in 
a separate paragraph in the report. Examples of explanatory information the auditor 
may report as an emphasis of a matter include the following: 


* The existence of material related party transactions 

* Important events occurring subsequent to the balance sheet date 

* The description of accounting matters affecting the comparability of the 
financial statements with those of the preceding year 

* Material uncertainties disclosed in the footnotes such as unusually important 
litigation or regulatory action 

¢ A major catastrophe that has had or continues to have a significant effect on the 
entity’s financial position 


CPAs often rely on a different CPA firm to perform part of the audit when the client 
has widespread operations. The primary auditor issuing the opinion on the financial 
statements is called the principal auditor under PCAOB auditing standards and the group 
engagement partner under AICPA auditing standards. The other auditor who performs 
work on the financial information of a component is called the component auditor 
under AICPA auditing standards. We use the PCAOB terminology to reference the 
different auditor responsibilities. When the CPA relies on a different CPA firm to per- 
form part of the audit, the principal CPA firm has three alternatives. Only the second 
is an unmodified opinion audit report with modified wording. 


1. Make No Reference in the Audit Report When no reference is made to the other 
auditor, a standard unmodified opinion is given unless other circumstances require 
a departure. This approach is typically followed when the other auditor audited an 
immaterial portion of the statements, the other auditor is well known or closely 
supervised by the principal auditor, or the principal auditor has thoroughly reviewed 
the other auditor’s work. The other auditor is still responsible for his or her own 
report and work in the event of a lawsuit or SEC action. 


2. Make Reference in the Report This type of report is called a shared opinion or 
report. A shared unmodified opinion audit report is appropriate when the portion of 
the financial statements audited by the other CPA is material in relation to the whole. 
An example of an audit report that includes an unmodified opinion but makes refer- 
ence to the report of another auditor for a nonpublic company is shown in Figure 3-7 
(p. 82). Notice that the report does not include a separate paragraph that discusses the 
shared responsibility, but does so in the auditor’s responsibility and opinion para- 
graphs. The portions of the financial statements audited by the other auditor can be 
stated as percentages or absolute amounts. 


3. Qualify the Opinion A qualified opinion or disclaimer, depending on materiality, 
is required if the principal auditor is not willing to assume any responsibility for the 
work of the other auditor. The principal auditor may also decide that a qualification 
is required in the overall report if the other auditor qualified his or her portion of the 
audit. Qualified opinions and disclaimers are discussed in a later section of this chapter. 


CONCEPT CHECK 
1. What are the eight parts of a standard unmodified opinion audit report for a nonpublic 
entity and what is the main content provided in each part? 


2. When should the auditor include an explanatory paragraph in an unmodified opinion 
audit report? 
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FIGURE 3-7 Unmodified Opinion Shared Report— AICPA Auditing Standards 


INDEPENDENT AUDITOR’S REPORT 


(Same introductory and management’s responsibility paragraphs as the standard report) 


Auditor’s Responsibility 


Our responsibility is to express an opinion on these financial statements based on our audits. We did not 
audit the financial statements of Stewart Pane and Lighting, a wholly-owned subsidiary, which statements 
reflect total assets constituting 20 percent and 22 percent, respectively, of consolidated total assets at 
December 31, 2016 and 2015, and total revenues constituting 18 percent and 20 percent, respectively, of 
consolidated total revenues for the years then ended. Those statements were audited by other auditors 
whose report has been furnished to us, and our opinion, insofar as it relates to the amounts included for 
Stewart Pane and Lighting, is based solely on the report of the other auditors. We conducted our audits in 
accordance with auditing standards generally accepted in the United States of America. Those standards 
require that we plan and perform the audit to obtain reasonable assurance about whether the financial 
statements are free of material misstatement. 


(Same scope paragraph under auditor's responsibility as the standard report) 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our 
audit opinion. 

Opinion 

In our opinion, based on our audit and the report of the other auditors, the financial statements referred to 
above present fairly, in all material respects, the financial position of Washington Felp Corporation as of 


December 31, 2016 and 2015, and the results of their operations and cash flows for the years then ended in 
accordance with accounting principles generally accepted in the United States of America. 


MODIFICATIONS TO THE OPINION IN THE AUDIT REPORT 


Identify the types of audit 
reports that can be issued when 
an unmodified opinion is not 
justified. 
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It is essential that auditors and readers of audit reports understand the circumstances 
when an unmodified opinion in the audit report is inappropriate and the type of audit 
report issued in each circumstance. In the study of audit reports that depart from 
an unmodified opinion, there are three closely related topics: the conditions requir- 
ing a modification to the opinion, the types of opinions other than unmodified, and 
materiality. 

First, the three conditions requiring a modification to the opinion are briefly sum- 
marized. Each is discussed in greater depth later in the chapter. 


I. The Scope of the Audit Has Been Restricted (Scope Limitation) When the 
auditor has not accumulated sufficient appropriate evidence to conclude whether 
financial statements are stated in accordance with the appropriate financial reporting 
framework, a scope restriction exists. There are two major causes of scope restric- 
tions: restrictions imposed by the client and those caused by circumstances beyond 
either the client’s or auditor’s control. An example of a client restriction is manage- 
ment’s refusal to permit the auditor to confirm material receivables or to physically 
examine inventory. An example of a restriction caused by circumstances is when 
the auditor is not appointed until after the client’s year-end. It may not be possible to 
physically observe inventories, confirm receivables, or perform other important pro- 
cedures after the balance sheet date. 


2. The Financial Statements Have Not Been Prepared in Accordance with 
Generally Accepted Accounting Principles (GAAP Departure) For example, if 
the client insists on using replacement costs for fixed assets or values inventory at 
selling price rather than historical cost as required by generally accepted accounting 
principles, a departure from the unmodified opinion audit report is required. When 
U.S. generally accepted accounting principles or international financial reporting 
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standards (IFRS) are referred to in this context, consideration of the adequacy of all 
informative disclosures, including footnotes, is especially important. While most U.S. 
companies prepare their financial statements in accordance with GAAP, some entities 
might use other financial reporting frameworks, such as IFRS. References to GAAP in 
this chapter also apply to situations where the client has selected another appropriate 
financial reporting framework. 


3. The Auditor Is Not Independent Independence ordinarily is determined by the 
AICPA Code of Professional Conduct. Auditor independence requirements and the AICPA 
Code are further discussed in Chapter 4. 

When any of the three conditions requiring a departure from an unmodified 
opinion exists and is material, the opinion in the audit report must be modified. Three 
main types of audit reports are issued under these conditions: qualified opinion, 
adverse opinion, and disclaimer of opinion. 


A qualified opinion report can result from a limitation on the scope of the audit or 
failure to follow generally accepted accounting principles. A qualified opinion report 
can be used only when the auditor concludes that the overall financial statements are fairly 
stated. A disclaimer or an adverse report must be used if the auditor believes that the 
condition being reported on is highly material to the financial statements as a whole. 
Therefore, the qualified opinion is considered the least severe type of departure from 
an unmodified opinion audit report. 

A qualified report can take the form of a qualification of both the scope and the opinion 
or of the opinion alone. A scope and opinion qualification can be issued only when the 
auditor has been unable to accumulate all of the evidence sufficient to support an 
opinion on the financial statements. Therefore, this type of qualification is used when 
the auditor’s scope has been restricted by the client or when circumstances exist that 
prevent the auditor from conducting a complete audit. The use of a qualification of 
the opinion alone is restricted to situations in which the financial statements are not 
stated in accordance with GAAP. 

When an auditor issues a qualified report, he or she must use the term except 
for in the opinion paragraph. The implication is that the auditor is satisfied that the 
overall financial statements are correctly stated “except for” a specific aspect of them. 
Examples of this qualification are given later in this chapter. It is unacceptable to use 
the phrase except for with any other type of audit opinion. 


An adverse opinion is used only when the auditor believes that the overall financial 
statements are so materially misstated or misleading that they do not present fairly the 
financial position or results of operations and cash flows in conformity with GAAP. 
The adverse opinion report can arise only when the auditor has knowledge, after an 
adequate investigation, of the absence of conformity. This is uncommon and thus the 
adverse opinion is rarely used. 


A disclaimer of opinion is issued when the auditor has been unable to satisfy himself 
or herself that the overall financial statements are fairly presented. The necessity for 
disclaiming an opinion may arise because of a severe limitation on the scope of the audit 
or a nonindependent relationship under the AICPA Code of Professional Conduct between the 
auditor and the client. Either of these situations prevents the auditor from expressing 
an opinion on the financial statements as a whole. The auditor also has the option to 
issue a disclaimer of opinion for a going concern problem. 

The disclaimer is distinguished from an adverse opinion in that a disclaimer 
can arise only from a lack of knowledge by the auditor, whereas to express an adverse 
opinion, the auditor must have knowledge that the financial statements are not fairly 
stated. Both disclaimers and adverse opinions are used only when the condition is 
highly material. 
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MATERIALITY 
‘OBJECTIVE 3-6 0 Materiality is an essential consideration in determining the appropriate type of report 


for a given set of circumstances. For example, if a misstatement is immaterial relative 
to the financial statements of the entity for the current period, it is appropriate to issue 
an unmodified opinion audit report. A common instance is the immediate expensing 
of office supplies rather than carrying the unused portion in inventory because the 
amount is insignificant. 

The situation is totally different when the amounts are of such significance that 
the financial statements are materially affected as a whole. In these circumstances, 
it is necessary to issue a disclaimer of opinion or an adverse opinion, depending on 
whether a scope limitation or GAAP departure is involved. In situations of lesser 
materiality, a qualified opinion is appropriate. 


Explain how materiality affects 
audit reporting decisions. 


The common definition of materiality as it applies to accounting and therefore to 


Revers at Mareviality audit reporting is as follows: 


A misstatement in the financial statements can be considered material if knowledge of the 


misstatement will affect a decision of a reasonable user of the statements. 


In applying this definition, three levels of materiality are used for determining the 
type of opinion to issue. 


Amounts Are Immaterial When a misstatement in the financial statements exists 
but is unlikely to affect the decisions of a reasonable user, it is considered to be imma- 
terial. An unmodified opinion is therefore appropriate. For example, assume that 
management recorded prepaid insurance as an asset in the previous year and decides 
to expense it in the current year to reduce record-keeping costs. Management has 
failed to follow GAAP, but if the amounts are small, the misstatement is immaterial 
and a standard unmodified opinion audit report is appropriate. 


Amounts Are Material but Do Not Overshadow the Financial Statements as a 
Whole The second level of materiality exists when a misstatement in the financial 
statements would affect a user’s decision, but the overall statements are still fairly 
stated and therefore useful. For example, knowledge of a large misstatement in fixed 
assets might affect a user’s willingness to loan money to a company if the assets were 
the collateral. A misstatement of inventory does not mean that cash, accounts receiv- 
able, and other elements of the financial statements, or the financial statements as a 
whole, are materially incorrect. 

To make materiality decisions when a condition requiring a departure from an 
unmodified opinion audit report exists, the auditor must evaluate all effects on the 
financial statements. Assume that the auditor is unable to satisfy himself or herself 
whether inventory is fairly stated in deciding on the appropriate type of opinion. 
Because of the effect of a misstatement in inventory on other accounts and on totals 
in the statements, the auditor needs to consider the materiality of the combined effect 
on inventory, total current assets, total working capital, total assets, income taxes, 
income taxes payable, total current liabilities, cost of goods sold, net income before 
taxes, and net income after taxes. 

When the auditor concludes that a misstatement is material but does not over- 
shadow the financial statements as a whole, a qualified opinion (using “except for”) is 
appropriate. 
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Is in Question The highest level of materiality exists when users are likely to make 
incorrect decisions if they rely on the overall financial statements. To return to the 
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previous example, if inventory is the largest balance on the financial statements, a 
large misstatement would probably be so material that the auditor’s report should 
indicate the financial statements taken as a whole cannot be considered fairly stated. 
When the highest level of materiality exists, the auditor must issue either a disclaimer 
of opinion or an adverse opinion, depending on which conditions exist. 

When determining whether an exception is highly material, the extent to which 
the exception affects different parts of the financial statements must be considered. 
This is called pervasiveness. A misclassification between cash and accounts receivable 
affects only those two accounts and is therefore not pervasive. On the other hand, 
failure to record a material sale is highly pervasive because it affects sales, accounts 
receivable, income tax expense, accrued income taxes, and retained earnings, which 
in turn affect current assets, total assets, current liabilities, total liabilities, owners’ 
equity, gross margin, and operating income. 

As misstatements become more pervasive, the likelihood of issuing an adverse 
opinion rather than a qualified opinion increases. For example, suppose the auditor 
decides a misclassification between cash and accounts receivable should result in a 
qualified opinion because it is material; the failure to record a sale of the same dollar 
amount may result in an adverse opinion because of pervasiveness. 

Regardless of the amount involved, a disclaimer of opinion must be issued if the 
auditor is deemed to lack independence under the rules of the AICPA Code of Professional 
Conduct. This strict requirement reflects the importance of independence to auditors. Any 
deviation from the independence rule is therefore considered highly material. Table 3-1 
summarizes the relationship between materiality and the type of opinion to be issued. 


In concept, the effect of materiality on the type of opinion to issue is straightforward. 
In application, deciding on actual materiality in a given situation is a difficult judg- 
ment. There are no simple, well-defined guidelines that enable auditors to decide 
when something is immaterial, material, or highly material. The evaluation of mate- 
riality also depends on whether the situation involves a failure to follow GAAP or a 
scope limitation. 


Materiality Decisions—Non-GAAP Condition When a client has failed to follow 
GAAP, the audit report will contain an unmodified opinion, a qualified opinion only, 
or an adverse opinion, depending on the materiality of the departure. Several aspects 
of materiality must be considered. 


Dollar Amounts Compared with a Benchmark The primary concern in measuring 
materiality when a client has failed to follow GAAP is usually the total dollar misstate- 
ment in the accounts involved, compared with some benchmark or base. A $10,000 
misstatement might be material for a small company but not for a larger one. 
Therefore, misstatements must be compared with some measurement base before a 
decision can be made about the materiality of the failure to follow GAAP. Common 
bases include net income, total assets, current assets, and working capital. 


Materiality Decisions 


TABLE 3-1 Relationship of Materiality to Type of Opinion 


Significance in Terms of Reasonable Users’ Decisions 


Materiality Level 


Type of Opinion 


Immaterial Users’ decisions are unlikely to be affected. Unmodified 

Material Users’ decisions are likely to be affected only if the information in question is important to the specific | Qualified 
decisions being made. The effect of the misstatement(s) is not pervasive to the financial statements 
and the overall financial statements are presented fairly. 

Highly material Most or all users’ decisions based on the financial statements are likely to be significantly affected. The Disclaimer or Adverse 
effect of the misstatement(s) is pervasive to the financial statements. 


Note: Lack of independence requires a disclaimer regardless of materiality. 
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For example, assume that the auditor believes there is a $100,000 overstatement of 
inventory because of the client’s failure to follow GAAP. Also assume recorded inven- 
tory of $1 million, current assets of $3 million, and net income before taxes of $2 million. 
In this case, the auditor must evaluate the materiality of a misstatement of inventory of 
10 percent, current assets of 3.3 percent, and net income before taxes of 5 percent. 

To evaluate overall materiality, the auditor must also combine all unadjusted mis- 
statements and judge whether there may be individually immaterial misstatements 
that, when combined, significantly affect the statements. In the inventory example 
just given, assume the auditor believes there is also an overstatement of $150,000 in 
accounts receivable. The total effect on current assets is now 8.3 percent ($250,000 
divided by $3,000,000) and 12.5 percent on net income before taxes ($250,000 divided 
by $2,000,000). 

When comparing potential misstatements with a base, the auditor must carefully 
consider all accounts affected by a misstatement (pervasiveness). For example, it is 
important not to overlook the effect of an understatement of inventory on cost of goods 
sold, income before taxes, income tax expense, and accrued income taxes payable. 


Measurability The dollar amount of some misstatements cannot be accurately mea- 
sured. For example, a client’s unwillingness to disclose an existing lawsuit or the 
acquisition of a new company subsequent to the balance sheet date is difficult if not 
impossible to measure in terms of dollar amounts. The materiality question the audi- 
tor must evaluate in such situations is the effect on statement users of the failure to 
make the disclosure. 


Nature of the Item The decision of a user may also be affected by the kind of mis- 
statement. The following may affect a user’s decision and therefore the auditor’s opin- 
ion in a different way than most misstatements: 


1. Transactions are illegal or fraudulent. 

2. An item may materially affect some future period, even though it is immaterial 
when only the current period is considered. 

3. An item has a “psychological” effect (for example, the item changes a small loss 
to a small profit, maintains a trend of increasing earnings, or allows earnings to 
exceed analysts’ expectations). 

4. An item may be important in terms of possible consequences arising from 
contractual obligations (for example, the effect of failure to comply with a debt 
restriction may result in a material loan being called). 


Materiality Decisions—Scope Limitations Condition When there is a scope limi- 
tation in an audit, the audit report will be a standard unmodified opinion report, a 
report with a qualified scope and opinion, or a disclaimer report, depending on the 
materiality of the scope limitation. The auditor will consider the same three factors 
included in the previous discussion about materiality decisions for failure to follow 
GAAP, but they will be considered differently. The size of potential misstatements, 
rather than known misstatements, is important in determining whether an unmodi- 
fied opinion report, a qualified scope and opinion report, or a disclaimer of opinion 
is appropriate for a scope limitation. For example, if recorded accounts payable of 
$400,000 was not audited, the auditor must evaluate the potential misstatement 
in accounts payable and decide how materially the financial statements could be 
affected. The pervasiveness of these potential misstatements must also be considered. 

It is typically more difficult to evaluate the materiality of potential misstatements 
resulting from a scope limitation than for failure to follow GAAP. Misstatements 
resulting from failure to follow GAAP are known. Those resulting from scope limita- 
tions must usually be subjectively measured in terms of potential or likely misstate- 
ments. For example, a recorded accounts payable of $400,000 might be understated 
by more than $1 million, which may affect several totals, including gross margin, net 
earnings, and total assets. 


DISCUSSION OF CONDITIONS REQUIRING 
A MODIFICATION OF OPINION 


You should now understand the relationships among the conditions requiring a ‘OBJECTIVE 3-70 


departure from an unmodified opinion audit report, the major types of reports other 

i i dead dified opini dtheth levels ot ‘ality. Thi Draft appropriately modified 
than the standard unmodified opinion report, and the three levels of materiality. This pinion audit reports under a 
part of the chapter examines the conditions requiring modification of the opinion in variety of circumstances. 
greater detail and shows examples of reports under AICPA auditing standards. The 

wording of the opinion and the nature of the paragraph explaining the reason for a 

modified opinion are similar under PCAOB auditing standards. 


Two major categories of scope restrictions exist: those caused by a client and those 
caused by conditions beyond the control of either the client or the auditor. The effect 
on the auditor’s report is the same for either, but the interpretation of materiality is 
likely to be different. When there is a scope restriction, the appropriate response is to 
issue a report with an unmodified opinion, a report with a qualification of scope and 
opinion, or a report with a disclaimer of opinion, depending on materiality. 

For client-imposed restrictions, the auditor should be concerned about the pos- 
sibility that management is trying to prevent discovery of misstated information. In 
such cases, PCAOB auditing standards encourage a disclaimer of opinion, while the 
AICPA auditing standards actually require a disclaimer of opinion or withdrawal from 
the engagement if the auditor is unable to perform alternative procedures to obtain 
sufficient appropriate evidence. When restrictions result from conditions beyond the 
client’s control, a qualification of scope and opinion is more likely. 

Two restrictions occasionally imposed by clients on the auditor’s scope relate to 
the observation of physical inventory and the confirmation of accounts receivable, 
but other restrictions may also occur. Reasons for client imposed scope restrictions 
may be a desire to save audit fees and, in the case of confirming receivables, to prevent 
possible conflicts between the client and customer when amounts differ. 

The most common case in which conditions beyond the client’s and auditor’s 
control cause a scope restriction is when the auditor is appointed after the client’s 
balance sheet date. The confirmation of accounts receivable, physical examination of 
inventory, and other important procedures may be impossible under those circum- 
stances. When the auditor cannot perform procedures he or she considers desirable 
but can be satisfied with alternative procedures that the information being verified is 
fairly stated, a standard unmodified opinion report is appropriate. If alternative pro- 
cedures cannot be performed, a qualified scope and opinion or disclaimer of opinion 
is necessary, depending on materiality. 

A restriction on the scope of the auditor’s examination requires a qualifying 
paragraph preceding the opinion paragraph to describe the restriction. AICPA audit- 
ing standards require the auditor to include a heading such as “Basis for Qualified 
Opinion” preceding that qualifying paragraph, and those standards also require a 
heading before the opinion paragraph. For example, the report in Figure 3-8 (p. 88) 
is appropriate for an audit of a nonpublic entity in which the amounts were material 
but not pervasive and the auditor could not obtain audited financial statements sup- 
porting an investment in a foreign affiliate and could not satisfy himself or herself by 
alternate procedures. Notice the headings preceding each paragraph. 

When the amounts are so material and pervasive that a disclaimer of opinion 
rather than a qualified opinion is required, the first (introductory) paragraph is modi- 
fied slightly to say “We were engaged to audit...” The first paragraph of the auditor’s 
responsibility is modified to indicate that the auditor was not able to obtain sufficient 
appropriate evidence to express an audit opinion. The last two paragraphs under 
auditor’s responsibility included in the standard unmodified opinion audit report 


Auditor’s Scope Has 
Been Restricted 
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Qualified Report Due to Scope Restriction— AICPA Auditing 


La Standards 


INDEPENDENT AUDITOR’S REPORT 


(Same introductory paragraph, management’s responsibility paragraph, and first two auditor’s responsibility 
paragraphs as the standard report) 


We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our 
qualified audit opinion. 


Basis for Qualified Opinion 


Laughlin Corporation’s investment in XYZ Company, a foreign affiliate acquired during the year and 
accounted for under the equity method, is carried at $2,475,000 on the balance sheet at December 31, 
2016, and Laughlin’s share of XYZ Company’s net income of $365,000 is included in Laughlin Corporation’s 
net income for the year then ended. We were unable to obtain sufficient appropriate evidence about the 
carrying amount of Laughlin Corporation’s investment in XYZ Company as of December 31, 2016, and 
Laughlin’s share of XYZ Company’s net income for the year then ended because we were denied access to 
the financial information, management, and the auditors of XYZ Company. Consequently, we were unable to 
determine whether any adjustments to these amounts were necessary. 


Qualified Opinion 


In our opinion, except for the effects of the matter described in the Basis for Qualified Opinion paragraph, 
the financial statements referred to above present fairly, in all material respects, the financial position of 
Laughlin Corporation as of December 31, 2016, and the results of its operations and its cash flows for the 
year then ended in conformity with accounting principles generally accepted in the United States of America. 


are eliminated to avoid stating anything that might lead readers to believe that other 
parts of the financial statements were audited and therefore might be fairly stated. 
Figure 3-9 shows the audit report assuming the auditor had concluded that the facts in 
Figure 3-8 required a disclaimer rather than a qualified opinion. 


When the auditor knows that the financial statements may be misleading because 
they were not prepared in conformity with GAAP, and the client is unable or unwill- 
ing to correct the misstatement, he or she must issue a qualified or an adverse opin- 
ion, depending on the materiality of the item in question. The opinion must clearly 
state the nature of the departure from accepted principles and the amount of the mis- 
statement, if it is known. Figure 3-10 shows an example of a qualified opinion when a 
client did not capitalize leases as required by GAAP. 


Statements Are Not in 
Conformity with GAAP 


Disclaimer of Opinion Due to Scope Restriction— AICPA 


FIGURE 3-9 Auditing Standards 


INDEPENDENT AUDITOR’S REPORT 
We were engaged to audit . . . (remainder is the same as the introductory paragraph in the standard report) 


(Same management’s responsibility paragraph as the standard report) 


Auditor’s Responsibility 


Our responsibility is to express an opinion on these financial statements based on conducting the audit in 


accordance with auditing standards generally accepted in the United States of America. Because of the 
matter described in the Basis for Disclaimer of Opinion paragraph, however, we were not able to obtain 
sufficient appropriate evidence to provide a basis for an audit opinion. 


Basis for Disclaimer of Opinion 


(Same wording as the Basis for Qualified Opinion paragraph in Figure 3-8) 
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Disclaimer of Opinion 


Because of the significance of the matter described in the Basis for Disclaimer of Opinion paragraph, we have 
not been able to obtain sufficient appropriate evidence to provide a basis for an audit opinion. Accordingly, 
we do not express an opinion on these financial statements. 
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Qualified Opinion Report Due to Non-GAAP— AICPA 
Auditing Standards 


FIGURE 3-10 


INDEPENDENT AUDITOR’S REPORT 


(Same introductory, management’s responsibility, and auditor’s responsibility paragraphs as the standard report. 
Only the last sentence of the auditor's responsibility paragraph would be modified as shown next.) 


We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our qualified audit opinion. 


Basis for Qualified Opinion 


The Company has excluded from property and debt in the accompanying balance sheet certain lease 
obligations that, in our opinion, should be capitalized to conform with accounting principles generally 
accepted in the United States of America. If these lease obligations were capitalized, property would be 
increased by $4,600,000, long-term debt by $4,200,000, and retained earnings by $400,000 as of 
December 31, 2016, and net income and earnings per share would be increased by $400,000 and $1.75, 
respectively, for the year then ended. 


Qualified Opinion 


In our opinion, except for the effects of the matter described in the Basis for Qualified Opinion paragraph, 
the financial statements referred to above present fairly, in all material respects, the financial position of 
Ajax Company as of December 31, 2016, and the results of its operations and its cash flows for the year 
then ended in conformity with accounting principles generally accepted in the United States of America. 


When the amounts are so material or pervasive that an adverse opinion is 
required, the scope is still unlimited and the qualifying paragraph can remain the 
same, but the opinion paragraph might be as shown in Figure 3-11. 

When the client fails to include information that is necessary for the fair presenta- 
tion of financial statements in the body of the statements or in the related footnotes, 
it is the auditor’s responsibility to present the information in the audit report and to 
issue a qualified or an adverse opinion. It is common to put this type of qualification 
in an added paragraph preceding the opinion and to refer to the added paragraph in 
the opinion paragraph. Again, AICPA auditing standards require appropriate head- 
ings before the added paragraph and the opinion paragraph. 


Justified Departure from GAAP Determining whether statements are in accordance 
with GAAP can be difficult. The Accounting Principles Rule in the AICPA Code of 
Professional Conduct permits a departure from generally accepted accounting principles 
when the auditor believes that adherence to these would result in misleading financial 
statements, although this circumstance is rare. 

When the auditor decides that adherence to GAAP would result in mislead- 
ing statements, there should be a complete explanation in an added paragraph. 


Adverse Opinion Due to Non-GAAP— AICPA Auditing 


FIGURE 3-11 Standards 


INDEPENDENT AUDITOR’S REPORT 


(Same introductory, management’s responsibility, and auditor’s responsibility paragraphs as the standard report. 
Only the last sentence of the auditor's responsibility paragraph wold be modified as shown next.) 


We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for 
our adverse audit opinion. 
Basis for Adverse Opinion 


(Same wording as the Basis for Qualified Opinion paragraph in Figure 3-10) 


Adverse Opinion 


In our opinion, because of the significance of the matter described in the Basis for Adverse Opinion 
paragraph, the financial statements referred to above do not present fairly the financial position of Ajax 
Company as of December 31, 2016, or the results of its operations and its cash flows for the year then 
ended. 
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FIGURE 3-12 Disclaimer Due to Lack of Independence 


We are not independent with respect to Home Decors.com, Inc., and the accompanying balance sheet as of 
December 31, 2016, and the related statements of income, retained earnings, and cash flows for the year then 
ended were not audited by us. Accordingly, we do not express an opinion on them. 


Note: When the auditor lacks independence, no report title is included. 


The paragraph should fully explain the departure and why GAAP would result in 
misleading statements. The opinion paragraph should then be unmodified except for 
the reference to the added explanatory paragraph. As discussed earlier in the chap- 
ter, this is called an unmodified opinion audit report with an emphasis-of-matter 
explanatory paragraph. 


If the auditor is not independent as specified by the AICPA Code of Professional Conduct, 
a disclaimer of opinion is required even though all the audit procedures considered 
necessary in the circumstances were performed. The wording in Figure 3-12 is recom- 
mended when the auditor is not independent. 

The lack of independence overrides any other scope limitations. Therefore, no 
other reason for disclaiming an opinion should be cited. There should be no mention 
in the report of the performance of any audit procedures. 


Auditor Is Not 
Independent 


AUDITOR’S DECISION PROCESS FOR AUDIT REPORTS 
‘OBJECTIVE 3-8 Auditors use a well-defined process for deciding the appropriate audit report in a 


given set of circumstances. The auditor must first assess whether any conditions exist 
requiring a departure from a standard unmodified opinion audit report. If any condi- 
tions exist, the auditor must then assess the materiality of the condition and deter- 
mine the appropriate type of report. 


Determine the appropriate audit 
report for a given audit situation. 


Determine Whether Any Condition Exists Requiring a Departure from a Standard 
Unmodified Opinion Report The most important conditions are identified in 
Table 3-2. Auditors identify these conditions as they perform the audit and include 
information about any condition in the audit files as discussion items for audit report- 
ing. If none of these conditions exist, which is the case in most audits, the auditor 
issues a standard unmodified opinion audit report. 


Decide the Materiality for Each Condition When a condition requiring a departure 
from a standard unmodified opinion exists, the auditor evaluates the potential effect 
on the financial statements. For departures from GAAP or scope restrictions, the 
auditor must decide among immaterial, material, and highly material. All other con- 
ditions, except for lack of auditor independence, require only a distinction between 
immaterial and material. The materiality decision is a difficult one, requiring con- 
siderable judgment. For example, assume that there is a scope limitation in auditing 
inventory. It is difficult to assess the potential misstatement of an account that the 
auditor does not audit. 


Decide the Appropriate Type of Report for the Condition, Given the Materiality 
Level After making the first two decisions, it is easy to decide the appropriate type of 
opinion by using a decision aid. An example of such an aid is Table 3-2. For example, 
assume that the auditor concludes that there is a departure from GAAP and it is mate- 
rial, but not highly material. Table 3-2 shows that the appropriate audit report is a 
qualified opinion with an additional paragraph discussing the departure. The other 
report paragraphs will be included using standard wording. 
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Audit Report for Each Condition Requiring a Departure from a Standard Unmodified 


Ue eee Opinion Report at Different Levels of Materiality 


Level of Materiality 


Condition Requiring an Unmodified Opinion 
Report with Nonstandard Wording or 
Explanatory Paragraph Immaterial Material 


Accounting principles not consistently applied" Standard unmodified opinion Unmodified opinion with explanatory paragraph 
Substantial doubt about going concern' Standard unmodified opinion Unmodified opinion with explanatory paragraph 
Justified departure from GAAP or other accounting Standard unmodified opinion Unmodified opinion with explanatory paragraph 
principle 
Emphasis of other matters Standard unmodified opinion Unmodified opinion with explanatory paragraph 
Use of another auditor Standard unmodified opinion Unmodified opinion with revised wording in other report 
paragraphs 


Level of Materiality 


Condition Requiring Material, But Not So Material That 
a Departure from Unmodified Pervasive to the Financial Overall Fairness Is 
Opinion Audit Report Immaterial Statements as a Whole in Question 


Scope restricted by client or other conditions Standard unmodified opinion Additional paragraph, and Disclaimer 


qualified opinion (except for) 


Financial statements not prepared in accordance Standard unmodified opinion Additional paragraph and Adverse 
with GAAP* qualified opinion (except for) 
Auditor is not independent Disclaimer, regardless of 
materiality 


* If the auditor does not concur with the appropriateness of the change, the condition is considered a violation of GAAP. 
| The auditor has the option of issuing a disclaimer of opinion. 
* If the auditor can demonstrate that GAAP would be misleading, an unmodified opinion audit report with an explanatory paragraph is appropriate. 


Write the Audit Report Most CPA firms have computer templates that include 
precise wording for different circumstances to help the auditor write the audit report. 
Also, one or more partners in most CPA firms have special expertise in writing audit 
reports. These partners typically write or review all audit reports before they are 
issued. 


Auditors may encounter situations involving more than one of the conditions requir- 
ing a departure from an unmodified opinion audit report or revisions to the standard 
report wording. In these circumstances, the auditor should modify his or her opinion 
for each condition unless one has the effect of neutralizing the others. For example, if 
there is a scope limitation and a situation in which the auditor is not independent, the 
scope limitation should not be revealed. The following situations are examples when 
more than one modification should be included in the report: 


More Than One 
Condition Requiring 
a Departure or 
Modification 


¢ The auditor is not independent and the auditor knows that the company has not 
followed generally accepted accounting principles. 

* There is a scope limitation and there is substantial doubt about the company’s 
ability to continue as a going concern. 

¢ There is a substantial doubt about the company’s ability to continue as a going 
concern and information about the causes of the uncertainties is not adequately 
disclosed in a footnote. 

* There is a deviation in the statements’ preparation in accordance with GAAP 
and another accounting principle was applied on a basis that was not consistent 
with that of the preceding year. 
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INTERNATIONAL 
DEVELOPMENTS 
RELATED TO 
THE AUDITOR'S 
REPORT 


A number of initiatives related to the auditor’s 
report have been underway around the globe. The 
International Auditing and Assurance Standards 
Board (IAASB) released its new audit report stan- 
dards in January 2015 that revise the audit reporting 
requirements in International Standards on Auditing 
(ISAs). Similar to the PCAOB’s proposal to require 
the auditor to communicate “critical audit mat- 


strategy, the allocation of resources in the audit, 
and directing the efforts of the engagement team; 

. An explanation of how the auditor applied the 
concept of materiality; and 

. A summary of the audit scope, including an 
explanation of how the scope was responsive to 
the assessed risks of material misstatement and 
the concept of materiality. 


ters” in the auditor’s report, the new IAASB stan- 
dards require auditors to communicate “Key Audit 
Matters” in the auditor’s report. Key audit matters 
represent those matters that the auditor views as 
most significant. The standard requires not only dis- 
closure about such matters, but also explanation of 
how they were addressed in the audit. 

The financial crisis in 2008 led to audit report 
changes that became effective in 2012 in the United 
Kingdom, which are widely known as the “extended 
auditor’s report.” Audit reports of companies sub- 
ject to the UK Corporate Governance Code must 
now include the following within their report: 

a. A description of those assessed risks of material 
misstatement that were identified by the auditor 
and that had the greatest effect on the overall audit 


Similar issues motivated the European 
Commission to issue a new statutory audit frame- 
work in 2014 effective June 2016. Among other 
changes, the new audit framework contains spe- 
cific requirements for the auditor's report, and it 
also allows member states in the EU to establish 
additional requirements to the auditor’s report. 


Sources: |. “IAASB Issues Final Standards to Improve Auditor's 
Reports,” International Federation of Accountants, January 
15, 2015 (www.ifac.org); 2. “Extended Auditor’s Reports: A 
Review of Experience in the First Year,” Financial Reporting 
Council, March 2015 (www.frc.org.uk); and 3. “Directive 
2014/56/EU of the European Parliament and of the Council,” 
European Parliament and the Council of the European Union, 
April 16, 2014 (www.europarl.europa.eu). 


INTERNATIONAL ACCOUNTING AND AUDITING STANDARDS 


Understand use of international 
accounting and auditing standards 
by U.S. companies. 
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The increasing globalization of the world’s capital markets and the expanding pres- 
ence of business operations in multiple countries are leading to calls for the estab- 
lishment of a single set of accounting standards to be used around the world. IFRS is 
increasingly accepted worldwide as the basis of accounting used to prepare financial 
statements in other countries. 

Currently, U.S. public companies are required to prepare financial statements 
that are filed with the Securities and Exchange Commission (SEC) in accordance 
with generally accepted accounting principles in the United States. The SEC has 
been working on a plan to determine whether to incorporate IFRS into the U.S. 
financial reporting system. While the SEC’s 2010-2015 strategic plan seemed to 
suggest that U.S. public companies may be able to use IFRS as early as 2015, more 
recent developments suggest the SEC may be slowing down its efforts towards 
embracing IFRS any time soon. 

An auditor may be engaged to report on financial statements prepared in accor- 
dance with IFRS. When the auditor reports on financial statements prepared in con- 
formity with IFRS, the auditor refers to those standards rather than U.S. generally 
accepted accounting principles as follows: 


In our opinion, the financial statements referred to above present fairly, 
in all material respects, the financial position of Carlos Incorporated as of 
December 31, 2016 and 2015, and the results of its operations, comprehen- 
sive income, changes in equity, and its cash flows for the years then ended in 
conformity with International Financial Reporting Standards as issued by the 
International Accounting Standards Board. 


As discussed in Chapter 2, the International Auditing and Assurance Standards 
Board (IAASB) issues International Standards on Auditing (ISAs). Auditing standards 
in the United States now allow an auditor to perform an audit of financial statements of 
a nonpublic U.S. entity in accordance with both generally accepted auditing standards 
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in the U.S. and the ISAs. The auditor’s scope paragraph is modified to indicate that the 
audit was conducted in accordance with auditing standards generally accepted in the 
United States of America and in accordance with International Standards on Auditing. 


CONCEPT CHECK 


|. What are the three conditions that require a departure from an unmodified opinion 


audit report? Give an example of each. 


2. What are the three alternative opinions that may be appropriate when the client's fi- 
nancial statements are not in accordance with GAAP? Under what circumstance is each 


appropriate? 


SUMMARY 


This chapter described the auditor’s standard unmodified opinion audit report under 
AICPA and PCAOB standards, as well as reports on internal control over financial report- 
ing under Section 404 of the Sarbanes—Oxley Act. The four categories of audit reports and 
the auditor’s decision process in choosing the appropriate audit report to issue were then 
discussed. In some circumstances, an explanatory paragraph or nonstandard wording of 
the unmodified opinion audit report is required. When there is a material departure from 
GAAP or a material limitation on the scope of the audit, the audit opinion must be modi- 
fied. The appropriate report to issue in these circumstances depends on whether the situ- 
ation involves a GAAP departure or a scope limitation, as well as the level of materiality. 


Adverse opinion—a report issued when 
the auditor believes the financial state- 
ments are so materially misstated or mis- 
leading as a whole that they do not present 
fairly the entity’s financial position or the 
results of its operations and cash flows in 
conformity with GAAP 


Combined report on financial state- 
ments and internal control over finan- 
cial reporting—audit report on the fi- 
nancial statements and the effectiveness of 
internal control over financial reporting 
required for larger public companies un- 
der Section 404 of the Sarbanes—Oxley Act 


Disclaimer of opinion—a report issued 
when the auditor is not able to become sat- 
isfied that the overall financial statements 
are fairly presented or the auditor is not 
independent 


Material misstatement—a misstatement 
in the financial statements, knowledge of 
which would affect a decision of a reason- 
able user of the statements 


Qualified opinion—a report issued 
when the auditor believes that the over- 
all financial statements are fairly stated 
but that either the scope of the audit was 
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ESSENTIAL TERMS 


limited or the financial data indicated a 
failure to follow GAAP 


Separate report on internal control 
over financial reporting—audit report 
on the effectiveness of internal control 
over financial reporting required for larger 
public companies under Section 404 of the 
Sarbanes—Oxley Act that cross-references 
the separate audit report on the financial 
statements 


Standard unmodified opinion audit re- 
port—the report a CPA issues when all au- 
diting conditions have been met, no signif- 
icant misstatements have been discovered 
and left uncorrected, and it is the auditor’s 
opinion that the financial statements are 
fairly stated in accordance with the appli- 
cable financial reporting framework 


Unmodified opinion audit report with 
emphasis-of-matter paragraph or non- 
standard report wording—an unmodi- 
fied opinion audit report in which the fi- 
nancial statements are fairly presented, but 
the auditor believes it is important, or is 
required, to provide additional information 
or the wording of other paragraphs of the 
report require revision 


REVIEW QUESTIONS 


3-1 (OBJECTIVE 3-1) Explain why auditors’ reports are important to users of financial state- 
ments and why it is desirable to have standard wording. 

3-2 (OBJECTIVE 3-1) What are the purposes of the scope paragraph under the auditor’s 
responsibility in the auditor’s report? Identify the most important information included 
in the scope paragraph. 

3-3 (OBJECTIVE 3-1) What are the purposes of the opinion paragraph in the auditor’s report? 
Identify the most important information included in the opinion paragraph. 

3-4 (OBJECTIVE 3-1) You work as an audit junior at Robert Kim Chartered Accountants. 
You have just finished helping your senior perform the final audit at Edith Cosmetics Pte. 
Ltd for the year ended 30 June 2016. The visit by the audit team was from the 8" to 12" 
August 2016. Your audit partner Mr. Kim finished reviewing the audit files on 30 August 
2016. The final audit report was completed, attached to the financial statements, and 
delivered to Edith Cosmetics on 3rd September 2016. You are to prepare the report to send 
to the client. On what date should you stamp the report? 

3-5 (OBJECTIVE 3-2) What four circumstances are required for a standard unmodified 
opinion audit report to be issued? 

3-6 (OBJECTIVE 3-3) Describe the information included in the introductory, scope, and 
opinion paragraphs in a separate audit report on the effectiveness of internal control over 
financial reporting. What is the nature of the additional paragraphs in the audit report? 
3-7 (OBJECTIVES 3-1, 3-3) Compare the wording in the standard unmodified opinion audit 
report for a nonpublic entity under AICPA auditing standards in Figure 3-1 (p. 72) with the 
wording for a public company audit under PCAOB auditing standards in Figure 3-3 (p. 76). 
How are the reports similar? How are they different? 

3-8 (OBJECTIVES 3-4, 3-5) Why would the management of a company feel alarmed if the 
auditors decided to published an adverse audit report? 

3-9 (OBJECTIVE 3-4) Describe what is meant by reports involving the use of other auditors. 
What are the three options available to the primary auditor responsible for the opinion, 
and when should each be used? 

3-10 (OBJECTIVE 3-4) The client changed from FIFO to LIFO inventory valuation in the 
current year and reflected this change in their financial statements. How should this be 
reflected in the auditor's report? 

3-11 (OBJECTIVE 3-4) Distinguish between changes that affect consistency and those that 
may affect comparability but not consistency. Give an example of each. 

3-12 (OBJECTIVE 3-5) Describe the situations whereby the auditor has decided to place 
“Conditions Requiring Departures from Unmodified Opinion Audit Report” on their 
client’s financial statements. 

3-13 (OBJECTIVE 3-5) Distinguish between a qualified opinion, an adverse opinion, and a 
disclaimer of opinion, and explain the circumstances under which each is appropriate. 
3-14 (OBJECTIVE 3-5) Distinguish between a report qualified due to a GAAP departure and 
one qualified due to a scope limitation. 

3-15 (OBJECTIVE 3-6) Define materiality as it is used in audit reporting. What conditions will 
affect the auditor’s determination of materiality? 

3-16 (OBJECTIVE 3-6) Explain how materiality definitions and materiality decisions are 
taken in non-GAAP conditions. 

3-17 (OBJECTIVE 3-7) Scope restrictions could be instances that have been caused by the audit cli- 
ent and those beyond the control of either the client or the auditor. Explain how auditing stan- 
dards would have a bearing on the measures taken by the auditor if such restrictions came up. 
3-18 (OBJECTIVE 3-8) When an auditor discovers more than one condition that requires 
departure from or modification of the standard unmodified opinion audit report, what 
should the auditor’s report include? 

3-19 (OBJECTIVE 3-9) Discuss why the adoption of international accounting and auditing 
standards might be beneficial to investors and auditors. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


3-20 (OBJECTIVES 3-1, 3-2, 3-3, 3-4, 3-8) The following questions concern unmodified opinion 
audit reports. Choose the best response. 


a. Which of the following is not a required element of a standard unmodified opinion 
audit report issued in accordance with AICPA auditing standards? 
(1) A title that emphasizes the report is from an independent auditor 
(2) The city and state of the audit firm issuing the report 
(3) Astatement explaining management’s responsibilities for the financial statements 
(4) The signature of the engagement partner 


b. The date of the CPA’s opinion on the financial statements of the client should be the 
date of the 
(1) completion of all important audit procedures. 
(2) closing of the client’s books. 
(3) finalization of the terms of the audit engagement. 
(4) submission of the report to the client. 


c. If a principal auditor decides to refer in his or her report to the audit of another 

auditor, he or she is required to disclose the 

(1) name of the other auditor. 

(2) nature of the inquiry into the other auditor’s professional standing and extent of 
the review of the other auditor’s work. 

(3) reasons for being unwilling to assume responsibility for the other auditor’s 
work. 

(4) portion of the financial statements audited by the other auditor. 


3-21 (OBJECTIVES 3-4, 3-8) The following questions concern unmodified opinion audit reports 
with an emphasis-of-matter explanatory paragraph or nonstandard wording in report 
paragraphs. Choose the best response. 


a. An entity changed from the straight-line method to the declining-balance method 
of depreciation for all newly acquired assets. This change has no material effect on 
the current year’s financial statements but is reasonably certain to have a substantial 
effect in later years. If the change is disclosed in the notes to the financial statements, 
the auditor should issue a report with a(n) 

(1) unmodified opinion. 

(2) qualified opinion. 

(3) unmodified opinion with explanatory paragraph. 

(4) qualified opinion with explanatory paragraph regarding consistency. 


b. When the financial statements are fairly stated but the auditor concludes there is 
substantial doubt whether the client can continue in existence, the auditor should 
issue a(n) 

(1) adverse opinion. 

(2) qualified opinion only. 

(3) unmodified opinion. 

(4) unmodified opinion with explanatory paragraph. 

c. The auditor's report contains the following: “We did not audit the financial statements 
of EZ, Inc., a wholly owned subsidiary, which statements reflect total assets and rev- 
enues constituting 27 percent and 29 percent, respectively, of the consolidated totals. 
Those statements were audited by other auditors whose report has been furnished to 
us, and our opinion, insofar as it relates to the amounts included for EZ, Inc., is based 
solely on the report of the other auditors.” These sentences 
(1) assume responsibility for the other auditor. 

2) indicate a division of responsibility. 

3) require a departure from an unmodified opinion. 

4) are an improper form of reporting. 
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DISCUSSION QUESTIONS AND PROBLEMS 


3-22 (OBJECTIVE 3-1) Below are excerpts from the Independent auditors’ report to the members 
of Tesco PLC. Explain why the used the following phrases instead of the alternative provided. 


a. “In our opinion, Tesco PLC’s parent company financial statements give a true and fair 
view of the state of the parent company’s affairs as at 28 February 2015” instead of “In 
our opinion, Tesco PLC’s parent company financial statements give a precise view of 
the state of the parent company’s affairs as at 28 February 2015” 


b. “The financial reporting framework that has been applied in the preparation of the 
financial statements is applicable law and United Kingdom Accounting Standards 
(United Kingdom Generally Accepted Accounting Practice)” Instead of “The financial 
reporting framework that has been applied in the preparation of the financial state- 
ments is International Financial Reporting Standards” 


c. “An audit involves obtaining evidence about the amounts and disclosures in the finan- 
cial statements sufficient to give reasonable assurance that the financial statements 
are free from material misstatement, whether caused by fraud or error” instead of 
“An audit involves checking to identify all instances of fraud or error.” 


d. PricewaterhouseCoopers LLP dated their report on 5 May 2015 instead of 28 February 
201 5which the financial end of the company. 


e. “Mark Gill (Senior Statutory Auditor) for and on behalf of PricewaterhouseCoopers LLP 
Chartered Accountants and Statutory Auditors” instead of just “Mark Gill”. 


Independent auditors’ report to the members of Tesco PLC is on Page 145 of 2015 
Annual Report and Financial Statement. You can download the document at http://www 
tescoplc.com/files/pdf/reports/ar1 5/download_annual_report.pdf 


3-23 (OBJECTIVES 3-1, 3-2, 3-4, 3-6, 3-7) Patel, CPA, has completed the audit of the financial 
statements of Bellamy Corporation as of and for the year ended December 31, 2016. Patel 
also audited and reported on the Bellamy financial statements for the prior year. Patel 
drafted the following report for 2016. 


We have audited the balance sheet and statements of income and retained earnings of 
Bellamy Corporation as of December 31, 2016. We conducted our audit in accordance 
with generally accepted accounting standards. Those standards require that we plan 
and perform the audit to obtain reasonable assurance about whether the financial 
statements are free of misstatement. 

We believe that our audits provide a reasonable basis for our opinion. 

In our opinion, the financial statements referred to above present fairly the fi- 
nancial position of Bellamy Corporation as of December 31, 2016, and the results of 
its operations for the year then ended in conformity with generally accepted auditing 
standards, applied on a basis consistent with those of the preceding year. 


Patel, CPA 
(Signed) 
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Other Information 


a. 


* Bellamy is a private corporation and is presenting comparative financial 
statements. 

* During 2016, Bellamy acquired Stockard Inc. and the effects of that transaction 
are reflected in the current year financial statements. Information about this 
transaction is disclosed in footnote 12. 

* Patel was unable to perform normal accounts receivable confirmation proce- 
dures for accounts that are material, but not pervasive, to the financial state- 
ments. Unfortunately, Patel was not able to perform alternative procedures to 
support the existence of the receivables. 

* Bellamy Corporation is the defendant in litigation where there is a reasonable 
possibility that Bellamy may be required to pay a substantial amount of cash, 
which might require the sale of certain fixed assets. Because management 
does not want to provide any information that the plaintiff might use against 
Bellamy, the case is not discussed in the financial statements. 

* Bellamy issued debentures on January 31, 2015, in the amount of $10 million. 
The funds obtained from the issuance were used to finance the expansion of 
plant facilities. The debenture agreement restricts the payment of future cash 
dividends to earnings after December 31, 2020. Bellamy has disclosed this in the 
footnotes to the financial statements. 


Identify and explain any items included in “Other Information” that need not be part 
of the auditor’s report. 


b. Explain the deficiencies in Patel’s report as drafted.* 


3-24 (OBJECTIVES 3-4, 3-5, 3-6, 3-7, 3-8) For the following independent situations, assume that 
you are the audit partner on the engagement: 


1. 


Auto Delivery Company has a fleet of several delivery trucks. In the past, Auto 
Delivery had followed the policy of purchasing all equipment. In the current year, 
they decided to lease the trucks. The method of accounting for the trucks is therefore 
changed to lease capitalization. This change in policy is fully disclosed in footnotes. 


. You are auditing Deep Clean Services for the first time. Deep Clean has been in busi- 


ness for several years but over the last two years has struggled to stay afloat given 
the economic conditions. Based on your audit work, you have substantial doubt that 
Deep Clean will be in business by the end of its next fiscal year. 


. One of your audit clients has a material investment in a privately held biosciences 


company. Your audit firm engaged a business valuation specialist to assist in evaluat- 
ing the client’s estimation of the investment’s fair value. You conclude that the valua- 
tion specialist's work provides sufficient appropriate audit evidence. 


. Four weeks after the year-end date, a major customer of Prince Construction Co. 


declared bankruptcy. Because the customer had confirmed the balance due to Prince 
at the balance sheet date, management refuses to charge off the account or otherwise 
disclose the information. The receivable represents approximately 10% of accounts 
receivable and 20% of net earnings before taxes. 


. During your audit of Raceway.com, Inc., you conclude that there is a possibility 


that inventory is materially overstated. The client refuses to allow you to expand the 
scope of your audit sufficiently to verify whether the balance is actually misstated. 


. You complete the audit of Munich Department Store, and in your opinion, the finan- 


cial statements are fairly presented. On the last day of the audit, you discover that one 
of your supervisors assigned to the audit has a material investment in Munich. 


For each situation, do the following: 


a. 


Identify which of the conditions requiring a deviation from a standard unmodified 
opinion audit report is applicable, if any. 


* Based on AICPA question paper, American Institute of Certified Public Accountants. 
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Required 


Required 


b. State the level of materiality as immaterial, material, or highly material. If you cannot 
decide the level of materiality, state the additional information needed to make a decision. 

c. Given your answers in parts a. and b., state the type of audit report that should be is- 
sued. If you have not decided on one level of materiality in part b., state the appropri- 
ate report for each alternative materiality level. 


© @,. 3-25 (OBJECTIVES 3-4, 3-5, 3-6, 3-7, 3-8) For the following independent situations, assume that 
you are the audit partner on the engagement: 


1. A number of frozen yogurt stores have opened in the last few years and your client, 
YogurtLand, has experienced a noticeable decline in customer traffic over the past 
several months that has caused you to have substantial doubt about YogurtLand’s 
ability to continue as a going concern. 

2. Intelligis Electronics is a manufacturer of advanced electrical components. During 
the year, changes in the market resulted in a significant decrease in the demand for 
their products, which are now being sold significantly below cost. Management 
refuses to write-off the products or to increase the reserve for obsolescence. 

3. In the last 3 months of the current year, Oil Refining Company decided to change 
direction and go significantly into the oil drilling business. Management recognizes 
that this business is exceptionally risky and could jeopardize the success of its exist- 
ing refining business, but there are significant potential rewards. During the short 
period of operation in drilling, the company has had three dry wells and no suc- 
cesses. The facts are adequately disclosed in footnotes. 

4. Your client, Harrison Automotive, has changed from straight-line to sum-of-the- 
years’ digits depreciation. The effect on this year’s income is immaterial, but the effect 
in future years may be highly material. The change is not disclosed in the footnotes. 

5. Marseilles Fragrance, Inc., is based in New York but has operations throughout 
Europe. Because users of the audited financial statement are international, your audit 
firm was engaged to conduct the audit in accordance with U.S. auditing standards 
and International Standards on Auditing (ISAs). 

6. Circumstances prevent you from being able to observe the counting of inventory at 
Brentwood Industries. The inventory amount is material in relation to Brentwood 
Industries’ financial statements. But, you were able to perform alternative proce- 
dures to support the existence and valuation of the inventory at year-end. 

7. Approximately 20% of the audit of Lumberton Farms, Inc., was performed by a dif- 
ferent CPA firm, selected by you. You have reviewed their audit files and believe they 
did an excellent job on their portion of the audit. Nevertheless, you are unwilling to 
take complete responsibility for their work. 


Required For each situation, do the following: 

a. Identify which of the conditions requiring a deviation from a standard unmodified 
opinion audit report is applicable, if any. 

b. State the level of materiality as immaterial, material, or highly material. If you cannot de- 
cide the level of materiality, state the additional information needed to make a decision. 

c. Given your answers in parts a. and b., state the appropriate audit report from the fol- 
lowing alternatives (if you have not decided on one level of materiality in part b., state 
the appropriate report for each alternative materiality level): 


(1) Unmodified opinion—standard (4) Qualified opinion only—GAAP 
wording departure 

(2) Unmodified opinion—explanatory (5) Qualified opinion—scope limitation 
paragraph (6) Disclaimer 

(3) Unmodified opinion—nonstandard (7) Adverse* 
report wording 


* Based on AICPA question paper, American Institute of Certified Public Accountants. 
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3-26 (OBJECTIVES 3-4, 3-5, 3-6, 3-7, 3-8) For the following independent situations, assume that 
you are the audit partner on the engagement: 


1. 


McClellan’s Used Cars, a client of yours, recently changed its depreciation method 
from straight-line to sum-of-the-years’ digits. The effect of the change on the current 
year’s income is not material, but in future years, you suspect the effect will become 
material. The facts are adequately disclosed in footnotes. 


2. Jordan Minerals recently decided to change its direction and spent the last 8 months 


developing business in the potash mining business. There are significant potential 
rewards, but the company’s management recognizes that there are significant risks 
in the business that could jeopardize the success of its existing mining business. 
Since starting the new venture, the company has had no successes and some decline 
in profits. The facts are adequately disclosed in footnotes. 


. You recently noticed that Janssen Technology Solutions routinely excludes their 


statement of cash flows in the company’s annual financial statements. Their reason- 
ing, as explained to you, is that the statements are confusing to their readers, so they 
prefer to leave the information out. 


. A group of longtime friends decided to try their hand at online art auctions and online 


trade in antiquities. Although their venture started out well enough, a market-wide 
downturn in e-commerce sales abruptly plunged the start-up into the red. The future of 
the company looks bleak; both sales and cash position have declined substantially. If the 
market does not turn around soon, you think the company may not be able to continue 
to operate. 


. The controller of a company you're auditing will not allow you to confirm the receiv- 


able balances from any of its customers. However, the amounts of the receivables are 
material in relation to the company’s financial statements. You cannot use any other 
methods to check the receivable balances. 


. Your firm has been unusually busy, so you asked another CPA firm to do about 


30% of the audit for Abdoun’s Arts, Inc. After a thorough review of their working 
papers, you are convinced that they did an excellent job on their portion of the audit. 
However, you are reluctant to take complete responsibility for their work. 


For each situation, do the following: 


a. 


b. 


Identify which of the conditions requiring a modification of or a deviation from an 
unqualified report is applicable. 

State the level of materiality as immaterial, material, or highly material. If you cannot de- 
cide the level of materiality from the given information, state the additional information 
that you would need to make a decision. 


. Given your answers to parts a and b, state the appropriate audit report from the fol- 


lowing alternatives (if you have not decided on one level of materiality in part b, state 
the appropriate report for each alternative materiality level): 


(i) Unqualified—standard wording (iv) Qualified opinion only 

(ii) Unqualified—explanatory (v) Qualified scope and opinion 
paragraph (vi) Disclaimer 

(iii) Unqualified—modified wording (vii) Adverse* 


. Based on your answer to part c, indicate which paragraphs, if any, should be modi- 


fied in the standard audit report. Be sure to indicate whether an additional paragraph 
is necessary, if so, where it should be located in the report. 


* Based on AICPA question paper, American Institute of Certified Public Accountants. 
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Required 


© @.. 3-27 (oBjectives 3-3, 3-9) The PCAOB has proposed changes to the auditor’s report for 

| public companies that include requirements for the auditor to communicate “critical 
audit matters.” Critical audit matters include those matters during the audit that involved 
difficult, subjective, or complex auditor judgments or that posed difficulty to the auditor 
in obtaining sufficient appropriate evidence or in forming the opinion on the financial 
statements. Similarly, the International Auditing and Assurance Standards Board (IAASB) 
recently revised the auditor’s report in the International Standards on Auditing (ISAs) to 
require auditors to communicate “key audit matters.” Key audit matters include communi- 
cation of similar kinds of information as proposed by the PCAOB such as areas of higher 
assessed risk of material misstatement and the effects of significant events or transactions 
that occurred during the period. 


Required a. Describe how users of the financial statements may benefit from communications 
about these matters in an audit report. 
b. Describe how communication of these matters may not be beneficial to users of the 
financial statements. 
c. What difficulties, if any, may auditors face in communicating about these matters? 


© @,. 3-28 (OBJECTIVES 3-1, 3-3, 3-7, 3-9) The International Auditing and Assurance Standards 

04004 Board (IAASB) recently revised its standards related to audit reporting. ISA 700 (Revised), 
Forming an Opinion and Reporting on Financial Statements, requires the auditor’s report to 
include the following paragraphs under the headings “Basis for Opinion” and “Auditor’s 
Responsibilities for the Audit of the Financial Statements”: 


Basis for Opinion 


We conducted our audit in accordance with International Standards on Auditing 
(ISAs). Our responsibilities under those standards are further described in the Auditor's 
Responsibilities for the Audit of the Financial Statements section of our report. We are 
independent of the Company in accordance with the International Ethics Standards Board 
for Accountants’ Code of Ethics for Professional Accountants (IESBA Code) together with 
the ethical requirements that are relevant to our audit of the financial statements in [the 
home country] and we have fulfilled our other ethical responsibilities in accordance 
with these requirements and the IESBA Code. We believe that the audit evidence we have 
obtained is sufficient and appropriate to provide a basis for our opinion. 


Auditor’s Responsibilities for the Audit of the Financial Statements 


Our objectives are to obtain reasonable assurance about whether the financial statements 
as a whole are free from material misstatement, whether due to fraud or error, and to issue 
an auditor's report that includes our opinion. Reasonable assurance is a high level of assur- 
ance, but is not a guarantee that an audit conducted in accordance with ISAs will always 
detect a material misstatement when it exists. Misstatements can arise from fraud or error 
and are considered material if, individually or in the aggregate, they could reasonably be 
expected to influence the economic decisions of users taken on the basis of these financial 
statements. 


Required Read the preceding paragraphs to answer the following: 


a. How does the information in the preceding paragraphs compare to the informa- 
tion in the paragraphs under the “Auditor’s Responsibility” heading in the standard 
unmodified opinion audit report example for a nonpublic company shown in 
Figure 3-1 (p. 72)? 

b. How does the information in the preceding paragraphs compare to the information 
in the scope paragraph in the standard unmodified opinion audit report example for 
a public company shown in Figure 3-3 (p. 76)? 

c. Discuss whether you believe these paragraphs in the ISA audit report improve audi- 
tor communications to users of the financial statements. 
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3-29 (OBJECTIVES 3-3, 3-4) The Singapore Exchange website is a very good source of infor- 
mation on public companies listed in Singapore. The companies listed on the bourse are 
not only from Singapore but from various countries around the world such as Australia, 
Japan and the People’s Republic of China. Every company listed on the bourse must 
publish annual reports, business review reports, disclosure reports and interim reports 
among others on the website. 


a. Use the following url http://www.sgx.com/wps/portal/sgxweb/home/company_ 
disclosure/annual_financial to find the announcement of Annual Report for 
Macquarie Bank Limited for the period ended 31 March 2015. A URL is given 
on the announcement for you to download the Annual Report. (Conversely you 
could download the Annual Report at http://static:macquarie.com/dafiles/Internet/ 
mgl/global/shared/about/investors/results/2015/Macquarie_Bank_FY15_Annual_ 
Report.PDF) Then answer the following questions. 


Ts 
2. 


3. 
4. 
5. 


Who was Macqurie Bank’s auditor for that period? 

Which accounting standards must the auditor certify the financial reports 
comply with? 

What is the main responsibility of the auditor to the company? 

What is involved in the audit of the bank? 

When was the audit completed? 


b. As Macquarie Bank Limited is a company incorporated in Australia, let us learn 
more about auditing standards in Australia. Visit http://www.auasb.gov.au/ 
Pronouncements/Australian-Auditing-Standards.aspx to find the Auditing Standards 
Made Under Section 336 of the Corporations Act 2001 of Australia. 


ils 
2. 
3. 
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Which standard is relevant when dealing with the issue of “Going Concern’? 
Where would the overall objectives of the independent auditor be spelt out? 

In the standard that you have identified in 2, identify the types of financial reports 
that would come under this standard. 
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Required 


CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 


be able to 


4-I 


4-2 


4-3 


4-4 


4.7 
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Distinguish ethical from 
unethical behavior in 
personal and professional 
contexts. 

Resolve ethical dilemmas 
using an ethical framework. 
Explain the importance 

of ethical conduct for the 
accounting profession. 
Describe the purpose and 
content of the AICPA Code 
of Professional Conduct. 
Apply the AICPA Code 
rules and interpreta- 

tions on independence and 
explain their importance. 
Understand Sarbanes— 
Oxley Act and other SEC 
and PCAOB independence 
requirements and addi- 
tional factors that influence 
auditor independence. 
Understand the require- 
ments of other rules 

under the AICPA Code. 
Describe the enforcement 


mechanisms for CPA conduct. 
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PROFESSIONAL ETHICS 


The United U-Li Corporation Berhad Case 


Auditors are always aware of the exact earnings information when they are performing the 
audits. They generally have information about the earnings of a company long before the public 
is informed of the results. Auditors must, as a result, always be transparent and honest when 
conducting their work. The first fundamental principle of the by-laws (on professional eth- 
ics, conduct and practice) published by the Malaysian Institute of Accountants is ‘integrity’. 
Members need ‘to be straightforward and honest in all professional and business relationships. 


The United U-Li Corporation 
Berhad case was a_ land- 
mark case in Malaysia where 
the Securities Commission 
Malaysia had charged one 
of the auditors for abetting 
a public listed company for 
making a false statement to 
the Malaysian bourse, Bursa 
Malaysia. Messrs Roger Yue, 
Tan & Associates was the hired 
auditor for United U-Li at the 
time. On 2Ist October, 2015, 
Yue Chi Kin (47 years old), the 
audit partner of Messrs Roger Yue, Tan &Associates, was identified as the perpetrator and con- 
victed. The profit-before-tax of the company for the financial year (ending 31 December 2004) 
was overstated by 26 percent. Yue was sentenced to a one year jail term and fined RM400,000, 
in default of six months of imprisonment because of the offence. 


The deciding judge, Dato’ Ahmad Zamzani bin Hj. MohdZain, stated that public interest is a 
paramount consideration for such offences. These should not be taken lightly as such occur- 
rences would jeopardize investors’ confidence in the stock market. 


Sources: Press release from the Securities Commission Malaysia, Audit Partner Jailed One 
Year, Fined RM400,000 for Misleading Disclosure of Financial Information http://www.sc.com 
-my/post_archive/audit-partner-jailed-one-year-fined-rm400000-for-misleading-disclosure-of- 
financial-information/. 


Integrity is an important principle for auditors to follow. In preceding chapters, audit reports and the demand for 
audit and other assurance services were discussed. As in the aforesaid Malaysian case, the value of the audit report 
and the demand for audit services depend on public confidence in the independence and integrity of CPAs. This 
chapter discusses ethics and the independence and other ethical requirements for CPAs, including the AICPA Code 
of Professional Conduct, PCAOB standards, and international ethics standards. We begin the chapter with a discus- 
sion of general ethical principles and their application to the CPA profession. 


WHAT ARE ETHICS? 
Ethics can be defined broadly as a set of moral principles or values. Each of us has ‘OBJECTIVE 4-10 


such a set of values, although we may or may not have considered them explicitly. (5. ich ethi 
fi aa . : : : : istinguish ethical from unethical 
Philosophers, religious organizations, and other groups have defined in various ways behavior in personal and 
ideal sets of moral principles or values. Examples of prescribed sets of moral prin- professional contexts. 
ciples or values include laws and regulations, church doctrine, codes of business eth- 
ics for professional groups such as CPAs, and codes of conduct within organizations. 
An example of a prescribed set of principles is included in Figure 4-1. These prin- 
ciples were developed by the Josephson Institute of Ethics, a nonprofit membership 
organization for the improvement of the ethical quality of society. 
It is common for people to differ in their moral principles and values and the rela- 
tive importance they attach to these principles. These differences reflect life experi- 
ences, successes and failures, as well as the influences of parents, teachers, and friends. 


Ethical behavior is necessary for a society to function in an orderly manner. It can 
be argued that ethics is the glue that holds a society together. Imagine, for example, 
what would happen if we couldn’t depend on the people we deal with to be honest. If 
parents, teachers, employers, siblings, coworkers, and friends all consistently lied, it 
would be almost impossible to have effective communication. 

The need for ethics in society is sufficiently important that many commonly held 
ethical values are incorporated into laws. However, many of the ethical values found 
in Figure 4-1, such as caring, cannot be incorporated into laws because they cannot be 
defined well enough to be enforced. That does not imply, however, that the principles 
are less important for an orderly society. 


Need for Ethics 


Most people define unethical behavior as conduct that differs from what they believe is 
appropriate given the circumstances. Each of us decides for ourselves what we con- 
sider unethical behavior, both for ourselves and others. It is important to understand 
what causes people to act in a manner that we decide is unethical. 


Why People Act 
Unethically 


FIGURE 4-|_ _—_ Illustrative Prescribed Ethical Principles 


The following are the six core ethical values that the Josephson Institute associates with ethical behavior: 


Trustworthiness includes honesty, integrity, reli: means pursuing excellence, self-restraint, and 
ability, and loyalty. Honesty requires a good faith leading by example, including perseverance and 
intent to convey the truth. Integrity means that the engaging in continuous improvement. 

person acts according to conscience, regardless of the Fairness and justice include issues of equality, 
situation. Reliability means making all reasonable impartiality, proportionality, openness, and due 
efforts to fulfill commitments. Loyalty is a responsi- process. Fair treatment means that similar situ- 


bility to promote and protect the interests of ations are handled consistently. 


Gentain people and organizations. Caring means being genuinely concerned for the 


Respect includes notions such as civility, courtesy, welfare of others and includes acting altruis- 
decency, dignity, autonomy, tolerance, and acceptance. tically and showing benevolence. 


A respectful person treats others with consideration 
and accepts individual differences and beliefs without 
prejudice. 
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Citizenship includes obeying laws and per- 
forming one’s fair share to make society work, 
including such activities as voting, serving on juries, 


Responsibility means being accountable for one’s conserving resources, and giving more than one 
actions and exercising restraint. Responsibility also takes, 
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There are two primary reasons why people act unethically: The person’s ethical 
standards are different from those of society as a whole, or the person chooses to act 
selfishly. Frequently, both reasons exist. 


Person’s Ethical Standards Differ from General Society’s Extreme examples of 
people whose behavior violates almost everyone’s ethical standards are drug deal- 
ers, bank robbers, and larcenists. Most people who commit such acts feel no remorse 
when they are apprehended because their ethical standards differ from those of soci- 
ety as a whole. 

There are also many far less extreme examples when others violate our ethical 
values. When people cheat on their tax returns, treat other people with hostility, lie 
on resumes and employment applications, or perform below their competence level 
as employees, most of us regard that as unethical behavior. If the other person has 
decided that this behavior is ethical and acceptable, there is a conflict of ethical values 
that is unlikely to be resolved. 


The Person Chooses to Act Selfishly The following example illustrates the differ- 
ence between ethical standards that differ from general society’s and acting selfishly. 
Person A finds a briefcase in an airport containing important papers and $1,000. He 
tosses the briefcase and keeps the money. He brags to his family and friends about his 
good fortune. Person A’s values probably differ from most of society’s. Person B faces 
the same situation but responds differently. He keeps the money but leaves the brief- 
case in a conspicuous place. He tells nobody and spends the money on a new ward- 
robe. It is likely that Person B has violated his own ethical standards, but he decided 
that the money was too important to pass up. He has chosen to act selfishly. 

A considerable portion of unethical behavior results from selfish behavior. 
Political scandals result from the desire for political power; cheating on tax returns 
and expense reports is motivated by financial greed; performing below one’s com- 
petence and cheating on tests typically arise from laziness. In each case, the person 
knows that the behavior is inappropriate but chooses to do it anyway because of the 
personal sacrifice needed to act ethically. 


ETHICAL DILEMMAS 


Resolve ethical dilemmas using 
an ethical framework. 
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An ethical dilemma is a situation a person faces in which a decision must be made 
about the appropriate behavior. A simple example of an ethical dilemma is finding a 
diamond ring, which necessitates deciding whether to attempt to find the owner or to 
keep it. A far more difficult ethical dilemma to resolve is the following example. It is 
the type of case that might be used in an ethics course. 


« A man was near death from a rare blood disease. There was one experimental 
drug that the doctors thought might save him, but the man was not admitted 
into the free experimental trial. The drug had recently been developed by a start- 
up pharmaceutical company. The drug was expensive to make, but the company 
was charging twenty times what it cost to make and develop. The sick man’s 
wife went to everyone she knew to borrow the money to pay for the drug, but 
she could only get together about $10,000, which is half of what it cost. She told 
the company that her husband was dying and asked that they sell the drug for a 
lower price or let her pay later. But the company said: “We discovered the drug 
and need to make money for our shareholders who have invested in its develop- 
ment.” The wife became desperate and broke into the treatment center to steal 
the drug for her husband. What do you think about the wife’s actions? 


Auditors, accountants, and other businesspeople face many ethical dilemmas in 
their business careers. Dealing with a client who threatens to seek a new auditor unless 
an unmodified opinion is issued presents an ethical dilemma if an unmodified opin- 
ion is inappropriate. Deciding whether to confront a supervisor who has materially 
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overstated departmental revenues as a means of receiving a larger bonus is an ethical 
dilemma. Continuing to be a part of the management of a company that harasses and 
mistreats employees or treats customers dishonestly is an ethical dilemma, especially 
if the person has a family to support and the job market is tight. 


There are alternative ways to resolve ethical dilemmas, but care must be taken to avoid 
methods that are rationalizations of unethical behavior. The following are rationaliza- 
tion methods commonly employed that can easily result in unethical conduct: 


Everybody Does It The argument that it is acceptable behavior to falsify tax returns, 
cheat on exams, or sell defective products is commonly based on the rationalization 
that everyone else is doing it and therefore it is acceptable. 


If It’s Legal, It’s Ethical Using the argument that all legal behavior is ethical relies 
heavily on the perfection of laws. Under this philosophy, one would have no obliga- 
tion to return a lost object unless the other person could prove that it was his or hers. 


Likelihood of Discovery and Consequences This philosophy relies on evaluating 
the likelihood that someone else will discover the behavior. Typically, the person also 
assesses the severity of the penalty (consequences) if there is a discovery. An example 
is deciding whether to correct an unintentional overbilling to a customer when the 
customer has already paid the full amount. If the seller believes that the customer will 
detect the error and respond by not buying in the future, the seller will inform the cus- 
tomer now; otherwise, the seller will wait to see if the customer complains. 


Formal frameworks have been developed to help people resolve ethical dilemmas. 
The purpose of such a framework is to help identify the ethical issues and decide an 
appropriate course of action using the person’s own values. The six-step approach that 
follows is intended to be a relatively simple approach to resolving ethical dilemmas: 


1. Obtain the relevant facts. 

2. Identify the ethical issues from the facts. 

3. Determine who is affected by the outcome of the dilemma and how each person 
or group is affected. 

4. Identify the alternatives available to the person who must resolve the dilemma. 

5. Identify the likely consequence of each alternative. 

6. Decide the appropriate action. 


An illustration is used to demonstrate how a person might use this six-step 
approach to resolve an ethical dilemma. 


Bryan Longview has been working six months as a staff assistant for Barton & Barton, 
CPAs. Currently he is assigned to the audit of Reyon Manufacturing Company under 
the supervision of Charles Dickerson, an experienced audit senior. There are three audi- 
tors assigned to the audit, including Bryan, Charles, and a more experienced assistant, 
Martha Mills. During lunch on the first day, Charles says, “It will be necessary for us to 
work a few extra hours on our own time to make sure we come in on budget. This audit 
isn’t very profitable anyway, and we don’t want to hurt our firm by going over budget. 
We can accomplish this easily by coming in a half hour early, taking a short lunch break, 
and working an hour or so after normal quitting time. We just won't enter that time on 
our time report.” Bryan recalls reading the firm’s policy that working hours and not 
charging for them on the time report is a violation of Barton & Barton’s employment 
policy. He also knows that seniors are paid bonuses, instead of overtime, whereas staff 
are paid for overtime but get no bonuses. Later, when discussing the issue with Martha, 
she says, “Charles does this on all of his jobs. He is likely to be our firm’s next audit man- 
ager. The partners think he’s great because his jobs always come in under budget. He 
rewards us by giving us good engagement evaluations, especially under the cooperative 
attitude category. Several of the other audit seniors follow the same practice.” 
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Relevant Facts There are three key facts in this situation that deal with the ethical 
issue and how the issue will likely be resolved: 


1. The staff person has been informed that he will work hours without recording 
them as hours worked. 

2. Firm policy prohibits this practice. 

3. Another staff person has stated that this is common practice in the firm. 


Ethical Issue The ethical issue in this situation is not difficult to identify. 


* Is it ethical for Bryan to work hours and not record them as hours worked in this 
situation? 


Who Is Affected and How Is Each Affected? There are typically more people 
affected in situations in which ethical dilemmas occur than might be expected. The 
following are the key persons involved in this situation: 


Who How Affected 

Bryan Being asked to violate firm policy. 
Hours of work will be affected. 
Pay will be affected. 


Performance evaluations may be affected. 
Attitude about firm may be affected. 
Martha Same as Bryan. 
Charles Success on engagement and in firm may be 
affected. 
Hours of work will be affected. 
Barton & Barton Stated firm policy is being violated. 
May result in underbilling clients in the current and 
future engagements. 
May affect firm’s ability to realistically budget 
engagements and bill clients. 
May affect the firm’s ability to motivate and retain 


employees. 
Staff assigned to May result in unrealistic time budgets. 
Reyon Manufacturing May result in unfavorable time performance 
in the future evaluations. 


May result in pressures to continue practice of not 
charging for hours worked. 
Other staff in firm Following the practice on this engagement may 
motivate others to follow the same practice on 
other engagements. 


Bryan’s Available Alternatives 


* Refuse to work the additional hours. 

¢ Perform in the manner requested. 

¢ Inform Charles that he will not work the additional hours or will charge the ad- 
ditional hours to the engagement. 

¢ Talk to a manager or partner about Charles’s request. 

* Refuse to work on the engagement. 

* Quit working for the firm. 


Each of these options includes a potential consequence, including possible termi- 
nation by the firm. 


Consequences of Each Alternative In deciding the consequences of each alterna- 
tive, it is essential to evaluate both the short- and long-term effects. There is a natural 
tendency to emphasize the short term because those consequences will occur quickly, 
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even when the long-term consequences may be more important. For example, con- 
sider the potential consequences if Bryan decides to work the additional hours and 
not report them. In the short term, he will likely get good evaluations for cooperation 
and perhaps a salary increase. In the longer term, what will be the effect of not report- 
ing the hours this time when other ethical conflicts arise? Consider the following simi- 
lar ethical dilemmas Bryan might face in his career as he advances: 


« A supervisor asks Bryan to work three unreported hours daily and 15 unreported 
hours each weekend. 

« A supervisor asks Bryan to initial certain audit procedures as having been per- 
formed when they were not. 

¢ Bryan concludes that he cannot be promoted to manager unless he persuades 
assistants to work hours that they do not record. 

* Management informs Bryan, who is now a partner, that either the company 
gets an unmodified opinion for a $40,000 audit fee or the company will change 
auditors. 

* Management informs Bryan that the audit fee will be increased $25,000 if Bryan 
can find a plausible way to increase earnings by $1 million. 


Appropriate Action Only Bryan can decide the appropriate option to select in the 
circumstances after considering his ethical values and the likely consequences of each 
option. At one extreme, Bryan can decide that the only relevant consequence is the 
potential impact on his career. Most of us would believe that Bryan is an unethical 
person if he follows that course. At the other extreme, Bryan can decide to refuse to 
work for a firm that permits even one supervisor to violate firm policies. Many people 
would consider such an extreme reaction naive. Most CPA firms have policies such as 
an anonymous hotline to report unethical behavior and provide employees with men- 
tors and other more formal methods of communication to help staff resolve ethical 
questions. 


SPECIAL NEED FOR ETHICAL CONDUCT IN PROFESSIONS 


Our society has attached a special meaning to the term professional. Professionals are 
expected to conduct themselves at a higher level than most other members of society. 
For example, when the press reports that a physician, clergyperson, U.S. senator, or 
CPA has been indicted for a crime, most people feel more disappointment than when 
the same thing happens to people who are not labeled as professionals. 

The term professional means a responsibility for conduct that extends beyond sat- 
isfying individual responsibilities and beyond the requirements of our society’s laws 
and regulations. A CPA, as a professional, recognizes a responsibility to the public, 
to the client, and to fellow practitioners, including honorable behavior, even if that 
means personal sacrifice. 

The reason for an expectation of a high level of professional conduct by any 
profession is the need for public confidence in the quality of service by the profession, 
regardless of the individual providing it. For the CPA, it is essential that the client and 
external financial statement users have confidence in the quality of audits and other 
services. If users of services do not have confidence in physicians, judges, or CPAs, the 
ability of those professionals to serve clients and the public effectively is diminished. 

It is not practical for most customers to evaluate the quality of the performance 
of professional services because of their complexity. A patient cannot be expected 
to evaluate whether an operation was properly performed. A financial statement 
user cannot be expected to evaluate audit performance. Most users have neither the 
competence nor the time for such an evaluation. Public confidence in the quality of 
professional services is enhanced when the profession encourages high standards of 
performance and conduct on the part of all practitioners. 
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CPA firms have a different relationship with users of financial statements than most 
other professionals have with their customers. Attorneys, for example, are typically 
engaged and paid by a client and have primary responsibility to be an advocate for 
that client. CPA firms are usually engaged by management for private companies 
and the audit committee for public companies, and are paid by the company issu- 
ing the financial statements, but the primary beneficiaries of the audit are financial 
statement users. Often, the auditor does not know or have contact with the financial 
statement users but has frequent meetings and ongoing relationships with client 
personnel. 

It is essential that users regard CPA firms as competent and unbiased. If users 
believe that CPA firms do not perform a valuable service (reduce information risk), 
the value of CPA firms’ audit and other attestation reports is reduced and the demand 
for these services will thereby also be reduced. Therefore, there is considerable incen- 
tive for CPA firms to conduct themselves at a high professional level. 


Figure 4-2 summarizes the most important ways in which CPAs can conduct them- 
selves appropriately and perform high-quality audits and related services. In Chapter 2 
we discussed auditing standards and their interpretations, the CPA examination, qual- 
ity control, peer review requirements, the PCAOB and SEC, AICPA audit practice and 
quality centers, and continuing education. The legal liability of CPA firms also exerts 
considerable influence on the way in which practitioners conduct themselves and 
audits, and this topic is examined in Chapter 5. 

In the United States, the two most influential factors—shown shaded in Figure 4-2— 
are the AICPA Code of Professional Conduct and the PCAOB and SEC. The Code of Professional 
Conduct is meant to provide a standard of conduct for all members of the AICPA. The 
PCAOB is authorized to establish ethics and independence standards for auditors of 
public companies, and the SEC also plays a significant role in establishing independence 
standards for auditors of public companies. 

At the international level, the International Ethics Standards Board for 
Accountants (IESBA), an independent standards-setting body within the International 
Federation of Accountants (IFAC), establishes ethical standards and guidance and 
fosters international debate on ethical issues faced by accountants through its Code of 
Ethics for Professional Accountants. As a member body of IFAC, the AICPA agrees to have 
ethics standards that are at least as stringent as the IESBA ethics standards. While 
CPAs in the United States must follow the AICPA Code, the AICPA Professional Ethics 
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Executive Committee closely monitors IESBA activities to converge the U.S. guid- 
ance, where appropriate, to guidance in the IESBA Code. The remainder of this chapter 
addresses the AICPA Code and related PCAOB and SEC requirements. 


CONCEPT CHECK 


1. Suppose that you share a ride to a client with another audit staff member. Your 
colleague proposes that you both submit mileage reimbursement requests for each day 
of the audit even though you share rides. Explain the six-step approach to resolving an 
ethical dilemma and apply it to this situation. 


2. Why is there a special need for professional conduct by CPAs? How does this differ 
from the need for special conduct in other professions? 


CODE OF PROFESSIONAL CONDUCT 


Members of the AICPA agree to follow the AICPA Code of Professional Conduct. As noted 
in Chapter 2, many CPAs no longer practice in an accounting firm, but work in busi- 
ness or in government or nonprofit organizations. As a result, the Code has been 
restructured to provide separate guidance for members in public practice, those in 
business, and other AICPA members, such as members who are retired or no longer 
working. Table 4-1 summarizes the organization of the Code of Professional Conduct. 

The Code consists of principles and rules, in addition to interpretations. The prin- 
ciples provide the framework for the rules that govern the CPA’s performance of pro- 
fessional responsibilities. AICPA bylaws require that members comply with the rules 
of the Code. Interpretations of the rules address circumstances members may face that 
are threats to compliance with the rules of conduct. Part 1 of the Code includes rules 
for members in public practice, while Part 2 includes rules for members in business. 
Part 3 includes rules for all other members. 

Because only members in public practice can audit financial statements, we focus 
on the rules and related interpretations for members in public practice in Part 1, as well 
as the Principles of Professional Conduct that are applicable to all members. The revised 
Code also provides a conceptual framework to provide guidance for members in situa- 
tions where an interpretation of the rules does not exist. 

A few definitions from the AICPA Code are presented to help you understand and 
interpret the rules. 


* Client. Any person or entity, other than the member’s employer, that engages a 
member or a member’s firm to perform professional services. 

* Firm. A form of organization permitted by law or regulation whose charac- 
teristics conform to resolutions of the Council of the American Institute of 
Certified Public Accountants that is engaged in public practice. A firm includes 
the individual partners thereof, except for purposes of applying the rule on 
independence. 

* Institute. The American Institute of Certified Public Accountants. 


TABLE 4-1 Organization of AICPA Code of Professional Conduct 


Section Applicability Primary Contents 


Preface All members Principles of Professional Conduct 


Part | Members in public practice Conceptual Framework 
Rules and Interpretations 


Part 2 Members in business Conceptual Framework 
Rules and Interpretations 


Part 3 Other members Rules and Interpretations 
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Principles of Professional 


Conduct 


Conceptual Framework 
for Rules of Conduct 


e Member. A member, associate member, or international associate of the 
American Institute of Certified Public Accountants. 

¢ Public Practice. Consists of the performance of professional services for a client by 
a member or a member’s firm. 


The section of the AICPA Code dealing with principles of professional conduct includes 
a general discussion of characteristics required of a CPA. The principles section consists 
of two main parts: a list of six ethical principles and a discussion of those principles. 
The ethical principles are listed in Table 4-2. The principles indicate the profession’s 
responsibilities to the public, clients, and professional colleagues. The principles are 
designed to guide members in the performance of their professional responsibilities 
and in meeting the basic requirements of ethical and professional conduct. They call for 
an unwavering commitment to honorable behavior that overrides personal advantage. 
Discussions throughout this chapter include ideas taken from the principles section. 


Although interpretations of the rules address many of the situations that may threaten 
compliance with the rules, they cannot address all such circumstances. To assist 
members in such circumstances, the Code includes the following conceptual frame- 
work approach for the member to evaluate threats to compliance with the Code. 


1. Identify threats. When a member encounters a relationship or circumstance that is 
not specifically addressed by a rule or interpretation, the member should evaluate 
whether the relationship or circumstance creates a threat to following the rule. 

2. Evaluate the significance of the threat. In evaluating the significance of a threat, the 
member should determine whether the threat is at an acceptable level. A threat is 
at an acceptable level when a reasonable and informed third party who is aware 
of the relevant information would be expected to conclude that the threat would 
not compromise the member’s compliance with the rules. 

3. Identify and apply safeguards. If the member concludes that the threat is not at an 
acceptable level, the member should apply safeguards to eliminate the threat or 
reduce it to an acceptable level. 


Threats to Compliance Threats to compliance with the rules fall into seven broad 
categories: adverse interest, advocacy, familiarity, management participation, self- 
interest, self-review, and undue influence. Table 4-3 provides a definition of each 
threat, along with a specific example of a threat to compliance with the rules. For 
example, suppose the parent of a staff member at the firm works as a controller at an 
audit client. This may represent a threat to independence. The firm should evaluate 


Principle 


Responsibilities 


TABLE 4-2 Principles of Professional Conduct 


Description 


In carrying out their responsibilities as professionals, members should exercise sensitive professional and moral 
judgments in all their activities. 


The Public Interest 


Members should accept the obligation to act in a way that will serve the public interest, honor the public trust, and 
demonstrate a commitment to professionalism. 


Integrity 


Objectivity and 
Independence 


To maintain and broaden public confidence, members should perform all professional responsibilities with the highest 
sense of integrity. 


A member should maintain objectivity and be free of conflicts of interest in discharging professional responsibilities. 
A member in public practice should be independent in fact and appearance when providing auditing and other 
attestation services. 


Due Care 
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A member should observe the profession’s technical and ethical standards, strive continually to improve competence and 
quality of services, and discharge professional responsibility to the best of the member’s ability. 


Scope and Nature 
of Services 


A member in public practice should observe the principles of the Code of Professional Conduct in determining the scope 
and nature of services to be provided. 
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TABLE 4-3 Threats to Compliance with Rules Under the AICPA Code of Professional Conduct 


Threat Definition Example of a Threat 


Adverse The threat that a member will not act with objectivity because the An officer, director, or significant shareholder participates 
interest member’s interests are opposed to the client’s interests. in litigation against the firm. 
Advocacy The threat that a member will promote a client’s interest or A member endorses a client’s services or products. 


position to the point that his or her objectivity or independence 
is compromised. 


Familiarity The threat that, due to a long or close relationship with a client, A member's close friend is employed by the client. 
a member will become too sympathetic to the client’s interest 
or too accepting of the client’s work or product. 


Management The threat that a member will take on the role of client management or — Due to a loss of client personnel, the client asks a 
participation otherwise assume management responsibilities, such as may occur member firm to assist with accounting activities, 

during an engagement to provide nonattest services. including the authorization of transactions. 

Self-interest The threat that a member could benefit, financially or otherwise, from an The member has a financial interest in a client, and the 
interest in, or relationship with, a client or persons associated with the outcome of a professional services engagement may 
client. affect the fair value of the financial interest. 

Self-review The threat that a member will not appropriately evaluate the results of a The member performs bookkeeping services for the 
previous judgment or service performed or supervised by the member client and then performs an audit of those financial 
or an individual in the member's firm and that the member will rely on statements. 


that service in forming a judgment as part of another service. 


Undue influence The threat that a member will subordinate his or her judgment to an The client indicates that it will not award additional 
individual associated with a client or any relevant third party due to that engagements to the firm if the firm continues to dis- 
individual’s reputation or expertise, aggressive or dominant personality, agree with the client on an accounting or tax matter. 


or attempts to coerce or exercise excessive influence over the member. 
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the significance of this threat and whether safeguards can reduce this threat to an 
acceptable level in deciding whether to accept or continue with the client. 


Safeguards After evaluating the significance of a threat, if the member concludes 
that the threat is not at an acceptable level, the member should identify safeguards 
that eliminate the threat or reduce it to an acceptable level. Depending on the severity 
of the threat and the nature and effectiveness of the safeguards, more than one safe- 
guard may be necessary. In other cases, the member may conclude that the threat is so 
severe that no safeguards can eliminate the threat or reduce it to an acceptable level. 
In such cases, providing the professional service would compromise the member's 
compliance with the rules. The member should determine whether to decline or dis- 
continue the professional services engagement, or resign from the engagement. 
Safeguards fall into three broad categories: 


1. Safeguards created by the profession, legislation, or regulation. 

2. Safeguards implemented by the client. 

3. Safeguards implemented by the firm, including policies and procedures to imple- 
ment professional and regulatory requirements. 


For example, excessive reliance on revenue from a single client could pose a threat to 
objectivity and independence. The firm may implement policies to monitor the firm’s 
or a partner’s excessive reliance on revenue from a single client, and if necessary, take 
actions to reduce this excessive reliance. Although safeguards may be applied from 
one or more than one category, it is not possible to rely on safeguards implemented by 
the client alone to eliminate or reduce significant threats to an acceptable level. 


This part of the Code includes the explicit rules that must be followed by every 


member.' Because the rules of conduct are enforceable, they are stated in more Rules or Conduct 
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Interpretations of 
Rules of Conduct 


of Conduct 
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Applicability of the Rules 


FIGURE 4-3 Standards of Conduct 


Ideal conduct 
by practitioners 


Principles 


Rules of 
conduct 


Minimum level 
of conduct 


_ Substandard 
by practitioners 


conduct 


precise language than the section on principles. Because of their enforceability, many 
practitioners refer to the rules as the AICPA Code of Professional Conduct. 

The difference between the standards of conduct set by the principles and those set 
by the rules of conduct is shown in Figure 4-3. When practitioners conduct themselves 
at the minimum level in Figure 4-3, this does not imply unsatisfactory conduct. The 
profession has presumably set the standards sufficiently high to make the minimum 
conduct satisfactory. 

At what level do practitioners conduct themselves in practice? As in any profes- 
sion, the level varies among practitioners. Most practitioners conduct themselves at a 
high level. Unfortunately, a few conduct themselves below the minimum level set by 
the profession. The activities designed to encourage CPAs to conduct themselves at a 
high level, described in Figure 4-2 (p. 108), help minimize any substandard practice. 


The need for interpretations of the rules of conduct arises when there are frequent 
questions from practitioners about a specific rule. The Professional Ethics Executive 
Committee of the AICPA prepares each interpretation based on a consensus of a com- 
mittee made up principally of public accounting practitioners. Before interpretations 
are finalized, they are issued as exposure drafts to the profession and others for com- 
ment. Interpretations provide guidelines about the scope and application of the rules, 
and members must justify any departure in a disciplinary hearing. The most impor- 
tant interpretations are discussed as a part of each section of the rules. 


While most rules apply to members in business, requirements such as independence 
do not. The rules for members in public practice apply to attestation services and, 
unless stated otherwise, apply to all services provided by CPA firms such as taxes and 
management services. The most notable exception is the Independence Rule, which 
requires independence only when the AICPA has established independence require- 
ments through its rule-setting bodies, such as the Auditing Standards Board. The 
AICPA requires independence only for attestation engagements. For example, a CPA 
firm can perform management services for a company in which the partner owns 
stock. Of course, if the CPA firm also performs an audit, that violates the indepen- 
dence requirements for attestation services. 

It is a violation of the rules if someone does something on behalf of a member that 
is a violation if the member does it. An example is a banker who puts in a newsletter 
that Johnson and Able CPA firm has the best tax department in the state and consis- 
tently gets large refunds for its tax clients. That is likely to create false or unjustified 
expectations and is a violation of the rule on advertising. A member is also respon- 
sible for compliance with the rules by employees, partners, and shareholders. The 
remainder of this chapter highlights these rules, which are summarized in Table 4-4 
later in this chapter (p. 128). 


IESBA CODE 
OF ETHICS FOR 
PROFESSIONAL 

CONDUCT 


The International Ethics Standard Board for 
Accountants (IESBA) Code of Ethics for Professional 
Accountants is also a principles-based framework 
consisting of three parts. Part A establishes the 

five fundamental principles related to integrity, 
objectivity, professional competence and due care, 
confidentiality, and professional behavior. Part A also 
provides a conceptual framework that accountants 
can apply to identify threats to compliance with the 
fundamental principles, evaluate the significance of 
identified threats, and apply safeguards, when neces- 


and descriptions of situations where safeguards are 
not available to address threats. Part B applies to 
professional accountants in public practice while Part 
C applies to professional accountants in business. As 
you can see, the general organizational structure of 
the IESBA Code and the AICPA Code are similar. This 
is because the AICPA Professional Ethics Executive 
Committee (PEEC) has sought to align or “converge” 
the AICPA Code with the Code of Ethics for Profes- 
sional Accountants issued by the International Ethics 
Standards Board for Accountants (IESBA). 
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sary, to eliminate the threat or reduce the threat to 


an acceptable level. Parts B and C of the IESBA Code 
describe how the conceptual framework applies in 


certain situations, including examples of safeguards (www.ifac.org). 


CONCEPT CHECK 
1. What is the purpose of the Principles of Professional Conduct? Identify the six 
principles. 


2. Explain the conceptual framework for the Rules of Conduct and how it should be 
applied. 


Source: Based on International Ethics Standards Board for 
Accountants, Code of Ethics for Professional Accountants 


INDEPENDENCE RULE 


The value of auditing depends heavily on the public’s perception of the independence 
of auditors. The reason that many diverse users are willing to rely on CPA reports is 
the users’ expectation of an unbiased viewpoint. The AICPA Code of Professional Conduct 
and the IESBA Code of Ethics for Professional Conduct both define independence as con- 
sisting of two components: independence of mind and independence in appearance. 
Independence of mind reflects the auditor’s state of mind that permits the audit to be 
performed with an unbiased attitude. Independence of mind is often referred to as being 
independent in fact. Independence in appearance is the result of others’ interpreta- 
tions of this independence. If auditors are independent in fact but users believe them to 
be advocates for the client, most of the value of the audit function is lost. 

Because of the importance of auditor independence, the AICPA Independence 
Rule under the AICPA Code and related interpretations is the first rule of conduct we 
discuss. We then discuss SEC and related PCAOB independence rules, including those 
required by the Sarbanes—Oxley Act. Organizations and standards other than the 
AICPA Code that influence auditor independence are also described. 


Independence Rule A member in public practice shall be independent in the 


performance of professional services as required by standards promulgated by bodies 
designated by Council. 


CPA firms are required to be independent for certain services that they provide, 
but not for others. The last phrase in the Independence Rule, “as required by stan- 
dards promulgated by bodies designated by Council,” is a convenient way for the 
AICPA to include or exclude independence requirements for different types of ser- 
vices. For example, the Auditing Standards Board requires that auditors of historical 
financial statements be independent. The Independence Rule therefore applies to 
audits. Independence is also required for other types of attestations, such as review 
services and audits of prospective financial statements. However, a CPA firm can 
do tax returns and provide management services without being independent. The 
Independence Rule does not apply to those types of services. 
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Apply the AICPA Code rules and 
interpretations on independence 
and explain their importance. 


Financial Interests 
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Because it is impossible to address all of the possible relationships or circumstances 
in which the appearance of independence may be questioned, the AICPA Code provides 
a conceptual framework for independence that is similar to the general conceptual 
framework that was discussed earlier. There are also more interpretations for indepen- 
dence than for any of the other rules of conduct. Some of the more significant issues 
and interpretations involving independence are discussed in the following sections. 


The AICPA Code prohibits covered members from owning any stock or other direct 
investment in audit clients regardless of materiality because it is potentially damag- 
ing to actual audit independence (independence of mind), and it certainly is likely 
to affect users’ perceptions of the auditors’ independence (independence in appear- 
ance). Indirect investments, such as ownership of stock in a client’s company by an audi- 
tor’s grandparent, are also prohibited, but only if the amount is material to the auditor. 
The ownership of stock rule is more complex than it appears at first glance. A more 
detailed examination of that requirement is included to aid in understanding and to 
show the complexity of one of the rules. There are three important distinctions in the 
rules as they relate to independence and stock ownership. 


Covered Members The prohibition on direct financial interests applies to covered 
members in a position to influence an attest engagement. Covered members include 
the following: 


1. Individuals on the attest engagement team 

2. An individual in a position to influence the attest engagement, such as individu- 
als who supervise or evaluate the engagement partner 

3. A partner or manager who provides more than 10 hours of nonattest services to 
the client in a fiscal year 

4. A partner in the office of the partner responsible for the attest engagement 

The firm and its employee benefit plans 

6. An entity that can be controlled by any of the covered members listed above or 
by two or more of the covered individuals or entities operating together 


wa 


For example, a staff member in a national CPA firm could own stock in a client corpo- 
ration and not violate the Independence Rule if the staff member is not involved in the 
engagement. However, if the staff member is assigned to the engagement or becomes 
a partner in the office of the partner responsible for the attest engagement, he or she 
would have to dispose of the stock or the CPA firm would no longer be independent of 
that client. 

These independence rules also generally apply to the covered member’s immedi- 
ate family. Immediate family members are a spouse, spousal equivalent, or dependent. 
Some CPA firms do not permit any ownership by staff of a client’s stock regardless of 
which office serves the client. These firms have decided to have stricter requirements 
than the minimums set by the rules of conduct. 


Direct Versus Indirect Financial Interest The ownership of stock or other equity 
shares and debt securities by members or their immediate family is called a direct 
financial interest. For example, if either a partner in the office in which an audit is 
conducted or the partner’s spouse has a financial interest in a company, the CPA firm 
is prohibited from expressing an opinion on the financial statements of that company. 

An indirect financial interest exists when there is a close, but not a direct, 
ownership relationship between the auditor and the client. An example of an indirect 
ownership interest is the covered member’s ownership of a mutual fund that has an 
investment in a client. 


Material or Immaterial Materiality affects whether ownership is a violation of indepen- 
dence only for indirect ownership. Materiality must be considered in relation to the mem- 
ber person’s wealth and income. For example, if a covered member has a significant 
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amount of his or her personal wealth invested in a mutual fund and that fund has a large 
ownership position in a client company, a violation of the Code may exist. 


Financial Interests of Close Relatives As previously noted, the financial interests of 
immediate family members, defined as a spouse, spousal equivalent, or dependent, 
are ordinarily treated as if they were the financial interest of the covered member. 
Ownership interests of close family members, defined as a parent, sibling, or nonde- 
pendent child, do not normally impair independence unless the member knows or 
has reason to believe the ownership interest is material to the close relative or enables 
the close relative to exercise significant influence over the attest client. Similar rules 
apply to other individuals in a position to influence the audit engagement or partners 
in the audit-engagement office. Immaterial ownership interests of close family mem- 
bers do not normally impair independence. 


Several interpretations of the Independence Rule deal with specific aspects of finan- 
cial and other relationships between CPA firm personnel and clients. Some of the 
more common issues faced by members are summarized in this section. 


Normal Lending Procedures Generally, loans between a CPA firm or covered mem- 
bers and an audit client are prohibited because it is a financial relationship. There are 
several exceptions to the rule, however, including automobile loans, loans fully col- 
lateralized by cash deposits at the same financial institution, and unpaid credit card 
balances not exceeding $10,000 in total. These are permissible only if the loans are 
made under the lending institution’s normal lending terms, procedures, and require- 
ments. It is also permissible to accept a financial institution as a client, even if covered 
members of the CPA firm have existing home mortgages, other fully collateralized 
secured loans, and immaterial loans with the institution. No new loans are permitted, 
however. Both the restrictions and exceptions are reasonable ones, considering the 
trade-off between independence and the need to permit CPAs to function as business- 
people and individuals. 


Employment of Immediate and Close Family Members Imagine the potential dif- 
ficulty in maintaining independence and objectivity if the firm is asked to audit a 
client where the parent of the audit partner is chief executive officer. Independence is 
impaired if individuals on the engagement team, individuals in a position to influence 
the engagement, or partners in the office of the lead attest engagement partner have 
an immediate or close family member in a key position with the client. An individual 
is in a key position if he or she has primary responsibility for preparation of the finan- 
cial statements or significant accounting functions that support material components 
of the financial statements, or has ability to exercise influence over the contents of the 
financial statements. 


Joint Closely Held Investments with a Client Assume, for example, that a CPA owns 
stock in a nonaudit client, Jackson Company. Frank Company, which is an audit client, 
also owns stock in Jackson Company. This may be a violation of independence. A joint 
closely held investment is an investment by the member and the client that enables them 
to control the entity or property. A covered member’s independence is considered to be 
impaired if the joint closely held investment is material to the covered member. 


Director, Officer, Management, or Employee of a Company If a CPA is a member 
of the board of directors or an officer of a client company, his or her ability to make 
independent evaluations of the fair presentation of financial statements is affected. 
Even if holding one of these positions did not actually affect the auditor’s indepen- 
dence, the frequent involvement with management and the decisions it makes is likely 
to affect how statement users perceive the CPA’s independence. To eliminate this pos- 
sibility, interpretations prohibit covered members, partners, and professional staff in 
the office of the partner responsible for the attest engagement from being a director 
or officer of an audit client company. Similarly, the auditor cannot be an underwriter, 
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voting trustee, promoter, or trustee of a client’s pension fund; or act in any other 
capacity of management; or be an employee of the company. 

Independence can also be impaired when a former partner or member of the 
audit firm leaves the firm and is employed by the client in a key position, unless 
certain conditions are met. For example, the audit engagement team may need to 
modify audit procedures to reduce the risk that the former employee has knowledge 
of the audit plan, and the firm will need to evaluate whether members of the engage- 
ment team can maintain an effective level of professional skepticism when evaluating 
audit information and other representations provided by the former firm member. 
Independence can also be impaired when a member of the audit team discusses 
potential employment or receives an offer of employment from the audit client. In 
those situations, independence can be preserved if the individual promptly reports 
the offer to appropriate firm personnel and is removed from the engagement until the 
offer is accepted or rejected. 

Interpretations permit CPAs to do audits and be honorary directors or trustees for 
not-for-profit organizations, such as charitable and religious organizations, as long 
as the position is purely honorary. To illustrate, it is common for a partner of the CPA 
firm doing the audit of a city’s United Way drive to also be an honorary director, along 
with many other civic leaders. The CPA cannot vote or participate in any management 
functions. 


CPA firms offer many other services to attest clients that may potentially impair inde- 
pendence. Such activities are permissible as long as the member does not perform 
management functions or make management decisions. For example, a CPA firm may 
assist in the installation of a client’s information system as long as the client makes 
necessary management decisions about the design of the system. Subject to some 
restrictions, CPA firms may also provide internal auditing and other extended audit- 
ing services to their clients as long as management maintains responsibility for the 
direction and oversight of the internal audit function. 

The CPA firm must assess the client’s willingness and ability to perform all man- 
agement functions related to the engagement and must document the understanding 
with the client. The understanding should include a description of the services, the 
engagement objectives, any limitations on the engagement, the member’s responsi- 
bilities, and the client’s agreement to accept its responsibilities. 

Ifa CPA records transactions in the journals for the client, posts monthly totals 
to the general ledger, makes adjusting entries, and subsequently does an audit, there 
is some question as to whether the CPA can be independent in the audit role. The 
interpretations permit a CPA firm to do both bookkeeping and auditing for a private 
company audit client. The client must be responsible for authorizing all transac- 
tions, including preparation and authorization of source documents. For example, a 
member can process an attest client’s payroll using payroll records that the client has 
prepared and approved. The CPA, in making an audit of financial statements prepared 
from books and records that the CPA has maintained completely or in part, must con- 
form to auditing standards. The fact that the CPA has processed or maintained certain 
records does not eliminate the need to make sufficient audit tests. 

The AICPA independence rules require members to adhere to more restrictive 
independence rules of other regulatory bodies, such as the SEC. For example, the 
Sarbanes—Oxley Act and SEC rules prohibit auditors of public companies from pro- 
viding bookkeeping services to their public company audit clients. As a result, it is not 
permissible for an audit firm to provide bookkeeping services to a public company 
audit client under both SEC rules and the AICPA rules on independence. 


When there is a lawsuit or intent to start a lawsuit between a CPA firm and its client, 
the ability of the CPA firm and client to remain objective is questionable, and the 
threat to the auditor’s independence may not be at an acceptable level. In situations 
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where management sues a CPA firm claiming a deficiency in the previous audit, the 
CPA firm is not considered independent for the current year’s audit. Similarly, if the 
CPA firm sues management for fraudulent financial reporting or deceit, the audit firm 
is no longer independent. The CPA firm and client company or management may 
be defendants in a suit brought by a third party, such as in a securities class action. 
This litigation in itself does not affect independence. However, independence may be 
affected if cross-claims between the auditor and client are filed that have a significant 
risk of a material loss to the CPA firm or client. 

Litigation by the client related to tax or other nonaudit services for an amount that 
is immaterial, or litigation against both the client and the CPA firm by another party, 
does not usually impair independence. The key consideration in all such suits is the 
likely effect on the ability of client, management, and CPA firm personnel to remain 
objective and comment freely. 


Interpretations indicate that independence is considered impaired if billed or unbilled 
fees remain unpaid for professional services provided more than one year before the 
date of the report. Such unpaid fees are considered a loan from the auditor to the 
client and are therefore a violation of independence. Unpaid fees from a client in bank- 
ruptcy do not violate independence. 


Audit firms frequently join larger groups or associations of other firms to enhance their 
capabilities to provide professional services. When they share certain characteristics, 
such as a common brand name, common control, common business strategy, or com- 
mon quality control procedures, or they share in profits, costs, or professional resources, 
the network firm is required to be independent of audit and review clients of other net- 
work firms. For other attest clients, the covered member should apply the conceptual 
framework to assess whether the threat to independence is at an acceptable level. 


Unpaid Fees 


Network of Firms 


SARBANES-OXLEY AND RELATED INDEPENDENCE 
REQUIREMENTS 


Auditors of public companies must comply with independence requirements of the 
Sarbanes—Oxley Act, as well as requirements of the PCAOB and SEC. We review some 
of the most important of these requirements in this section. 


The SEC adopted rules strengthening auditor independence that are consistent with 
the requirements of the Sarbanes-Oxley Act. The SEC rules further restrict the 
provision of nonaudit services to audit clients, and they also include restrictions on 
employment of former audit firm employees by the client and provide for audit part- 
ner rotation to enhance independence. The PCAOB has also issued additional inde- 
pendence rules related to the provision of certain tax services. 


Nonaudit Services The Sarbanes—Oxley Act and SEC rules restrict, but do not com- 
pletely eliminate, the types of nonaudit services that can be provided to publicly held 
audit clients. The following nine services are prohibited: 


1. Bookkeeping and other accounting services 

Financial information systems design and implementation 

Appraisal or valuation services 

Actuarial services 

Internal audit outsourcing 

Management or human resource functions 

Broker, dealer, investment adviser, or investment banker services 

Legal and expert services unrelated to the audit 

Any other service that the PCAOB determines by regulation is impermissible 


Se MPNAMA WN 


Created from undip-ebooks on 2020-12-01 17:53:03. 


Understand Sarbanes—Oxley 
Act and other SEC and PCAOB 
independence requirements and 
additional factors that influence 
auditor independence. 


Sarbanes-Oxley Act 
and SEC Provisions 
Addressing Auditor 

Independence 


CPA firms are not prohibited from performing these services for private companies 
and for public companies that are not audit clients. In addition, CPA firms may still pro- 
vide other services that are not prohibited for public company audit clients. For example, 
SEC and PCAOB rules allow CPAs to provide tax services for audit clients, except for 
tax services for company executives who oversee financial reporting, and tax avoid- 
ance planning services. Nonaudit services that are not prohibited by the Sarbanes— 
Oxley Act and the SEC rules must be preapproved by the company’s audit committee. 
In addition, a CPA firm is not independent if an audit partner receives compensation 
for selling services to the client other than audit, review, and attest services. 

Companies are required to disclose in their proxy statement or annual filings with 
the SEC the total amount of audit and nonaudit fees paid to the CPA firm for the two 
most recent years. Four categories of fees must be reported: (1) audit fees, (2) audit- 
related fees, (3) tax fees, and (4) all other fees. Audit-related fees are for services such 
as comfort letters and reviews of SEC filings that can only be provided by CPA firms. 
Companies are also required to provide further breakdown of the “other fees” cat- 
egory and to provide qualitative information on the nature of the services provided. 


Audit Committees An audit committee is a selected number of members of a compa- 
ny’s board of directors whose responsibilities include helping auditors remain indepen- 
dent of management. Most audit committees are made up of three to five, or sometimes 
as many as seven, directors who are not a part of company management. In response to 
the Sarbanes-Oxley Act requirement that all members of the audit committee be inde- 
pendent, the national stock exchanges amended their listing rules to reflect the provision. 
Now, with very limited exceptions, public company audit committees should be com- 
prised solely of independent members, and companies must disclose whether or not the 
audit committee includes at least one member who is a financial expert. 

The Sarbanes—Oxley Act further requires the audit committee of a public com- 
pany to be responsible for the appointment, compensation, and oversight of the work 
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In the period immediately preceding the passage of 
the Sarbanes—Oxley Act (SOX), three of the Big 
4 firms sold or spun off their consulting practices. 
Prior to SOX, consulting and advisory services were 
the largest source of revenue for the Big 4 firms. 
However, after the dispositions of these consulting 
practices, auditing again became the major source of 
revenue for the Big 4—but not for long. In the years 
since the passage of SOX, the Big 4 firms have rebuilt 
their consulting practices. Advisory services are once 
again the largest source of revenue for the Big 4, and 
these services are growing much faster than auditing 
revenues. Although SOX restricts firms from provid- 
ing many nonaudit services to public company audit 
clients, the firms have developed new services, and 
increasingly provide services to companies that are 
not public audit clients. The rise of consulting has 
once again raised concerns by regulators. 

PCAOB Board Member Steven Harris describes four 
potential threats from the increased advisory services: 


e Distraction by the audit firm away from audit and 
its core values. As consulting revenue grows in 
importance, the audit practice may lose influence, 
and values at the core of the audit practice may 
decrease in importance. 
Use of inappropriate performance measurements. 
As advisory and consulting services grow, per- 
formance measures for partners may emphasize 


revenue growth and profitability over audit 
quality. 

Potential independence impairment. The growth 

of advisory services may result in insufficient 
monitoring of services provided to audit clients, 
and provision of allowed tax consulting services 
that could affect auditor independence. 

Rise of internal conflicts. The expanding consulting 
practice could result in conflict between audit 
and advisory services in the firm. These conflicts 
could arise because of the differing nature of 
each line of business, and because advisory 
practices are not allowed to provide many 
services to public company audit clients. 


There are currently no proposals to further 
restrict consulting and advisory services beyond the 
restriction in the Sarbanes-Oxley Act. However, 
in the European Union, recently enacted rules on 
audit firm rotation would also limit the amount of 
nonaudit fees that can be earned from public clients 
to 70 percent of the audit fee. 


Sources: |. Steven B. Harris, “The Rise of Advisory Services in 
Audit Firms,” speech given at the Practicing Law Institute |2th 
Annual Directors Institute on Corporate Governance, New 
York, NY (November 24, 2014) (www.pcaobus.org); 2. Vincent 
Huck, “EU Settles on 10 Years Mandatory Audit Rotation” 
(December 17, 2013) (www.theaccountant-online.com). 
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of the auditor. The audit committee must preapprove all audit and nonaudit services, 
and is responsible for oversight of the work of the auditor, including resolution of 
disagreements involving financial reporting between management and the auditor. 
Auditors are responsible for communicating all significant matters identified during 
the audit to the audit committee. 

For public companies, PCAOB rules require a CPA firm, before its selection as the 
company’s auditor, to describe in writing and document its discussions with the audit 
committee about all relationships between the firm and the company, including exec- 
utives in financial reporting positions, to determine whether there is any impairment 
of the CPA firm’s independence. If selected as the auditor, these communications are 
to be made at least annually. 

Collectively, these provisions increase the independence and role of the audit 
committee and enhance auditor independence by effectively making the audit com- 
mittee the client for public companies, rather than management. 


Conflicts Arising from Employment Relationships The employment of former 
audit team members with an audit client raises independence concerns. Consistent 
with the requirements of the Sarbanes—Oxley Act, the SEC added a one-year “cooling 
off” period before a member of the audit engagement team can work for the client in 
certain key management positions. This has important implications for an auditor 
working for a CPA firm who receives an employment offer from a publicly held cli- 
ent for a position as a chief executive officer, controller, chief financial officer, chief 
accounting officer, or equivalent position. The CPA firm cannot continue to audit that 
client if the auditor accepts the position and has participated in any capacity in the 
audit for one year preceding the start of the audit. This has no effect on the CPA firm’s 
ability to continue the audit if the former auditor accepts a position such as assistant 
controller or accountant without primary accounting responsibilities. 

Under SEC rules existing before the Sarbanes—Oxley Act and continuing, a CPA 
firm is not independent with respect to an audit client if a former partner, principal, 
shareholder, or professional employee of the firm accepts employment with a client if 
he or she has a continuing financial interest in the CPA firm or is in a position to influ- 
ence the CPA firm’s operations or financial policies. 


Partner Rotation As required by the Sarbanes—Oxley Act, the SEC independence 
rules require the lead and concurring audit partner to rotate off the audit engagement 
after five years. (The concurring partner is not involved with the actual performance 
of the audit and reviews the work at the completion of the audit.) Although not 
addressed in the Sarbanes—Oxley Act, the SEC requires a five-year “time-out” for the 
lead and concurring partners after rotation before they can return to that audit client. 
Additional audit partners with significant involvement on the audit must rotate after 
seven years and are subject to a two-year time-out period. 


Ownership Interests SEC rules on financial relationships take an engagement per- 
spective and prohibit ownership in audit clients by those persons who can influence 
the audit. The rules prohibit any ownership by covered persons and their immediate 
family, including (a) members of the audit engagement team, (b) those in a position 
to influence the audit engagement in the firm chain of command, (c) partners and 
managers who provide more than 10 hours of nonaudit services to the client, and (d) 
partners in the office of the partner primarily responsible for the audit engagement. 
These rules are designed to provide workable rules that still safeguard independence. 


Both management and representatives of management, such as investment bankers, 
often consult with other accountants on the application of accounting principles. 
Although consultation with other accountants is appropriate, it can lead to a loss of 
independence in certain circumstances. For example, suppose one CPA firm replaces 
the existing auditors on the strength of accounting advice offered but later finds facts 
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To promote auditor independence, The Corporations 
Act 2001 of the Commonwealth of Australia requires 
companies not to reappoint the same auditor partner 
for many years. An individual auditor may not play a 
significant role in the audit of a listed company for 
more than five out of seven successive accounting 
years. This means no audit engagement partner, 

the review auditor or a registered company auditor 
appointed as the auditor of the audited body should 
be engaged for more than five out of seven successive 
accounting years. The auditor must have at least 2 


client would have to get accustomed to the new audi- 
tor and develop a professional and arm's length working 
relationship with the auditor. There is a learning curve 
element to auditor rotation. The new auditor might 
need time to understand the workings of the client es- 
pecially if specialist knowledge is required. There might 
be a cost impact in the form of increased audit costs, 
especially if there is a need for the new auditor to travel 
or relocate to the client’s place to conduct the audit. 


Sources: CPA Australia, Rotation of auditors, CPA Australia, 


Southbank, VIC, Australia http://www.cpaaustralia.com. 
au/professional-resources/audit-and-assurance/auditor- 
independence/rotation-of-auditors; Georgia Wilkins (2014), 
Auditors must be rotated more often, experts warn Published 
in the The Sydney Morning Herald March 18, 2014, Fairfax 
Media, Sydney NSW, Australia. http://www.smh.com.au/ 
business/auditors-must-be-rotated-more-often-experts-warn- 
20140317-34y I html#ixzz3pqZD7gux; Australian Securities 
and Investment Commission (ASIC) (2007) Regulatory Guide 
187: Auditor rotation, Sydney NSW, Australia. http:// 
download.asic.gov.au/media/|241039/rg|87.pdf 


successive financial years break. However, there are 
no rules about changing audit firms. 

There are exceptions to the rules whereby compa- 
nies can apply to the Australian Securities and Invest- 
ment Commission (ASIC) to exempt auditor rotation. 
ASIC published Regulatory Guide |87:Auditor Rotation in 
2007 which explains how ASIC exercises relief power 
in modifying auditor rotation requirements. Auditor 
rotation can be avoided if the rotation requirements 
are burden to the auditor or the client or both. The 


and circumstances that require the CPA firm to change its stance. It may be difficult for 
the new CPA firm to remain independent in such a situation. Auditing standards set 
forth requirements that must be followed when a CPA firm is requested to provide a 
written or oral opinion on the application of accounting principles or the type of audit 
opinion that would be issued for a specific or hypothetical transaction of an audit cli- 
ent of another CPA firm. The purpose of the requirement is to minimize the likelihood 
of management following the practice commonly called “opinion shopping” and to 
minimize the potential threat to independence of the kind described. Primary among 
the requirements is that the consulted CPA firm should communicate with the entity’s 
existing auditors to ascertain all the available facts relevant to forming a professional 
judgment on the matters on which the firm has been requested to report. 


Can an auditor be truly independent in fact and appearance if the payment of the 
audit fees is dependent on the entity’s management? There is probably no satisfactory 
answer to this question, but it does demonstrate the difficulty of assuring that auditors 
are independent. The alternative to engagement of the CPA firm by the audit commit- 
tee and payment of audit fees by management is probably the use of either government 
or quasi-government auditors. All things considered, it is questionable whether the 
audit function would be performed better or more cheaply by the public sector. 


CONCEPT CHECK 


|. Distinguish between independence of mind and independence in appearance. Identify an 
activity that may not affect independence of mind but is likely to affect independence in 
appearance. 


2. Explain the role of the audit committee in enhancing auditor independence. 


OTHER RULES OF CONDUCT 


Although independence is critical to public confidence in CPAs, it is also impor- 
tant that auditors adhere to the other rules of conduct listed in Table 4-4 (p. 128). 
We discuss the rules and interpretations in a slightly different order than they are 
presented in the AICPA Code. We begin by discussing the rules for integrity and 
objectivity. 
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Integrity means impartiality in performing all services. The Integrity and Objectivity 
Rule is presented below: 


To illustrate the meaning of integrity and objectivity, assume the auditor believes 
that accounts receivable may not be collectible but accepts management’s opinion 
without an independent evaluation of collectibility. The auditor has subordinated his 
or her judgment and thereby lacks objectivity. Now assume a CPA is preparing the 
tax return for a client and, as a client advocate, encourages the client to take a deduc- 
tion on the return that the CPA believes is valid, but for which there is some but not 
complete support. This is not a violation of either objectivity or integrity, because it is 
acceptable for the CPA to be a client advocate in tax and management services. If the 
CPA encourages the client to take a deduction for which there is no support but has 
little chance of discovery by the IRS, a violation has occurred. That is a misrepresenta- 
tion of the facts; therefore, the CPA’s integrity has been impaired. 

Audit staff members should not subordinate their judgment to supervisors on 
the audit. Staff auditors are responsible for their own judgments documented in the 
audit files and should not change those conclusions at the request of supervisors on 
the engagement unless the staff auditor agrees with the supervisor’s conclusion. Firm 
procedures should allow assistants to document situations where they disagree with a 
conclusion involving a significant matter. 

Freedom from conflicts of interest means the absence of relationships that might 
interfere with objectivity or integrity. For example, it is inappropriate for an auditor 
who is also an attorney to represent a client in legal matters. The attorney is an advo- 
cate for the client, whereas the auditor must be impartial. 

Apparent conflicts of interest may not be a violation of the rules of conduct if the 
information is disclosed to the member's client or employer. For example, if a partner 
of a CPA firm recommends that a client have the security of its Web site evaluated by 
a technology consulting firm that is owned by the partner’s spouse, a conflict of inter- 
est may appear to exist. No violation of the Integrity and Objectivity Rule occurs if the 
partner informs the client’s management of the relationship and management pro- 
ceeds with the evaluation with that knowledge. The interpretation of the rule makes it 
clear that the independence requirements cannot be eliminated by these disclosures. 
The Integrity and Objectivity Rule also applies to members in business. For example, 
a CPA who, as an employee of an entity, makes false or misleading entries or represen- 
tations in financial statements is in violation of the rules on integrity and objectivity. 


Three Code rules relate to the auditor’s adherence with the requirements of technical 
standards. The primary purpose of the requirements is to provide support for the 
ASB, PCAOB, FASB, IASB, and other technical standards-setting bodies. The follow- 
ing are the requirements of the technical standards: 
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Compliance with Standards Rule A member who performs auditing, review, com- 
pilation, management consulting, tax, or other professional services shall comply with 
standards promulgated by bodies designated by Council. 


Accounting Principles Rule A member shall not (1) express an opinion or state affirma- 
tively that the financial statements or other financial data of any entity are presented in con- 
formity with generally accepted accounting principles or (2) state that he or she is not aware 


of any material modifications that should be made to such statements or data in order for 
them to be in conformity with generally accepted accounting principles, if such statements 
or data contain any departure from an accounting principle promulgated by bodies desig- 
nated by Council to establish such principles that has a material effect on the statements or 
data taken as a whole. If, however, the statements or data contain such a departure and the 
member can demonstrate that due to unusual circumstances the financial statements or data 
would otherwise have been misleading, the member can comply with the rule by describing 
the departure, its approximate effects, if practicable, and the reasons why compliance with 
the principle would result in a misleading statement. 


It is essential that practitioners not disclose confidential client information obtained 
in any type of engagement without the consent of the client. The specific requirements 
of the rule on confidential client information are shown in the box below. 


Confidential Client Information Rule A member in public practice shall not disclose 
any confidential client information without the specific consent of the client. 

This rule shall not be construed (1) to relieve a member of his or her professional obliga- 
tions under the Compliance with Standards Rule or the Accounting Principles Rule, (2) to 
affect in any way the member’s obligation to comply with a validly issued and enforceable 
subpoena or summons, or to prohibit a member’s compliance with applicable laws and 
government regulations, (3) to prohibit review of a member’s professional practice under 
AICPA or state CPA society or Board of Accountancy authorization, or (4) to preclude a 
member from initiating a complaint with, or responding to any inquiry made by, the profes- 
sional ethics division or trial board of the Institute or a duly constituted investigative or 
disciplinary body of a state CPA society or Board of Accountancy. 

Members of any of the bodies identified in (4) above and members involved with profes- 
sional practice reviews identified in (3) above shall not use to their own advantage or dis- 
close any member’s confidential client information that comes to their attention in carrying 
out those activities. This prohibition shall not restrict members’ exchange of information in 
connection with the investigative or disciplinary proceedings described in (4) above or the 
professional practice reviews described in (3) above. 


Need for Confidentiality During audits and most other types of engagements, prac- 
titioners obtain considerable confidential information, including officers’ salaries, 
product pricing and advertising plans, and product cost data. If auditors divulge this 
information to outsiders or to client employees who have been denied access to the 
information, their relationship with management can be seriously strained and, in 
extreme cases, the client can be harmed. The confidentiality requirement applies to all 
services provided by CPA firms, including tax and management services. 

Ordinarily, the CPA’s audit files can be made available to someone else only with 
the express permission of the client. This is the case even if a CPA sells the practice 
to another CPA firm or is willing to permit a successor auditor to examine the audit 
documentation prepared for a former client. 


Exceptions to Confidentiality As stated in the second paragraph of the Confidential 
Client Information Rule, there are four exceptions to the confidentiality requirements. 
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All four exceptions concern responsibilities that are more important than maintain- 
ing confidential relations with the client. 


1. 


Obligations related to technical standards. Suppose that three months after an 
unmodified opinion audit report was issued, the auditor discovers that the finan- 
cial statements were materially misstated. When the chief executive officer is 
confronted, he responds that even though he agrees that the financial statements 
are misstated, confidentiality prevents the CPA from informing anyone. The rule 
makes it clear that the auditor’s responsibility to discharge professional standards 
is greater than that for confidentiality. In such a case, a revised, correct audit 
report must be issued. Note, however, that the conflict seldom occurs. 

Subpoena or summons and compliance with laws and regulations. Legally, information 
is called privileged information if legal proceedings cannot require a person to 
provide the information, even if there is a subpoena. Information communicated 
by a client to an attorney or by a patient to a physician is privileged. Information ob- 
tained by a CPA from a client generally is not privileged. The second exception to the rule 
is needed to allow CPA firms to comply with laws and regulations. 

Peer review. When a CPA or CPA firm conducts a peer review of the quality 
controls of another CPA firm, it is normal practice to examine several sets of 
audit files. If the peer review is authorized by the AICPA, state CPA society, 
or state Board of Accountancy, client permission to examine the audit docu- 
mentation is not needed. Requiring permission from each client may restrict 
access of the peer reviewers and would be a time burden on all concerned. 
Naturally, the peer reviewers must keep the information obtained confiden- 
tial and cannot use the information for other purposes. Note that access to 
files for PCAOB inspections is also allowed to comply with the requirements 
of the Sarbanes—Oxley Act. 

Response to ethics division. If a practitioner is charged with inadequate technical 
performance by the AICPA Ethics Division trial board under any of the technical 
standards rules, board members are likely to want to examine audit documenta- 
tion. The fourth exception prevents a CPA firm from denying the inquirers access 
to audit documentation by saying that it is confidential information. Similarly, a 
CPA firm that observes substandard audit documentation of another CPA firm 
cannot use confidentiality as the reason for not initiating a complaint of substan- 
dard performance against the firm. 


To help CPAs maintain objectivity in conducting audits or other attestation services, 
basing fees on the outcome of engagements is prohibited. The requirements related to 
contingent fees are shown below. 
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Except as stated in the next sentence, a contingent fee is a fee established for the perfor- 
mance of any service pursuant to an arrangement in which no fee will be charged unless 
a specified finding or result is attained, or in which the amount of the fee is otherwise 
dependent upon the finding or result of such service. Solely for purposes of this rule, fees 


are not regarded as being contingent if fixed by courts or other public authorities, or, in 
tax matters, if determined based on the results of judicial proceedings or the findings of 
governmental agencies. 

A member’s fees may vary depending, for example, on the complexity of services rendered. 


To illustrate the need for a rule on contingent fees, suppose a CPA firm was per- 
mitted to charge a fee of $50,000 if an unmodified opinion was provided but only 
$25,000 if the opinion was modified. Such an agreement may tempt a practitioner to 
issue the wrong opinion and is a violation of the rule on contingent fees. 

CPA firms are permitted to charge contingent fees for nonattestation services, unless 
the CPA firm is also performing attestation services for the same client. For example, it is not 
a violation for a CPA to charge fees as an expert witness determined by the amount 
awarded to the plaintiff or to base consulting fees on a percentage of a bond issue if the 
CPA firm does not also do an audit or other attestation for the same client. 

Prohibiting contingent fees for attestation services and tax return preparation is 
important because of the importance of independence and objectivity. Because CPAs 
compete when providing other services with other professions who do not have con- 
tingent fee restrictions, it would be unfair to prohibit CPAs from providing these ser- 
vices on the same basis. When these nonattestation services are provided for a client 
receiving attestation services, the need for independence and objectivity prevails and 
the auditor is not allowed to provide the services on a contingent fee basis. 


Commissions are compensation paid for recommending or referring a third party's 
product or service to a client or recommending or referring a client’s product or service 
to a third party. Restrictions on commissions are similar to the rules on contingent 
fees. CPAs are prohibited from receiving commissions for a client who is receiving 
attestation services from the CPA firm. Commissions are permissible for other clients, 
but they must be disclosed. Referral fees for recommending or referring the services 
of another CPA are not considered commissions and are not restricted. However, any 
referral fees for CPA services must also be disclosed. 


Commissions and Referral Fees Rule A member in public practice shall not for a 
commission recommend or refer to a client any product or service, or for a commission 
recommend or refer any product or service to be supplied by a client, or receive a com- 
mission, when the member or the member’s firm also performs for that client: 


(a) an audit or review of a financial statement; or 

(b) acompilation of a financial statement when the member expects, or reasonably might 
expect, that a third party will use the financial statement and the member’s compilation 
report does not disclose a lack of independence; or 

(c) an examination of prospective financial information. 


This prohibition applies during the period in which the member is engaged to perform 
any of the services listed above and the period covered by any historical financial state- 
ments involved in such listed services. 

A member in public practice who is not prohibited by this rule from performing services 
for or receiving a commission and who is paid or expects to be paid a commission shall 
disclose that fact to any person or entity to whom the member recommends or refers a 
product or service to which the commission relates. Any member who accepts a referral 
fee for recommending or referring any service of a CPA to any person or entity or who 
pays a referral fee to obtain a client shall disclose such acceptance or payment to the client. 
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The rule for commissions and referral fees means that a CPA firm does not violate 
AICPA rules of conduct if it sells such things as real estate, securities, and entire firms on 
a commission basis if the transaction does not involve a client who is receiving attesta- 
tion services from the same CPA firm. This rule enables CPA firms to profit by provid- 
ing many services to nonattestation services clients that were previously prohibited. 

The reason for the AICPA continuing to prohibit commissions for any attestation 
service client is the need to ensure that the CPA firm is independent. This requirement 
and the reasons for it are the same as those discussed under contingent fees. 


To encourage CPAs to conduct themselves professionally, the rules also prohibit 
advertising or solicitation that is false, misleading, or deceptive. 


Solicitation consists of the various means that CPA firms use to engage new 
clients other than accepting new clients who approach the firm. Examples include 
taking prospective clients to lunch to explain the CPA’s services, offering seminars on 
current tax law changes to potential clients, and advertising on an Internet site. The 
last example is advertising, which is only one form of solicitation. 

Many CPA firms have developed sophisticated advertising for national journals 
read by businesspeople and for local newspapers. It is common for CPA firms to iden- 
tify potential clients being serviced by other CPA firms and make formal and informal 
presentations to convince management to change CPA firms. Price bidding for audits 
and other services is common and often highly competitive. Some companies now 
change auditors more often than previously to reduce audit cost. 

Is the quality of audits endangered by these activities? Although there have been 
several high-profile cases in the past involving apparent audit failures, the existing 
legal exposure of CPAs, peer review requirements, PCAOB inspections, and the poten- 
tial for interference by the SEC and government has kept audit quality high. 


The organizational structure of CPA firms was first discussed in Chapter 2. The rules 
of conduct restrict the permissible forms of organization and prohibit a member 
from practicing under a firm name that is misleading. Practitioners are allowed to 
organize in any of six forms, as long as they are permitted by state law: proprietor- 
ship, general partnership, general corporation, professional corporation (PC), limited 
liability company (LLC), or limited liability partnership (LLP). Each of these forms of 
organization was discussed in Chapter 2 (pp. 27—28). 


Non-CPAs are allowed to have ownership interests in the firm. However, CPAs 
must own a majority of the firm’s financial interests and voting rights. A CPA must 
also have ultimate responsibility for all financial statement attest, compilation, and 
other services provided by the firm that are governed by Statements on Auditing 
Standards or Statements on Standards for Accounting and Review Services. 
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A fairly recent development has been the use of alternative practice structures in 
which a firm that provides attest services is closely aligned with another public or pri- 
vate organization that performs other professional services. These alternative practice 
structures are permissible, but an AICPA Council resolution makes it clear that to pro- 
tect the public interest, CPAs remain responsible for the conduct of their attest work 
as they are in traditional practice structures. 

A CPA firm may use any name as long as it is not misleading. Most firms use the 
name of one or more of the owners. It is not unusual for a firm name to include the 
names of five or more owners. A CPA firm can use a trade name, although this is 
unusual in practice. Names such as Marshall Audit Co. or Chicago Tax Specialists are 
permissible if they are not misleading. 


Because of the special need for CPAs to conduct themselves in a professional man- 
ner, the Code has a specific rule prohibiting acts discreditable to the profession. 
Note in Table 4-4 (p. 128) that the rule on discreditable acts applies to all members, 
including members in business and other members. Although a discreditable act 
is not well defined in the rules or interpretations, some of the requirements are 
discussed below. 


Acts Discreditable Rule A member shall not commit an act discreditable to the 


profession. 


Do excessive drinking, rowdy behavior, or other acts that many people consider 
unprofessional constitute a discreditable act? Probably not. Determining what con- 
stitutes professional behavior continues to be the responsibility of each professional. 

For guidance as to what constitutes a discreditable act, the AICPA bylaws provide 
clearer guidelines than the AICPA Code. The bylaws state that membership in the 
AICPA can be terminated without a hearing for judgment of conviction for any of the 
following four crimes: (1) a crime punishable by imprisonment for more than one year; 
(2) the willful failure to file any income tax return that the CPA, as an individual tax- 
payer, is required by law to file; (3) the filing of a false or fraudulent income tax return 
on the CPA’s or client’s behalf; or (4) the willful aiding in the preparation and presenta- 
tion of a false and fraudulent income tax return of a client. Observe that three of these 
deal with income tax matters of the member or a client. 

Interpretations of the Acts Discreditable Rule identify several acts that are consid- 
ered to be discreditable. For example, it is discreditable to retain a client’s records after 
a demand is made for them or whenever a member is found to have violated any fed- 
eral, state, or local antidiscrimination laws. In addition, auditors conducting audits of 
governmental entities must comply with standards for government audits. Similarly, 
when a member accepts an engagement that involves reporting to a regulatory agency 
such as the SEC, the member must follow the additional requirements of the regula- 
tory agency. The solicitation or disclosure of Uniform CPA examination questions and 
answers without permission of the AICPA is also not permitted. 

A member in business is considered to have committed an act discreditable if by 
his or her negligence others are made or permitted or directed to make materially false 
and misleading entries in the financial statements and records of an entity; the mem- 
ber fails to correct financial statements that are materially false and misleading; or the 
member signs or permits or directs another to sign a document containing materially 
false and misleading information. Also, if a member prepares financial statements or 
related information for reporting to governmental bodies, commissions, or regula- 
tory agencies, the member should follow the requirements of such organizations in 
addition to requirements of accounting standards. 


The numbering system for the revised AICPA Code is “ET section X.XXX.XXX.” The 
single digit at the beginning of the citation identifies the part of the Code. Material 


from the preface begins with 0, and content from part 1, part 2, and part 3 begin with 
the numbers 1, 2, and 3, respectively. The next two sets of digits represent the sec- 
tion and subsection, respectively. For example, section 1.200 is the section on audi- 
tor independence, and the citation ET section 1.295.105 is section 295 on nonattest 
services under the section on independence, and 105 is the subsection on advisory 
services. When a section appears in two or more parts of the Code because it applies 
to members who are not in public practice, the same number is used. For example, 
the Acts Discreditable Rule appears in all three parts of the Code, and the citations are 
1.400.001, 2.400.001, and 3.400.001, respectively 
A summary of the rules of conduct is included in Table 4-4. 


CONCEPT CHECK 


I. Identify the circumstances under which a CPA can disclose confidential information 
without client permission. 


2. Explain the rule on contingent fees. Why is this rule necessary? 


ENFORCEMENT 
Failure to follow the rules of conduct can result in expulsion from the AICPA. This by ‘OBJECTIVE 4-8 


itself does not prevent a CPA from practicing public accounting, but it is an important ‘Describe the enforcement 
social sanction. In addition to the rules of conduct, the AICPA bylaws provide for mechanisms for CPA conduct. 
automatic suspension or expulsion from the AICPA for conviction of a crime punish- 

able by imprisonment for more than one year and for various tax-related crimes. 


The AICPA Professional Ethics Division is responsible for investigating violations of 
the Code and deciding disciplinary action. The division’s investigations result from 
information obtained primarily from complaints of practitioners or other individu- 
als, state societies of CPAs, or governmental agencies. A member can be automatically 
sanctioned without an investigation if the member has been disciplined by governmen- 
tal agencies or other organizations that have been granted the authority to regulate 
accountants, such as the SEC and PCAOB. 

There are two primary levels of disciplinary action. For less serious, and probably 
unintentional, violations, the division limits the discipline to a requirement of remedial or 
corrective action. An example is the unintentional failure to make sure that a small audit 
client included all disclosures in its financial statements, which violates the Accounting 
Principles Rule of the rules of conduct. The division is likely to require the member to 
attend a specified number of hours of continuing education courses to improve technical 
competence. The second level of disciplinary action is action before the Joint Trial Board. 
This board has authority to suspend or expel members from the AICPA for various violations 
of professional ethics. Actions taken by the board, including automatic sanctions, are 
reported in the Disciplinary Actions sections of the AICPA Web site, including the name 
and location of the person suspended or expelled and reasons for the action. 


Action by AICPA 
Professional Ethics 
Division 


Even more important than expulsion from the AICPA are the rules of conduct, similar 
to those of the AICPA, that have been enacted by the Board of Accountancy of each of 
the 50 states. Because each state grants the individual practitioner a license to practice 
as a CPA, a significant breach of a state Board of Accountancy’s code of conduct can 
result in the loss of the CPA certificate and the license to practice. Although it rarely hap- 
pens, the loss removes the practitioner from public accounting. Most states adopt the 
AICPA rules of conduct, but several have more restrictive codes. For example, some 
states have retained restrictions on advertising and other forms of solicitation. 


Action by a State Board 
of Accountancy 
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has authority to investigate and discipline registered public accounting firms and 


PCAOB Enforcement 
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100 Integrity and x In the performance of any professional service, a member 
objectivity shall maintain objectivity and integrity, shall be free of 
conflicts of interest, and shall not knowingly misrepresent 
facts or subordinate his or her judgment to others. 

200 Independence x A member in public practice shall be independent in the 
performance of professional services as required by 
standards promulgated by bodies designated by Council. 

300 General Xx A member shall comply with the following standards and 

standards with any interpretations thereof by bodies designated by 
Council: (1) undertake only those professional services that 
the member or member’s firm can reasonably expect to 
be completed with professional competence, (2) exercise 
due professional care, (3) adequately plan and supervise all 
engagements, and (4) obtain sufficient relevant data to afford 
a reasonable basis for all conclusions or recommendations. 

310 Compliance Xx A member who performs auditing, review, compilation, 

with management consulting, tax, or other professional services 

standards shall comply with standards promulgated by bodies 
designated by Council. 

320 Accounting Xx A member shall follow the professional audit reporting 

principles standards promulgated by bodies designated by Council in 
issuing reports about entities’ compliance with generally 
accepted accounting principles. 

400 Acts xX A member shall not commit an act discreditable to the 

discreditable profession. 

510 Contingent fees x A member in public practice shall not perform for a contingent 
fee any professional service if the member also performs 
for the client an audit, review, or certain compilations of 
financial statements, or an examination of prospective 
financial statements. A member in public practice shall also 
not prepare an original or amended tax return or claim for a 
tax refund for a contingent fee for any client. 

; 520 Commissions x A member in public practice shall not receive or pay a 

8 and referral commission or referral fee for any client if the member 

3 fees also performs for the client an audit, review, or certain 

a compilations of financial statements, or an examination 

c=) of prospective financial statements. For nonprohibited 

z commissions or referral fees, a member must disclose the 

gz existence of such fees to the client. 

E 

= 600 Advertising and Xx A member in public practice shall not seek to obtain clients by 

3 other forms of advertising or other forms of solicitation in a manner that 

3 solicitation is false, misleading, or deceptive. Solicitation by the use of 

5 coercion, overreaching, or harassing conduct is prohibited. 

on 

® 700 Confidential x A member in public practice shall not disclose any confidential 

S client client information without the specific consent of the client, 

a information except for the four specific situations included in the rule. 

S 800 Form of x A member may practice public accounting only in a form of 

a organization organization permitted by state law or regulation whose 

7 and name characteristics conform to resolutions of Council and shall not 
practice public accounting under a firm name that is misleading. 
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persons associated with those firms for noncompliance with the Sarbanes—Oxley 
Act of 2002, as well as the rules of the PCAOB and the Securities and Exchange 
Commission governing the audits of public companies. When violations are found, 
the PCAOB can impose appropriate sanctions, including suspension or revocation 
of a firm’s registration, suspension or barring of an individual from associating with 
a registered public accounting firm, and monetary penalties. The PCAOB may also 
require improvements in the firm’s quality control, additional training, or other 
remedial measures. 


SUMMARY 


The demand for audit and other assurance services provided by CPA firms depends on 
public confidence in the profession. This chapter discussed the role of ethics in society 
and the unique ethical responsibilities of CPAs. 

The professional activities of CPAs are governed by the AICPA Code of Professional Con- 
duct, and auditors of public companies are also subject to oversight by the PCAOB and SEC. 
Foremost of all ethical responsibilities of CPAs is the need for independence. The rules of 
conduct and interpretations provide guidance on permissible financial and other interests 
to help CPAs maintain independence. Other rules of conduct are also designed to maintain 
public confidence in the profession. The ethical responsibilities of CPAs are enforced by 
the AICPA for members and by state boards of accountancy for licensed CPAs. 


ESSENTIAL TERMS 


Independence of mind—the auditor's 
state of mind that enables an unbiased view- 


Audit committee—selected members of 
a client’s board of directors whose respon- 
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sibilities include helping auditors to remain 
independent of management 


Confidential client information—client 
information that may not be disclosed 
without the specific consent of the client 
except under authoritative professional or 
legal investigation 


Direct financial interest—the owner- 
ship of stock or other equity shares by 
members or their immediate family 


Ethical dilemma—a situation in which a 
decision must be made about the appropri- 
ate behavior 


Ethics—a set of moral principles or values 


Independence in  appearance—the 
auditor’s ability to maintain an unbiased 
viewpoint in the eyes of others 


point in the performance of professional 
services; also described as “independent in 
fact” 


Independent in fact—see “independence 
of mind” 


Indirect financial interest—a close, but 
not direct, ownership relationship between 
the auditor and the client; an example is the 
ownership of stock by a member’s grand- 
parent 


Privileged information—client informa- 
tion that the professional cannot be legally 
required to provide; information that an 
accountant obtains from a client is confi- 
dential but not privileged 


REVIEW QUESTIONS 


4-1 (OBJECTIVE 4-1) What are the six core ethical values described by the Josephson 
Institute? What are some other sources of ethical values? 


4-2 (OBJECTIVE 4-2) List a six-step approach that is intended to be a relatively simple approach 


to resolving ethical dilemmas. 


4-3 (OBJECTIVE 4-3) Identify some of the most important ways that the profession and 
society encourage CPAs to conduct themselves at a high level. 
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4-4 (OBJECTIVE 4-4) How are the primary contents of the AICPA Code of Professional Conduct 
applicable to members in business or public practice different from those who do not practice 
at either places? 


4-5 (OBJECTIVE 4-4) What organization is responsible for developing ethics standards at the 
international level? What are the fundamental principles of the international ethics standards? 


4-6 (OBJECTIVE 4-5) Why is an auditor’s independence so essential? 


4-7 (OBJECTIVE 4-5) Explain how the rules concerning stock ownership apply to partners and 
professional staff. Give an example of when stock ownership would be prohibited for each. 


4-8 (OBJECTIVE 4-6) What consulting or nonaudit services are prohibited for auditors of 
public companies? What other restrictions and requirements apply to auditors when pro- 
viding nonaudit services to public companies? 

4-9 (OBJECTIVE 4-6) Many people believe that a CPA cannot be truly independent when 
payment of fees is dependent on the management of the client. Explain two approaches 
that could reduce this appearance of lack of independence. 

4-10 (OBJECTIVE 4-7) Why are accountants identified as highly regarded professionals in 
society? 

4-11 (OBJECTIVE 4-7) Assume that an auditor makes an agreement with a client that the audit 
fee will be contingent upon the number of days required to complete the engagement. Is 
this a violation of the AICPA Code of Professional Conduct? What is the essence of the rule of 
professional conduct dealing with contingent fees, and what are the reasons for the rule? 
4-12 (OBJECTIVE 4-7) Identify and explain factors that should keep the quality of audits high 
even though advertising and competitive bidding are allowed. 

4-13 (OBJECTIVE 4-7) Identify two examples of acts or behavior by CPAs that would be con- 
sidered acts discreditable to the profession. 

4-14 (OBJECTIVE 4-7) Generally CPAs are prohibited from receiving commissions from the 
client seeking attestation services. Provide instances where AICPA exempts their members 
from the above rule. 


4-15 (OBJECTIVE 4-7) State the allowable forms of organization a CPA firm may assume. 


4-16 (OBJECTIVE 4-8) What types of disciplinary action may be taken if a member has vio- 
lated the AICPA Code of Professional Conduct? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


4-17 (OBJECTIVES 4-5, 4-6) The following questions concern auditor independence. Choose 
the best response. 


a. What is the meaning of the rule that requires the auditor be independent? 
(1) The auditor must be without bias with respect to the client under audit. 
) The auditor must adopt a critical attitude during the audit. 
) The auditor’s sole obligation is to third parties. 
4) The auditor may have a direct ownership interest in the client’s business if it is 
not material. 


Ww 


b. Which of the following services can be offered to public company audit clients under 
SEC requirements and the Sarbanes—Oxley Act? 
(1) Tax services for executives involved in financial reporting 
(2) Internal audit outsourcing 
(3) Tax planning not involving tax shelters 
(4) Bookkeeping and other accounting services 


c. Anauditor strives to achieve independence in appearance to 
(1) comply with auditing standards related to audit performance. 
(2) become independent in fact. 
(3) maintain public confidence in the profession. 
(4) maintain an unbiased mental attitude. 
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4-18 (OBJECTIVE 4-7) The following questions concern possible violations of the AICPA 
Code of Professional Conduct. Choose the best response. 


a. In which one of the following situations would a CPA be in violation of the AICPA 

Code of Professional Conduct in determining the audit fee? 

(1) A fee based on whether the CPA’s report on the client’s financial statements 
results in the approval of a bank loan. 

(2) A fee based on the outcome of a bankruptcy proceeding. 

(3) A fee based on the nature of the service rendered and the CPA’s expertise instead 
of the actual time spent on the engagement. 

(4) A fee based on the fee charged by the prior auditor. 


b. The AICPA Code of Professional Conduct states that a CPA shall not disclose any 
confidential client information obtained in the course of a professional engagement 
except with the consent of the client. In which one of the following situations would 
disclosure by a CPA be in violation of the Code? 

(1) Disclosing confidential information to another accountant interested in pur- 
chasing the CPA’s practice. 

(2) Disclosing confidential information in compliance with a subpoena issued by a 
court. 

(3) Disclosing confidential information in order to properly discharge the CPA’s 
responsibilities in accordance with the profession’s standards. 

(4) Disclosing confidential information during an AICPA-authorized peer review. 


c. A CPA’s retention of client records as a means of enforcing payment of an overdue 
audit fee is an action that is 
(1) not addressed by the AICPA Code of Professional Conduct. 
(2) acceptable if sanctioned by the state laws. 
(3) prohibited under the AICPA rules of conduct. 
(4) a violation of generally accepted auditing standards. 
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DISCUSSION QUESTIONS AND PROBLEMS 


Ge. 4-19 (opjectives 4-1, 4-2) Newspaper headlines frequently highlight instances where 
business professionals, politicians, and others are accused of engaging in unethical 
behavior. In response, there have been numerous attempts to reduce their occur- 
rence. For example, some have argued for universities to include more courses in 
ethics. 


Required a. Describe what constitutes “ethics” and highlight the challenges of developing a set of 
rules and guidance to increase ethical behavior in society. 


b. Why is ethics important to the conduct of business in a market-based economy? 


a 


. Why do individuals act unethically? 


d. What are common rationalizations individuals use to justify their unethical 
behavior? 


e. Discuss whether ethics should be taught, for example, in university courses. 


4-20 (OBJECTIVES 4-5, 4-6) The following instances are situations that an auditor might have 
to face in real life. Indicate with an explanation if necessary whether the situations below 
are the violations of AICPA rules. 
a. Providing bookkeeping services to a small private company. The company happens 
to the client of your sister’s audit firm. 
b. Acting as an internal auditor of a private company. Another CPA firm acts as their 
external auditors 
c. Recommending a tax mitigation scheme to your client. 
d. Putting up a banner saying that your firm guarantees a savings of 30% in tax liabilities 
for any potential clients. 
e. Implementing an Enterprise Resource Planning (ERP) system for your audit client. 
f. Your audit junior flirts with the accounting manager of your client in a sexual 
manner, 
g. Your audit junior found out that your client is losing money. He tells his mom to sell 
of the shares of the company. 


4-21 (OBJECTIVES 4-5, 4-7) Each of the following situations involves a possible violation of 
the AICPA Code of Professional Conduct. For each situation, state the applicable rule of 
conduct and whether it is a violation. 


a. Sean Xi Lin, CPA, provides tax compliance services, secretarial services, and book- 
keeping services and also conducts audits for the same private company. 

b. Debbie Lakmaya, CPA, sells life insurance to the accounting staff of her client. 

c. A university professor publishes case studies on auditing based actual cases of his 
audit clients when he was working as an auditor in a CPA firm. The former clients are 
not in the know of this professor’s actions. 


ARaritich SshitEsAGIDET ENGoRR@FESE|Aidtation Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
0-12-01 17:53:03. 


d. Magdelene Gomez used to work as an analyst at a CPA firm. 10 years ago she was one 
of the accountants involved in the preparation of Double U’s prospectus. She left the 
firm a year later and became a housewife. She was not in communication with her 
former colleagues since her marriage. Her millionaire recently husband died and left 
her ten million dollars. She bought herself stock in Double U. 


e. Hammer Saplow, CPA, is a naturalist. He enjoys having his photos taken in the 
nude and loves posting his nude photos on the web. Recently a member of the 
audit committee of his client saw the photos and demanded the resignation of 
Mr. Saplow. 


f. Aaron Baik CPA was asked to reclassify private expenses of the managing director of 
his client as business expenses. Mr. Baik objected at the start but did the classification 
as the managing director threatened to remove Mr. Baik from future tax advisory 
roles in his company. 


g. Helen Hong CPA works as the finance director in charge of African operations 
of an American charity. Due to the lack of trained staff in her African offices, the 
financial statements of a few subsidiaries were badly prepared and not following the 
International Financial Reporting Standards. Due to lack of time, Helen went on with 
the consolidation of the financial statements. 


h. Jojo Gong CPA prepares the financial statements for Guns Limited. Guns Limited is a 
front for an international terrorist organization SPECTACLE. 


4-22 (OBJECTIVES 4-5, 4-7) Each of the following situations involves possible violations of 
the AICPA Code of Professional Conduct. For each situation, state whether it is a violation of 
the Code. In those cases in which it is a violation, explain the nature of the violation and 
the rationale for the existing rule. 


a. The audit firm of Miller and Yancy, CPAs, has joined an association of other CPA 
firms across the country to enhance the types of professional services the firm can 
provide. Miller and Yancy share resources with other firms in the association, includ- 
ing audit methodologies, audit manuals, and common IT systems for billing and time 
reporting. One of the partners in Miller and Yancy has a direct financial interest in 
the audit client of another firm in the association. 


b. Connor Bradley is the partner in charge of the audit of Southern Pinnacle Bank. 
Bradley is in the process of purchasing a beach condo and has obtained mortgage 
financing from Southern Pinnacle. 


c. Jennifer Crowe’s audit client has a material investment in Polex, Inc. Crowe’s nonde- 
pendent parents also own shares in Polex, and Polex is not an attest client of Crowe’s 
firm. The amount of her parent’s ownership in Polex is not significant to Crowe's 
net worth. 


d. Joe Stokely is a former partner in Bass and Sims, CPAs. Recently, he left the firm 
to become the chief operating officer of Lacy Foods, Inc., which is an audit cli- 
ent of Bass and Sims. In his new role, Stokely has no responsibilities for finan- 
cial reporting. Bass and Sims made significant changes to the audit plan for the 
upcoming audit. 

e. Odonnel Incorporated has struggled financially and has been unable to pay the audit 
fee to its auditor, Seale and Seale, CPAs, for the 2014 and 2015 audits. Seale and Seale 
is currently planning the 2016 audit. 
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f. Jessica Alma has been serving as the senior auditor on the audit of Carolina BioHealth, 
Inc. Because of her outstanding work, the head of internal audit at Carolina BioHealth 
extended her an offer of employment to join the internal audit department as an audit 
manager. When the discussions with Carolina BioHealth began, Jessica informed her 
office’s managing partner and was removed from the audit engagement. 


g. Morris and Williams, a regional CPA firm, is providing information systems consult- 
ing to one of their publicly traded audit clients. They are assisting in the implementa- 
tion of a new financial reporting system selected by management. 


h. Audrey Glover is a financial analyst in the financial reporting department of 
Technologies International, a privately held corporation. Audrey was asked to prepare 
several journal entries for Technologies International related to transactions that have 
not yet occurred. The entries are reflected in financial statements that the company 
recently provided to the bank in connection with a loan outstanding due to the bank. 


i. Austin and Houston, CPAs, is performing consulting services to help management of 
McAlister Global Services streamline its production operations. Austin and Houston 
structured the fee for this engagement to be a fixed percentage of costs savings that 
result once the new processes are implemented. Austin and Houston perform no 
other services for McAlister Global. 


© @.. 4-23 (OBjEcTIVE 4-5) Marie Janes encounters the following situations in doing the audit of a 
large auto dealership. Janes is not a partner. 


1. The sales manager tells her that there is a sale (at a substantial discount) on new cars 
that is limited to long-established customers of the dealership. Because her firm 
has been doing the audit for several years, the sales manager has decided that Janes 
should also be eligible for the discount. 

2. The auto dealership has an executive lunchroom that is available free to employees 
above a certain level. The controller informs Janes that she can also eat there any time. 

3. Janes is invited to and attends the company’s annual holiday party. When presents 
are handed out, she is surprised to find her name included. The present has a value of 
approximately $200. 


Required Use the three-step process in the AICPA conceptual framework to assess whether Janes’ 
independence has been impaired. 


a. Describe how each of the situations might threaten Janes’ independence from the 
auto dealership. 

b. Identify a safeguard that Janes’ firm could impose that would eliminate or mitigate 
the threat of each situation to Janes’ independence. 

c. Assuming no safeguards are in place and Janes accepts the offer or gift in each situa- 
tion, discuss whether she has violated the rules of conduct. 

d. Discuss what Janes should do in each situation. 


4-24 (OBJECTIVE 4-6) The U.S. national stock exchanges require listed companies to have an 
independent audit committee. 


Required . Describe what an audit committee is and the composition of such committees. 

. Is it necessary for any company to have an accountant in their audit committee? 

. Outline the job description of an audit committee under the Sarbanes—Oxley Act. 

. Jonathan was an audit manager at Chan, Mariam and Chan who involved in the statu- 
tory audit of Blank Cassettes Inc, a listed technology company on the New York Stock 
Exchange. He applied to join to Blank Cassettes Inc as the Finance Director in charge 
of general accounting. Should Blank Cassettes Inc consider Jonathan’s job application? 

e. Michelle was the audit manager at Goligal Associates who happens to be the exter- 

nal auditor of Desire Records Inc. Michelle fell in love with the youngest son of the 
founder of Desire Records Inc. The founder is a large single shareholder holding 
30% of the company stock. After the wedding, Michelle’s father-in-law suggested 
that Michelle become the chief financial officer of the company. What is the legal 
implication of Goligal Associates if they continue to service Desire Records Inc.? 


anaes 
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4-25 (OBJECTIVES 4-5, 4-6) The following relate to auditors’ independence: 


a. Why is independence so essential for auditors? Required 

b. Compare the importance of independence of CPAs with that of other professionals, 
such as attorneys. 

c. Explain the difference between independence in appearance and independence of 
mind. 

d. Assume that a partner of a CPA firm owns two shares of stock of a large audit client 
on which he serves as the engagement partner. The ownership is an insignificant part 
of his total wealth. 

(1) Has he violated the AICPA Code of Professional Conduct? 

(2) Explain whether the ownership is likely to affect the partner’s independence 
of mind. 

(3) Explain the reason for the strict requirements about stock ownership in the rules 
of conduct. 

e. Discuss how each of the following could affect independence of mind and indepen- 
dence in appearance, and evaluate the social consequence of prohibiting auditors 
from doing each one: 

(1) Owning stock in a client company. 

(2) Having bookkeeping services for an audit client performed by the same person 

who does the audit. 

3) Having a spouse who is the chief financial officer of a client company. 

4) Having the annual audit performed by the same CPA firm for 10 years in a row. 

5) Having management select the CPA firm. 

6) Recommending adjusting entries to the client’s financial statements and 

preparing financial statements, including footnotes, for the client. 

(7) Providing valuation services on complex financial instruments for an audit 
client performed by individuals in a department that is separate from the audit 
department. 

f. Which of (1) through (7) are prohibited by the AICPA Code of Professional Conduct? 
Which are prohibited by the Sarbanes—Oxley Act or the SEC? 


4-26 (OBJECTIVES 4-5, 4-7) The following questions relate to the AICPA Code of ami 
Professional Conduct, which can be viewed online or downloaded in pdf format at (MHD 
Wwww.aicpa.org: ies 
a. When should a member apply the conceptual framework for members in public Required 
practice? Which rule or rules have their own conceptual framework? 
b. Covered members are not allowed to have a direct financial interest in a client. What 
should covered members do if they become aware they are to receive an unsolicited 
financial interest in an attest client as a result of a bequest? Be sure to note where you 
can find the applicable guidance in the Code. 
c. The Accounting Principles Rule indicates that members can justify a departure from 
generally accepted accounting principles only in unusual circumstances. What are 
examples of unusual circumstances discussed in the Code? 
d. The AICPA provides for a number of specialist designations. How should a member 
use the designation? When may a firm include a specialty designation on firm letter- 
head? Where would you find the applicable guidance in the Code? 


CASES 


4-27 (OBJECTIVES 4-5, 4-7) The following are situations that may violate the Code of Professional 
Conduct. Assume, in each case, that the CPA is a partner. 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


1. Jasmine, CPA, has set up a small financial services company that specializes in 401Ks 
and health plans for small businesses. However, Jasmine takes her CPA work with her 
when she is at the financial services company and has two other CPAs helping her 
with the financial company. 
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2. Elmyra, CPA, advertises her practice online, citing several prominent clients she has 
worked with. She has provided links to their Web sites and included quotes from her 
happy clients. 

3. Upon reviewing a new client’s financial statements, Rukan, CPA, approaches the 
company’s president. He noticed that several of the company’s checks have been 
canceled and then rewritten at a later date, but there are two cashed checks for 
the same amount of money. The company’s bookkeeper quit two months prior to 
the audit. 


4. Samir, CPA, is hired to do the audit of Al-Sharif Transportation Co. Samir owns a 
substantial limited partnership interest in a construction company. Zubair Al-Sharif 
is a 100% owner in Al-Sharif Transportation Co. Al-Sharif also owns a substantial 
limited partnership in the same construction company as Samir. 

5. After the auditor of a construction company suddenly quit, Basil, CPA, was hired 
to do the accounting for the company. The audits are due within two weeks, and 
there are several discrepancies between bank statements and the general ledger. 
He spoke to his supervisor, who told him to reconcile the two books as quickly as 
possible. 

6. Jamal, CPA, works for Gilgamesh Practices. As part of his job, he is in charge of the 
audit, tax return, bookkeeping, and management services work for the Uthman 
Decorating Company. Makin Uthman relies on Jamal’s advice before making any 
business decisions that could significantly affect the taxes or financial statements 
of his company. Jamal also attends all meetings of the company’s board of directors. 
Because he doesn’t know too much about the industry, Jamal attends some profes- 
sional development courses in interior decorating. Recently, it was announced that 
Uthman’s vice president will be retiring soon, and Uthman has hinted that he would 
like Jamal to join his company with a higher pay than he is currently receiving at 
Gilgamesh. 


Required Discuss whether the facts in any of the situations indicate violations of the AICPA Code of 
Professional Conduct. If so, identify the nature of the violation(s). 


4-28 (OBJECTIVES 4-2, 4-7) Barbara Whitley had great expectations about her future as she 
sat in her graduation ceremony in May 2015. She was about to receive her Master of 
Accounting degree, and next week she would begin her career on the audit staff of Green, 
Thresher & Co., CPAs. 

Things looked a little different to Barbara in February 2016. She was working on the 
audit of Delancey Fabrics, a textile manufacturer with a calendar year-end. The pressure 
was enormous. Everyone on the audit team was putting in 70-hour weeks, and it still 
looked as if the audit wouldn’t be done on time. Barbara was doing work in the prop- 
erty area, vouching additions for the year. The audit program indicated that a sample 
of all items over $20,000 should be selected, plus a judgmental sample of smaller items. 
When Barbara went to take the sample, Jack Bean, the senior, had left the client’s office 
and couldn’t answer her questions about the appropriate size of the judgmental sample. 
Barbara forged ahead with her own judgment and selected 50 smaller items. Her basis for 
doing this was that there were about 250 such items, so 50 was a reasonably good propor- 
tion of such additions. 

Barbara audited the additions with the following results: The items over $20,000 
contained no misstatements; however, the 50 small items contained a large number of 
misstatements. In fact, when Barbara projected them to all such additions, the amount 
seemed quite significant. 

A couple of days later, Jack Bean returned to the client’s office. Barbara brought her work 
to Jack in order to apprise him of the problems she found and got the following response: 


“Gosh, Barbara, why did you do this? You were only supposed to look at the items over 
$20,000 plus 5 or 10 little ones. You’ve wasted a whole day on that work, and we can’t 
afford to spend any more time on it. I want you to throw away the schedules where you 
tested the last 40 small items and forget you ever did them.” 
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When Barbara asked about the possible audit adjustment regarding the small items, none 
of which arose from the first 10 items, Jack responded, “Don’t worry, it’s not material any- 
way. You just forget it; it’s my concern, not yours.” 


a. In what way is this an ethical dilemma for Barbara? 
b. Use the six-step approach discussed in this chapter to resolve the ethical dilemma. 


4-29 (OBJECTIVE 4-2) Robert Chin migrated to the United States of America from Malaysia 
after completing his accounting bachelor’s degree from a university in New Orleans. He 
works at Heritage Storage Devices Inc. as the finance director in charge of operation in 
South East Asia. Robert was attracted to work at Heritage as his father and his brothers 
had worked in the company’s factory in his hometown of Bagan. 

There were many complaints from customers in China about the hard discs manufac- 
tured from the Bagan plant. In fact one client, a computer server maker Koko Company 
complained of the constant need for their engineers to inspect the hard discs coming from 
the Bagan plant and to return the hard disc for rework. There was one instance whereby 
Koko had to reject the whole shipment of hard discs and due to a very tight manufacturing 
schedule at their plant, Koko insisted that Heritage replace the hard discs with output from 
their Sibu plant. 

Robert was asked to investigate the many complaints coming from the Bagan plant 
and to make suggestions to remedy the situation. Robert found that the most of the prob- 
lems came from the reporting of contamination cases in the Bagan plant. The engineering 
department had deliberately understated the rework cases by randomly filing rework 
cases in the Enterprise Resource Planning (ERP). Many cases were left unrecorded. Reject 
and End of Life items that were supposed to be scrapped were recorded as good inventory 
in the system. 

The records of the finished goods store are in total disarray. The recording of the 
movement of inventory from the store to the factory floor is haphazard. The manager of 
the procurement section— which includes store management-is Robert’s younger brother. 

To make things worse, the internal audit was not aware of the reject as the manager in 
charge of the department was a fresh graduate and had little working experience dealing 
with engineering issues. 

Robert’s colleagues in the United States have long complained about the budgets 
submitted by the Bagan plant. They were of the opinion that the budgets were overblown 
and the estimates of scrap levels grossly understated. One colleague suggested that since 
Bagan was operating at an inefficient manner, the Bagan plant should be closed and all 
work transferred to the other plant in Sibu. 

Knowing that the outcome of his investigation would result in the closure of the 
Bagan plant, Robert was thinking of downplaying the impact of the customer rejects on 
the profits of the Bagan operation by classifying the rejects and end of life inventory as 
work-in-progress instead of impairing the goods. The closure of the Bagan plant will result 
in job losses in his hometown. Even his family would not be spared. 


Use the six-step approach discussed in this chapter to resolve the ethical dilemma. 
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LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 
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Understand the litigious 
environment in which CPAs 
practice. 

Explain why the failure of 
financial statement users to 
differentiate among business 
failure, audit failure, and audit 
risk has resulted in lawsuits. 
Use the primary legal 

concepts and terms 
concerning accountants’ 
liability as a basis for study- 

ing legal liability of auditors. 
Describe accountants’ liability 
to clients and related defenses. 
Describe accountants’ liability 
to third parties under common 
law and related defenses. 
Describe accountants’ civil 
liability under the federal 
securities laws and related 
defenses. 

Specify what constitutes 
criminal liability for accountants. 
Describe how the profession 
and individual CPAs can reduce 
the threat of litigation. 
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LEGAL LIABILITY 


The Good, the Bad, and the Needy 


The charity trust Bill and Melinda Gates Foundation is suing both the energy company Petrdleo 
Brasileiro SA (Petrobras) and its auditor PricewaterhouseCoopers LLP of Brazil (PwC) for the 
losses of tens of millions of dollars incurred by the charity due to plummeting values of their in- 
vestment in the energy company. The shares dropped in response to the corruption scandal sur- 
rounding the energy company. The trust held more than $27 million in Petrobras shares in 2013. 


The charity trust are among 
investors who are expanding 
their lawsuit against the energy 
company by adding claims that 
auditor PwC turned a “blind 
eye” to the fraud and ‘wilfully 
ignored’ fraud when auditing 
the company. PwC was taken 
to task because the auditors 
had certified the integrity of 
Petrobras’ internal controls 
and financial reports. 


The scandal centred on a kick- 
back scheme in Brazil also had 
a minister, state governors, senators and congressmen associated with it. The beneficiaries are 
alleged to have received a percentage of the value of contracts signed with Petrobras as consid- 
eration for supporting the government in a congressional voting. 


The scandal has so far caused the energy company to lose at least $2 billion. 


Petrobras impaired $17 billion due to losses because of corruption and inflated contracts. The 
company is planning to sell $58 billion in assets from 2015 to 2018 to raise cash to pay off their 
debts. Moody’s Investors Service and Standard & Poor’s Ratings Services have since down- 
graded Petrobras debt to junk. 


Clearly, the losses in the stock market have affected the earnings of the charity foundation. 
If the auditors were more vigilant with their work, millions of dollars could have be saved by 
the charity and the money could be channelled for doing good deeds. The charity uses their 
earning among others to fund programs that help in eradication of hunger, poverty, diseases 
such HIV, malaria, polio, TB and rabies, and education programs in the US and many developing 
countries. 


Source: |. J.P. (2014) The Petrobras affair Published on Sep 8th 2014 on Economist Online, 
London, UK http://www.economist.com/blogs/americasview/20 | 4/09/scandal-brazil; 2. Patricia 
Hurtado (2015) Petrobras Investors Claim PwC Ignored Red Flags of Fraud, BloombergBusiness, 
NY _ http://www.bloomberg.com/news/articles/20 | 5-03-30/petrobas-investors-add-new-claims-in- 
lawsuit-claiming-kickbacks; 3. Will Connors (2015) Bill and Melinda Gates Foundation Trust Sues 
Petrobras, Auditor for Fraud, Published on 27 September 2015 on Wall Street Journal, NY, 
USA http://www.wsj.com/articles/bill-and-melinda-gates-foundation-sues-petrobras-auditor-for- 
fraud- 1443210502 
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As the auditors learned the hard way, legal liability and its consequences are significant. Although firms have 
insurance to help alleviate the impact of assessed damages, the premiums are high and the policies available to the 
firms require large deductibles. The amount of these deductibles is such that large firms are essentially self-insured 
for losses of many millions of dollars. 

This chapter on legal liability and the preceding one on professional ethics highlight the environment in which 
CPAs operate. These chapters provide an overview of the importance of protecting the profession’s reputation of 
high ethical standards, highlight consequences accountants face when others believe they have failed to live up to 
those standards, and show how CPAs can be held legally liable for the professional services they provide. 

In this chapter we focus on legal liability for CPAs both on a conceptual level and in terms of specific legal suits 
that have been filed against CPAs. We also discuss actions available to the profession and individual practitioners 
to minimize liability while, at the same time, maintaining high ethical and professional standards and meeting the 
needs of society. 


CHANGED LEGAL ENVIRONMENT 
Professionals have always been required to provide a reasonable level of care while ‘OBJECTIVE 5-1 


performing work for those they serve. Under common law, audit professionals have i a 
qsts “ti : : F , nderstand the litigious 
a responsibility to fulfill implied or expressed contracts with clients. Should audi- — ..yi-onment in which CPAs 
tors fail to provide the services or not exercise due care in their performance, they are _ practice. 
liable to their clients for negligence and/or breach of contract, and, in certain circum- 
stances, to parties other than their clients. 
Although the criteria for legal actions against auditors by third parties vary by state, 
the auditor generally owes a duty of care to third parties who are part of a limited group 
of persons whose reliance is “foreseen” by the auditor. In addition to common law liabil- 
ity, auditors may be held liable to third parties under statutory law. The Securities Act of 
1933, the Securities Exchange Act of 1934, and the Sarbanes—Oxley Act contain provi- 
sions that serve as a basis for legal action against auditors. In rare cases, auditors have 
even been held liable for criminal acts. A criminal conviction against an auditor can 
result when plaintiffs demonstrate that the auditor intended to deceive or harm others. 
Despite efforts by the profession to address legal liability of CPAs, both the num- 
ber of lawsuits and sizes of awards to plaintiffs remain high, including suits involving 
third parties under both common law and the federal securities acts. No simple rea- 
sons explain this trend, but the following factors are major contributors: 


* Growing awareness of the responsibilities of public accountants by users of 
financial statements 

¢ An increased consciousness on the part of the Securities and Exchange 
Commission (SEC) for its responsibility for protecting investors’ interests 

* The complexity of auditing and accounting functions caused by the increasing 
size of businesses, the globalization of business, and the complexities of busi- 
ness operations and financing transactions 

* The tendency of society to accept lawsuits by injured parties against anyone 
who might be able to provide compensation, regardless of who was at fault, 
coupled with the joint and several liability doctrine (often called the deep- 
pocket concept of liability) 

* Global recession and tough economic times resulting in business failures, which 
prompt stakeholders to seek restitution from others, including external auditors 

* Large civil court judgments against CPA firms awarded in a few cases, encour- 
aging attorneys to provide legal services on a contingent-fee basis, which offers 
the injured party a potential gain when the suit is successful, but minimal losses 
when it is not 

* Many CPA firms being willing to settle legal problems out of court in an attempt 
to avoid costly legal fees and adverse publicity, rather than pursuing resolution 
through the judicial process 
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° The difficulty judges and jurors have understanding and interpreting technical 
accounting and auditing matters 


Litigation costs for accountants are a concern because they are borne by all mem- 
bers of society. In recent years, legislative efforts have attempted to control litigation 
costs by discouraging nonmeritorious lawsuits and by bringing damages more in line 
with relative fault. Nevertheless, accountants’ liability remains burdensome and is a 
major consideration in the conduct of a CPA firm’s professional practice. 


DISTINGUISHING BUSINESS FAILURE, 
AUDIT FAILURE, AND AUDIT RISK 


‘OBJECTIVE 5-200 Many accounting and legal professionals believe that a major cause of lawsuits against 


; _ CPA firms is financial statement users’ lack of understanding of two concepts: 
Explain why the failure of financial 


statement users to differentiate 1. The difference between a business failure and an audit failure 

among business failure, audit fail- 2. The difference between an audit failure and audit risk 

ure, and audit risk has resulted in p . . . . 

Tecuite A business failure occurs when a business is unable to repay its lenders or meet 


the expectations of its investors because of economic or business conditions, such as 
a recession, poor management decisions, or unexpected competition in the industry. 
Audit failure occurs when the auditor issues an incorrect audit opinion because it 
failed to comply with the requirements of auditing standards. An example is a firm 
assigning unqualified assistants to perform certain audit tasks where they failed to 
notice material misstatements in the client’s records that a qualified auditor would 
have found. Audit risk represents the possibility that the auditor concludes after 
conducting an adequate audit that the financial statements were fairly stated when, in 
fact, they were materially misstated. Audit risk is unavoidable, because auditors gather 
evidence only ona test basis and because well-concealed frauds are extremely difficult 
to detect. An auditor may fully comply with auditing standards and still fail to uncover 
a material misstatement due to fraud. 

Accounting professionals tend to agree that in most cases, when an audit has 
failed to uncover material misstatements and the wrong type of audit opinion is 
issued, it is appropriate to question whether the auditor exercised due care in perform- 
ing the audit. In cases of audit failure, the law often allows parties who suffered losses 
to recover some or all of the losses caused by the audit failure. In practice, because of 
the complexity of auditing, it is difficult to determine when the auditor has failed to 
use due care. Also, legal precedent makes it difficult to determine who has the right 
to expect the benefit of an audit and recover losses in the event of an audit failure. 
Nevertheless, an auditor’s failure to follow due care often results in liability and, when 
appropriate, damages against the CPA firm. 

As highlighted by the lawsuit against Orange & Rankle in the opening story, dif- 
ficulties often arise when a business failure, not an audit failure, occurs. For example, 
when a company files for bankruptcy protection or cannot pay its debts, statement 
users commonly claim that an audit failure has occurred, especially when the most 
recently issued auditor’s report indicates that the financial statements were fairly 
stated. Even worse, if a business failure happens and the financial statements are 
later determined to have been misstated, users may claim the auditor was negligent 
even if the audit was conducted in accordance with auditing standards. This conflict 
between statement users and auditors often arises because of an “expectation gap” 
between users and auditors. Most auditors believe that the conduct of the audit in 
accordance with auditing standards is all that can be expected of auditors. However, 
many users believe that auditors guarantee the accuracy of financial statements, and 
some users even believe that the auditor guarantees the financial viability of the busi- 
ness. Fortunately for the profession, courts continue to support the auditor’s view. 
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BIG FOUR SUED 
FOR NOT PAYING 
OVERTIME 
COMPENSATION 


Auditors are subject to lawsuits filed by clients 

or third parties based on work performed, but 
they are also subject to lawsuits related to other 
issues, such as fair labor laws. Recently, all four of 
the largest international audit firms were named as 
defendants in class action lawsuits filed by their own 
audit associates related to overtime pay. The audit 
associates argue they should be compensated for 
the overtime hours they work as low-level employ- 
ees. The Fair Labor Standards Act (FLSA) states 
that low-level employees must be compensated for 
overtime work; however, the Act provides an exemp- 


of professional discretion in performing their duties 
and had a level of specialized knowledge sufficient to 
meet the overtime exemption requirements in FLSA. 
In a similar complaint, audit assistants and seniors at 
Deloitte allege the firm misclassified their duties as 
administrative or professional despite the duties being 
low-level. In the case against Deloitte, the assistants 
and seniors allege their duties do not require them to 
hold a CPA license, and their work is required to be 
reviewed by higher-level employees, which suggests 
the “professional” and “administrative” exemptions 
should not apply. These cases, as well as similar 


tion for executive, administrative, and professional 
employees who are compensated on a salary basis. 

In one of the class action lawsuits filed, KPMG audit 
associates claim the audit firm unlawfully misclassified 
them as administrative or professional employees, 
which meant the audit firm was not required to 
provide overtime compensation under the provi- 
sions of the FLSA. A federal court ruled in KPMG’s 
favor, claiming the audit associates exercised a level 


cases filed against PwC and EY, have implications for 
other professional service firms who do not provide 
overtime compensation, as a ruling in favor of the 
assistants could encourage additional lawsuits. 


Sources: |. Pibpins v. KPMG LLP, No. || Civ. 00377; 2. Lawrence 
Buckfire, “Deloitte Auditors Work Toward Overtime Settle- 
ment” (March 10, 2015) (overtimepaylaws.org); 3. Michael 
Cohn, “Audit Firms Slapped with Overtime Lawsuits” (January 
11, 2012) (accountingtoday.com). 


Nonetheless, the expectation gap often results in unwarranted lawsuits, which ulti- 
mately result in millions of dollars spent in defense. The profession must continue to 
educate statement users about the role of auditors and the differences among business 
failure, audit failure, and audit risk. However, auditors must recognize that, in part, 
the claims of audit failure result from the hope of those who suffer a business loss to 
recover from any source, regardless of who is at fault. 


LEGAL CONCEPTS AFFECTING LIABILITY 


A CPA is responsible for every aspect of his or her public accounting work, including 
auditing, taxes, management advisory services, and accounting and bookkeeping ser- ‘OBJECTIVE 5-3 
vices. If a CPA failed to correctly prepare and file a client’s tax return, the CPA can be 
held liable for any penalties and interest that the client was required to pay plus the tax 
preparation fee charged. In some states, the court can also assess punitive damages. 
Most of the major lawsuits against CPA firms have dealt with audited or unaudited 
financial statements. The discussion in this chapter is restricted primarily to those 
two aspects of public accounting. First, we examine several legal concepts pertinent to 
lawsuits involving CPAs. 


Use the primary legal concepts 
and terms concerning 
accountants’ liability as a basis for 
studying legal liability of auditors. 


There is agreement within the profession and the courts that the auditor is not a 
guarantor or insurer of financial statements. The auditor is expected only to conduct 
the audit with due care, and is not expected to be perfect. This standard of due care is 
often called the prudent person concept. It is expressed in Cooley on Torts as follows: 


Prudent Person Concept 


¢ Every man who offers his service to another and is employed assumes the duty 
to exercise in the employment such skill as he possesses with reasonable care 
and diligence. In all these employments where peculiar skill is prerequisite, if one 
offers his service, he is understood as holding himself out to the public as possess- 
ing the degree of skill commonly possessed by others in the same employment, 
and, if his pretensions are unfounded, he commits a species of fraud upon every 
man who employs him in reliance on his public profession. But no man, whether 
skilled or unskilled, undertakes that the task he assumes shall be performed 
successfully, and without fault or error. He undertakes for good faith and integrity, but 
not for infallibility, and he is liable to his employer for negligence, bad faith, or dis- 
honesty, but not for losses consequent upon pure errors of judgment. 
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Liability for the 
Acts of Others 


Lack of Privileged 
Communication 


Legal Terms Affecting 
CPAs’ Liability 


Sources of Legal Liability 
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Generally, the partners, or shareholders in the case of a professional corporation, are 
jointly liable for the civil actions against any owner. It is different, however, if the firm 
operates as a limited liability partnership (LLP), a limited liability company (LLOQ), a gen- 
eral corporation, or a professional corporation with limited liability. Under these busi- 
ness structures, the liability for one owner’s actions does not extend to another owner's 
personal assets, unless the other owner was directly involved in the actions of the owner 
causing the liability. Of course, the firm’s assets are all subject to the damages that arise. 

The partners may also be liable for the work of others on whom they rely under 
the laws of agency. The three groups an auditor is most likely to rely on are employees, 
other CPA firms engaged to do part of the work, and specialists called upon to provide 
technical information. If an employee performs improperly in doing an audit, the 
partners can be held liable for the employee’s performance. 


Under common law, CPAs do not have the right to withhold information from the 
courts on the grounds that the information is privileged. Confidential discussions 
between the client and auditor cannot be withheld from the courts. (See page 99 in 
Chapter 4 on how auditor’s documentation can be subpoenaed by a court.) 

Several states have statutes that permit privileged communication between the 
client and auditor. Even then, the intent at the time of the communication must have 
been for the communication to remain confidential. A CPA can refuse to testify in 
a state with privileged communications statutes. However, that privilege does not 
extend to federal courts. 


Before proceeding in the discussion of legal liability, we examine several common legal 
terms that affect CPAs’ liability. These terms are defined in Table 5-1. Take a moment 
to review these definitions. When the auditor has failed to conduct an adequate 
audit, liability may depend on the level of negligence, which can range from ordinary 
negligence to fraud. Also note the distinction between joint and several liability and 
separate and proportionate liability, because the amounts assessed will likely vary 
greatly between these two approaches when courts assess damages. Generally, these 
damage approaches only apply in cases of liability to third parties under common law 
and under the federal securities laws. When lawsuits are filed in state court, state laws 
determine which approach to damages applies. When lawsuits are brought under 
the federal securities laws, the separate and proportionate approach applies, except 
where it can be shown that the CPA defendant had actual knowledge of fraud or has 
participated in fraud, in which case joint and several liability applies. Under the federal 
statutes, the amount of damages under separate and proportionate liability can be 
increased to 150 percent of the amount determined to be proportionate to the CPA’s 
degree of fault when the main defendant is insolvent. 


The remainder of this chapter addresses the four sources of auditors’ legal liability: 

1. Liability to clients 

2. Liability to third parties under common law 

3. Civil liability under the federal securities laws 

4. Criminal liability 

Figure 5-1 (p. 144) provides examples of each of these classifications of liability. 
We examine each of these liability classifications in more detail. 


CONCEPT CHECK 
I. State several factors that have affected the incidence of lawsuits against CPAs in recent 
years. 


2. Distinguish between business failure and audit risk. Why is business failure a concern to 
auditors? 


3. Distinguish between fraud and constructive fraud. 
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TABLE 5-1 Legal Terms Affecting CPAs’ Liability 


Legal Term Description 


Terms Related to Negligence and Fraud 


Ordinary negligence Absence of reasonable care that can be expected of a person in a set of circumstances. For auditors, it is in terms 
of what other competent auditors would have done in the same situation. 


Gross negligence Lack of even slight care, tantamount to reckless behavior, that can be expected of a person. Some states do not 
distinguish between ordinary and gross negligence. 


Constructive fraud Existence of extreme or unusual negligence even though there was no intent to deceive or do harm. Constructive fraud is 
also termed recklessness. Recklessness in the case of an audit is present if the auditor knew an adequate audit was not 
done but still issued an opinion, even though there was no intention of deceiving statement users. 


Fraud Occurs when a misstatement is made and there is both the knowledge of its falsity and the intent to deceive. 


Terms Related to Contract Law 


Breach of contract Failure of one or both parties in a contract to fulfill the requirements of the contract. An example is the failure of a CPA 
firm to deliver a tax return on the agreed-upon date. Parties who have a relationship that is established by a contract 
are said to have privity of contract. 


Third-party beneficiary A third party who does not have privity of contract but is known to the contracting parties and is intended to have certain 
rights and benefits under the contract. A common example is a bank that has a large loan outstanding at the balance 
sheet date and requires an audit as a part of its loan agreement. While the contract for the audit engagement is between 
the client and the audit firm, both parties are aware the bank will be relying on the audited financial statements. 


Common law Laws that have been developed through court decisions rather than through government statutes. 


Statutory law Laws that have been passed by the U.S. Congress and other governmental units. The Securities Acts of 1933 and 1934 
and Sarbanes—Oxley Act of 2002 are important statutory laws affecting auditors. 


Joint and several liability The assessment against a defendant of the full loss suffered by a plaintiff, regardless of the extent to which other parties 
shared in the wrongdoing. For example, if management intentionally misstates financial statements, an auditor can be 
assessed the entire loss to shareholders if the company is bankrupt and management is unable to pay. 


Separate and proportionate The assessment against a defendant of that portion of the damage caused by the defendant's negligence. For example, if 
liability the courts determine that an auditor’s negligence in conducting an audit was the cause of 30% of a loss to a defendant, 
only 30% of the aggregate damage will be assessed to the CPA firm. 


LIABILITY TO CLIENTS 
The most common source of lawsuits against CPAs is from clients. The suits vary ‘OBJECTIVE 5-400 


widely, including such claims as failure to complete a nonaudit engagement on the). ae 
: . : : : : escribe accountants’ liability to 
agreed-upon date, inappropriate withdrawal from an audit, failure to discover an Gents and related defenses. 
embezzlement (theft of assets), and breach of the confidentiality requirements of 
CPAs. Typically, the amount of these lawsuits is relatively small, and they do not 
receive the publicity often given to suits involving third parties. 
A typical lawsuit brought by a client involves a claim that the auditor did not dis- 
cover an employee theft as a result of negligence in the conduct of the audit. The lawsuit 
can be for breach of contract, a tort action for negligence, or both. Tort actions are more 
common because the amounts recoverable under them are normally larger than under 
breach of contract. Tort actions can be based on ordinary negligence, gross negligence, 
or fraud. Refer to Table 5-1 for distinctions among these three levels of negligent actions. 
The principal issue in cases involving alleged negligence is usually the level of 
care required. Although it is generally agreed that no one is perfect, not even a pro- 
fessional, in most instances, any significant error or mistake in judgment creates at 
least a presumption of negligence that the professional will have to rebut. In audits, 
failure to meet auditing standards is often conclusive evidence of negligence. Let’s 
examine a typical case that raised the question of negligent performance by a CPA 
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FIGURE 5-1 Four Major Sources of Auditors’ Legal Liability 


Source of Liability Example of Potential Claim 


Liability to clients Client sues auditor for not discovering a material fraud during 
the audit. 


Liability to third parties Bank sues auditor for not discovering that a borrower’s financial 
under common law statements are materially misstated. 


Civil liability under federal Combined group of stockholders sues auditor for not discovering 
securities laws materially misstated financial statements. 


Criminal liability Federal government prosecutes auditor for knowingly issuing 
an incorrect audit report. 


firm: Cenco Incorporated v. Seidman & Seidman. The case, which is described in more 
detail in Figure 5-2, involved alleged negligence by the auditor in failing to find fraud. 
In the legal suit by Cenco’s management, the auditor was able to successfully argue 
that it was not negligent and that the previous management team’s deceitful actions 
prevented the auditor from uncovering the fraud. 

The question of level of care becomes more difficult in the environment of a review 
or a compilation of financial statements in which there are fewer accepted standards to 
evaluate performance. Figure 5-3 summarizes a widely known example of a lawsuit 
dealing with the failure to uncover fraud in unaudited financial statements. Although 
the CPA was never engaged to conduct an audit for the 1136 Tenants Corporation, the 
CPA was found liable for failing to detect an embezzlement scheme conducted by one 
of the client’s managers. One of the reasons for this outcome was the lack of a clear 
understanding between the client and the CPA as to the exact nature of the services 
to be performed by the CPA. As noted in Figure 5-3, engagement letters between the cli- 
ent and the CPA firm developed as a result of this case. Now, CPA firms and clients 
typically sign engagement letters, which are required for audits, to formalize their 
agreements about the services to be provided, fees, and timing. Privity of contract (see 
breach of contract in Table 5-1 on p. 143) can exist without a written agreement, but an 
engagement letter defines the contract more clearly. 


The CPA firm normally uses one or a combination of four defenses when there are 
legal claims by clients: lack of duty to perform the service, nonnegligent performance, 
contributory negligence, and absence of causal connection. 


Cenco Incorporated v. Seidman & Seidman (1982) — 
FIGURE 5-2 Parr : 
Liability to Clients 

Between 1970 and 1975 Cenco’s managerial employees, ultimately including top management, were involved 
in a massive fraud to inflate the value of the company’s inventory. This in turn enabled the company to 
borrow money at a lower interest rate and to obtain higher fire insurance settlements than were proper. 
After the fraud was discovered by an employee of Cenco and reported to the SEC, a class action suit was 
filed by stockholders against Cenco, its management, and its auditors. The CPA firm settled out of court on 
the class action suit by paying $3.5 million. 

By now, new management was operating Cenco. They brought a second suit against the CPA firm on 
behalf of Cenco for breach of contract, professional negligence, and fraud. The primary defense used by the 
CPA firm was that a diligent attempt was made on the part of the auditors to follow up any indications of 
fraud, but the combined efforts of a large number of Cenco’s management prevented them from uncovering 
the fraud. The CPA firm argued that the wrongdoings of management were a valid defense against the 
charges. 

The Seventh Circuit Court of Appeals concluded that the CPA firm was not responsible in this case. 
The wrongdoings of Cenco’s management were considered an appropriate defense against the charges of 
breach of contract, negligence, and fraud, even though the management no longer worked for the company. 
Considering management’s involvement, the CPA firm was not deemed negligent. 


Source: Cenco, Inc., v. Seidman & Seidman, 686 F. 2nd 449 (1982). 
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1136 Tenants v. Max Rothenberg and Company (1967)— 
Liability to Clients 


FIGURE 5-3 


The 1136 Tenants case was a civil case concerning a CPA's failure to uncover fraud as a part of unaudited 
financial statements. The tenants recovered approximately $235,000. 

A CPA firm was engaged by a real estate management agent for $600 per year to prepare financial 
statements, a tax return, and a schedule showing the apportionment of real estate taxes for the 1136 
Tenants Corporation, a cooperative apartment house. The statements were sent periodically to the 
tenants. The statements included the words unaudited, and there was a cover letter stating that “the 
statement was prepared from the books and records of the cooperative and no independent verifications 
were taken thereon.” 

During the period of the engagement, from 1963 to 1965, the manager of the management firm 
embezzled significant funds from the tenants of the cooperative. The tenants sued the CPA firm for 
negligence and breach of contract for failure to find the fraud. 

There were two central issues in the case. Was the CPA firm engaged to do an audit instead of only 
accounting, and was there negligence on the part of the CPA firm? The court answered yes on both 
counts. The reasoning for the court’s conclusion that an audit had taken place was the performance of 
“some audit procedures” by the CPA firm, including the preparation of a worksheet entitled “missing 
invoices.” Had the CPA followed up on these, the fraud would likely have been uncovered. Most impor- 
tant, the court concluded that even if the engagement had not been considered an audit, the CPA had a 
duty to follow up on any potential significant exceptions uncovered during an engagement. 

Two developments resulted from the //36 Tenants case and similar lawsuits concerning unaudited 
financial statements: 


* Engagement letters between the CPA and client were strongly recommended for all engage- 
ments, but especially for unaudited engagements. The letter should clearly define the intent of the 
engagement, the CPA's responsibilities, and any restrictions imposed on the CPA. 

The Accounting and Review Services Committee (ARSC) was formed as a major committee 
of the AICPA to set forth guidelines for unaudited financial statements of nonpublic companies. 
The role of the ARSC and services other than audits are included in Chapter 25. 


Source: | 136 Tenants Corporation v. Max Rothenberg & Company, 227 New York Supp., 2nd 996 (1967). 


Lack of Duty The lack of duty to perform the service means that the CPA firm 
claims that there was no implied or expressed contract. For example, the CPA firm 
might claim that misstatements were not uncovered because the firm did a review 
service, not an audit. The CPA’s use of an engagement letter provides a basis to 
demonstrate a lack of duty to perform. Many litigation experts believe that a well- 
written engagement letter significantly reduces the likelihood of adverse legal actions. 
Engagement letters are further discussed in Chapter 8. 


Nonnegligent Performance For nonnegligent performance in an audit, the CPA 
firm claims that the audit was performed in accordance with auditing standards. 
Even if there were undiscovered misstatements, the auditor is not responsible if the 
audit was conducted properly. The prudent person concept (discussed on page 117) 
establishes in law that the CPA firm is not expected to be infallible. Similarly, auditing 
standards make it clear that an audit is subject to limitations and cannot be relied on 
for complete assurance that all misstatements will be found. Requiring auditors to dis- 
cover all material misstatements would, in essence, make them insurers or guarantors 
of the accuracy of the financial statements. The courts do not require that. 


Contributory Negligence A defense of contributory negligence exists when the 
auditor claims the client’s own actions either resulted in the loss that is the basis for 
damages or interfered with the conduct of the audit in such a way that prevented the 
auditor from discovering the cause of the loss. Suppose a client claims that a CPA 
firm was negligent in not uncovering an employee’s theft of cash. If the CPA firm had 
notified the client (preferably in writing) of a deficiency in internal control that would 
have prevented the theft but management did not correct it, the CPA firm would have 
a defense of contributory negligence. Or, suppose a CPA firm failed to determine 
that certain accounts receivable were uncollectible and, in reviewing collectibility, 
the auditors were lied to and given false documents by the credit manager. In this 
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circumstance, assuming the audit of accounts receivable was done in accordance with 
auditing standards, the auditor can claim a defense of contributory negligence. 


Absence of Causal Connection To succeed in an action against the auditor, the client 
must be able to show that there is a close causal connection between the auditor’s fail- 
ure to follow auditing standards and the damages suffered by the client. Assume that 
an auditor failed to complete an audit on the agreed-upon date. The client alleges that 
this caused a bank not to renew an outstanding loan, which caused damages. A poten- 
tial auditor defense is that the bank refused to renew the loan for other reasons, such 
as the weakening financial condition of the client. This defense is called an absence of 
causal connection. 


LIABILITY TO THIRD PARTIES UNDER COMMON LAW 
OBJECTIVE 5-5 In addition to being sued by clients, CPAs may be liable to third parties under common 


; ert law. Third parties include actual and potential stockholders, vendors, bankers and 
Describe accountants’ liability to : a zl : sas 
third parties under common law ther creditors, employees, and customers. A CPA firm may be liable to third parties if 
andtrelntededefensest a loss was incurred by the claimant due to reliance on misleading financial statements. 

A typical suit occurs when a bank is unable to collect a major loan from an insolvent 
customer and the bank then claims that misleading audited financial statements were 
relied on in making the loan and that the CPA firm should be held responsible because 
it failed to perform the audit with due care. 


The leading precedent-setting auditing case in third-party liability was Ultramares 
Corporation v. Touche (1931), which established the Ultramares doctrine. Take a 
moment to read the summary of the case in Figure 5-4. 

In this case, the court held that although the accountants were negligent, they 
were not liable to the creditors because the creditors were not a primary beneficiary. 
In this context, a primary beneficiary is one about whom the auditor was informed 
before conducting the audit (a known third party). This case established a precedent, 
commonly called the Ultramares doctrine, that ordinary negligence is insufficient for 
liability to third parties because of the lack of privity of contract between the third party 
and the auditor, unless the third party is a primary beneficiary. However, in a subsequent 
trial of the Ultramares case, the court pointed out that had there been fraud or gross 
negligence on the part of the auditor, the auditor could be held liable to third parties 
who are not primary beneficiaries. 


Ultramares Doctrine 


In subsequent decisions, courts have broadened the Ultramares doctrine to allow recov- 
ery by third parties in more circumstances by introducing the concept of foreseen 
users, who are members of a limited class of users that the auditor knows will rely on 
the financial statements. For example, a bank that has loans outstanding to a client at 
the balance sheet date may be a foreseen user. Under this concept, a foreseen user is 
treated the same as a known third party. 


Foreseen Users 


Ultramares Corporation v. Touche (193 1)—Liability 

FIGURE 5-4 ; : 
to Third Parties 

The creditors of an insolvent corporation (Ultramares) relied on the audited financials and subsequently 

sued the accountants, alleging that they were guilty of negligence and fraudulent misrepresentation. The 

accounts receivable had been falsified by adding to approximately $650,000 in accounts receivable another 


item of over $700,000. The creditors alleged that careful investigation would have shown the $700,000 to 
be fraudulent. The accounts payable contained similar discrepancies. 

The court held that the accountants had been negligent but ruled that accountants would not be liable 
to third parties for honest blunders beyond the bounds of the original contract unless they were primary 
beneficiaries. The court held that only one who enters into a contract with an accountant for services can 
sue if those services are rendered negligently. 
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FIGURE 5-5 ~=Rusch Factors v. Levin (1968)—Liability to Third Parties 


The plaintiff, Rusch Factors, a lender, asked the defendant auditor to audit the financial statements of a 
company seeking a loan. The auditor, Levin, issued an unqualified opinion on the financial statements, 
indicating that the company was solvent when, in fact, it was insolvent. The plaintiff loaned the company 
money, suffered a subsequent loss, and sued the auditor for recovery. 

The auditor’s defense in the case was based on the absence of privity on the part of Rusch Factors. 
The court found in favor of this plaintiff. Although the court could have found in favor of Rusch Factors 
under Ultramares in that it was a primary beneficiary, it chose to rely on the Restatement of Torts, stating 
that the auditor should be liable for ordinary negligence in audits where the financial statements are 
relied on by actually foreseen and limited classes of persons. 


Source: Rusch Factors, Inc., v. Levin, 284 F. Supp. 85 (D.C.R.I. 1968). 


Although the concept of foreseen users may appear straightforward, courts have 
generated several different interpretations. At present, the three leading approaches 
taken by the courts that have emerged are described as follows: 


Credit Alliance In Credit Alliance v. Arthur Andersen & Co. (1986) in New York, a lender 
brought suit against the auditor of one of its borrowers, claiming that it relied on the 
financial statements of the borrower, who was in default, in granting the loan. The 
New York State Court of Appeals upheld the basic concept of privity established by 
Ultramares and stated that to be liable, (1) an auditor must know and intend that the 
work product would be used by the third party for a specific purpose, and (2) the 
knowledge and intent must be evidenced by the auditor’s conduct. 


Restatement of Torts The approach followed by most states is to apply the rule cited 
in the Restatement of Torts, an authoritative set of legal principles. The Restatement Rule is 
that foreseen users must be members of a reasonably limited and identifiable group of users 
who have relied on the CPA’s work, such as creditors, even though those persons were 
not specifically known to the CPA at the time the work was done. A leading case sup- 
porting the application of this rule is Rusch Factors v. Levin, as presented in Figure 5-5. 


Foreseeable User The broadest interpretation of the rights of third-party beneficia- 
ries is to use the concept of foreseeable users. Under this concept, any users who the 
auditor should have reasonably been able to foresee as likely users of the client’s finan- 
cial statements have the same rights as those with privity of contract. These users are 
often called an unlimited class. Although a significant number of states followed this 
approach in the past, it is now used in only a minority of states. 

Table 5-2 summarizes the three approaches to third-party liability taken by the 
courts under common law. There is confusion caused by these differing views of 
liability to third parties under common law, but the movement is clearly away from the 


TABLE 5-2 Approaches Courts Take to Assign Third-Party Liability Under Common Law 


Approaches by Courts 


Interpretation and Example Cases Definition of Third-Party User Example 


Narrow Primary beneficiary/identified user Auditor knows and intends that Auditor is aware of bank loan agree- 
Ultramares Corporation v. Touche (1931) user will use audit report. ment that requires audited financial 
Credit Alliance y. Arthur Andersen (1986) statements. 
Foreseen user Reasonably limited and identifiable Bank or trade creditors when the 
Rusch Factors v. Levin (1968) group of users who have relied auditor is aware that the client has 
on the auditor’s work. provided audited financial statements 


to such users. 
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Foreseeable user An unlimited class of users that the audi- A trade creditor that has not previously 
Rosenblum, Inc., v. Adler (1983) tor should have reasonably been able conducted business with the client. 
to foresee as being likely users of the That client has not furnished finan- 
financial statements. cial statements to trade creditors in 
the past. 
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foreseeable user approach, and thus toward the first two approaches. For example, in 
Bily v. Arthur Young (1992), the California Supreme Court reversed a lower court decision 
against Arthur Young, clearly upholding the Restatement doctrine. In its decision, the 
court stated that “an auditor owes no general duty of care regarding the conduct of an 
audit to persons other than the client” and reasoned that the potential liability to auditors 
under the foreseeable user doctrine would be distinctly out of proportion to any fault. 


Three of the four defenses available to auditors in suits by clients are also available in 
third-party lawsuits: lack of duty to perform the service, nonnegligent performance, 
and absence of causal connection. Contributory negligence is ordinarily not available 
because a third party is not in a position to contribute to misstated financial statements. 

A lack of duty defense in third-party suits contends lack of privity of contract. 
The extent to which privity of contract is an appropriate defense and the nature of the 
defense depend heavily on the approach to foreseen users in the state and the judicial 
jurisdiction of the case. 

If the auditor is unsuccessful in using the lack of duty defense to have a case dis- 
missed, the preferred defense in third-party suits is nonnegligent performance. If the 
auditor conducted the audit in accordance with auditing standards, that eliminates the 
need for the other defenses. Unfortunately, nonnegligent performance can be difficult 
to demonstrate to a court, especially in jury trials when laypeople with no accounting 
experience make up the jury. 

Absence of causal connection in third-party suits often means nonreliance on 
the financial statements by the user. Assume that the auditor can demonstrate that 
a lender relied on an ongoing banking relationship with a customer, rather than the 
financial statements, in making a loan. In that situation, auditor negligence in the 
conduct of the audit is not relevant. Of course, it is difficult to prove nonreliance on 
the financial statements. Absence of causal connection can be difficult to establish 
because users may claim reliance on the statements even when investment or loan 
decisions were made without considering the company’s financial condition. 


Auditor Defenses 
Against Third-Party Suits 


CIVIL LIABILITY UNDER THE FEDERAL SECURITIES LAWS 
‘OBJECTIVE 5-600 Although there has been some growth in actions brought against accountants by 


—S abn, clients and third parties under common law, the greatest growth in CPA liability 

escribe accountants’ civil liability ae ae ete 

under the federal securities laws. Litigation has been under the federal securities laws. Litigants commonly seek federal 

and related defenses. remedies because of the availability of class-action litigation and the ability to obtain 
significant damages from defendants. 

Other factors also make federal courts attractive to litigants. For example, several 
sections of the securities laws impose strict liability standards on CPAs, and federal 
courts are often likely to favor plaintiffs in lawsuits when there are strict standards. 
However, fairly recent tort reform legislation may result in a reduction of negative out- 
comes for CPA firms in federal courts. 


The Securities Act of 1933 deals only with the reporting requirements for compa- 
nies issuing new securities, including the information in registration statements and 
prospectuses. The only parties who can recover from auditors under the 1933 act are 
the original purchasers of securities. The amount of the potential recovery equals the 
original purchase price less the value of the securities at the time of the suit. (If the 
securities have been sold, users can recover the amount of the loss incurred.) 

The Securities Act of 1933 imposes an unusual burden on the auditor. Section 11 
of the 1933 act defines the rights of third parties and auditors, which are summarized 
as follows: 


Securities Act of 1933 
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¢ Any third party who purchased securities described in the registration state- 
ment may sue the auditor for material misrepresentations or omissions in au- 
dited financial statements included in the registration statement. 


Arens, Alvin A., b48 Auditing and ARanbch FehHeEsAGIODET Ro RRROFESH|Qdbation Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action ?docID=5185606. 
Created from undip-ebooks on 2020-12-09 17:50:02. 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education Limited, 2016. ProQuest Ebook Central, http://ebookcen@hapqerstzorUBGAdipid bow Ks|FeVail. action 2dociD 44Be0e. 


* Third-party users do not have the burden of proof that they relied on the finan- 
cial statements or that the auditor was negligent or fraudulent in doing the 
audit. Users must only prove that the audited financial statements contained a 
material misrepresentation or omission. 

¢ The auditor has the burden of demonstrating as a defense that (1) an adequate 
audit was conducted or (2) all or a portion of the plaintiff's loss was caused by 
factors other than the misleading financial statements. The 1933 act is the only 
common or statutory law where the burden of proof is on the defendant. 


Furthermore, the auditor is responsible for making sure that the financial state- 
ments are fairly stated beyond the date of issuance, up to the date the registration 
statement becomes effective, which can be several months later. Assume that the audit 
report date for December 31, 2015, financial statements is February 10, 2016, but the 
registration statement is dated November 1, 2016. In a typical audit, the auditor must 
review transactions through the audit report date, February 10, 2016. In statements filed 
under the 1933 act, the auditor is responsible for reviewing transactions—for almost 
nine additional months—through the registration statement date, November 1, 2016. 

While the threshold to file a case against auditors is relatively low, comparatively 
few cases are tried under the 1933 act, with cases often dismissed or resolved outside 
of court. One of the most significant cases tried under the 1933 act is Escott et al. v. 
BarChris Construction Corporation (1968). As noted in Figure 5-6, the CPA firm was held 
liable for a lack of due diligence required under the 1933 act when performing its 
review of events occurring subsequent to the balance sheet date. This case brought 
about two noteworthy consequences: 


1. Auditing standards were changed to require greater emphasis on procedures that 
the auditor must perform for events subsequent to the balance sheet date. 

2. A greater emphasis began to be placed on the importance of the audit staff under- 
standing the client’s business and industry. 


The liability of auditors under the Securities Exchange Act of 1934 often centers 
on the audited financial statements issued to the public in annual reports submitted to 
the SEC as a part of annual Form 10-K reports. Every company with securities traded 
on national and over-the-counter exchanges is required to submit audited statements 


Escott et al. v. BarChris Construction Corporation (1968) — 


FIGURE 5-6 | Securities Act of 1933 


BarChris filed an S-| registration statement with the SEC in 1961 for the issuance of convertible subordi- 
nated debentures, thereby subjecting the company to the Securities Act of 1933. Approximately 17 months 
later, BarChris filed for bankruptcy. The purchasers of the debentures filed suit against the CPA firm under 
the 1933 act. 

The most significant issue of the case, especially to audit staff personnel, was the matter of the review 
for events subsequent to the balance sheet, called an S-| review for registration statements. The courts 
concluded that the CPA firm’s written audit program was in conformity with auditing standards in existence 
at that time. However, they were highly critical of the auditor conducting the review, who was inexperienced 
in audits of construction companies, for the failure to appropriately follow up on answers by management. 
The following is an important part of the court’s opinion in the case: 


° Accountants should not be held to a higher standard than that recognized in their profession. 
| do not do so here. Richard’s review did not come up to that written standard. He did not take the 
steps which the CPA firm’s written program prescribed. He did not spend an adequate amount of time 
on a task of this magnitude. Most important of all, he was too easily satisfied with glib answers to his inquiries. 
This is not to say that he should have made a complete audit. But there were enough danger signals in 
the materials which he did examine to require some further investigation on his part.... It is not always 
sufficient merely to ask questions. (Italics were added and the name used in the case was changed.) 


The CPA firm was found liable in the case on the grounds that they had not established due 
diligence required under the 1933 securities act. 


Source: Escott v. BarChris Construction Corporation, 283 F. Supp. 643 (1968). 
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Securities Exchange 
Act of 1934 


Rule 10b-5 of the 
Securities Exchange 
Act of 1934 
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annually. Obviously, a much larger number of statements fall under the 1934 act than 
under the 1933 act. 

Auditors also face potential legal exposure for quarterly information (Form 10-Q) 
or other reporting information filed with the SEC, such as an unusual event filed in a 
Form 8-K. The auditor must perform a review of the Form 10-Q before it is filed with 
the SEC, and the auditor is frequently involved in reviewing the information in other 
reports, and, therefore, may be legally responsible. However, few cases have involved 
auditors for reports other than reports on annual audits. 


The principal focus on CPA liability litigation under the 1934 act is Rule 10b-5. 
Section 10 and Rule 10b-5 are often called the antifraud provisions of the 1934 act, as 
they prohibit any fraudulent activities involving the purchase or sale of any security. 
Numerous federal court decisions have clarified that Rule 10b-5 applies not only to 
direct sellers but also to accountants, underwriters, and others. Generally, accoun- 
tants can be held liable under Section 10 and Rule 10b-5 if they intentionally or reck- 
lessly misrepresent information intended for third-party use. 

In 1976, in Hochfelder v. Ernst & Ernst, known both as a leading securities law case 
and as a CPA liabilities case, the U.S. Supreme Court ruled that scienter, which is 
knowledge and intent to deceive, is required before CPAs can be held liable for viola- 
tion of Rule 10b-5. A summary of Hochfelder is included in Figure 5-7. 

Many auditors believed the knowledge and intent to deceive requirement estab- 
lished in the Hochfelder case would significantly reduce auditors’ exposure to liability. 
However, subsequent cases were brought arguing the knowledge and deceit standard 


Hochfelder v. Ernst & Ernst (1976)— Securities 
Exchange Act of 1934 


FIGURE 5-7 


The case involved the auditor’s responsibility for detecting fraud perpetrated by the president of the client 
firm. Lestor Nay, the president of First Securities Co. of Chicago, fraudulently convinced certain customers 
to invest funds in escrow accounts that he represented would yield a high return. There were no escrow 
accounts. Nay converted the customers’ funds to his own use. 

The transactions were not in the usual form of dealings between First Securities and its customers. 
First, all correspondence with customers was made solely with Nay. Second, checks of the customers were 
drawn payable to Nay and because of a mail rule that Nay imposed, such mail was opened only by him. 
Third, the escrow accounts were not reflected on the books of First Securities, or in filings with the SEC, 
or in connection with customers’ other investment accounts. The fraud was uncovered at the time of Nay’s 
suicide. 

Respondent customers originally sued in district court for damages against the auditors, Ernst & Ernst, as 
aiders and abettors under Section |0b-5. They alleged that Ernst & Ernst failed to conduct a proper audit that 
should have led them to discover the ‘‘mail rule” and the fraud. No allegations were made as to Ernst & Ernst’s 
fraudulent and intentional conduct. The action was based solely on a claim that Ernst & Ernst failed to conduct a 
proper audit. The district court dismissed the action but did not resolve the issue of whether a cause of action 
could be based merely on allegations of negligence. 

The court of appeals reversed the district court. The appeals court held that one who breaches a duty 
of inquiry and disclosure owed another is liable in damages for aiding and abetting a third party's violation of 
Rule |0b-5 if the fraud would have been discovered or prevented had the breach not occurred. The court 
reasoned that Ernst & Ernst had a common-law and statutory duty of inquiry into the adequacy of First 
Securities’ internal control because it had contracted to audit First Securities and to prepare for filing with 
the commission the annual report of its financial condition. 

The U.S. Supreme Court reversed the court of appeals, concluding that the interpretation of Rule 
10b-5 required the “intent to deceive, manipulate or defraud.” Justice Powell wrote in the Court’s opinion 
that 


¢ When a statute speaks so specifically in terms of manipulation and deception, and of imple- 
menting devices and contrivances—the commonly understood terminology of intentional wrongdo- 
ing—and when its history reflects no more expansive intent, we are quite unwilling to extend the scope 
of the statute to negligent conduct. 


The Court pointed out that in certain areas of the law, recklessness is considered to be a form of 
intentional conduct for purposes of imposing liability. This left open the possibility that reckless behavior 
may be sufficient for liability under Rule |0b-5. 


Source: Hochfelder v. Ernst & Ernst, 503 F. 2nd 1100 (1974). 
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Howard Sirota v. Solitron Devices, Inc. (1982) — Securities 
Exchange Act of 1934 


FIGURE 5-8 


Solitron was a manufacturer of electronic devices, with its stock issued on the American Stock Exchange. It 
was involved in government contracts that subjected it to assessments on excess profits as determined by 
the Renegotiations Board. When the board determined that profits were excessive, management admitted 
that profits had been intentionally overstated to aid in acquiring new companies. It was subsequently shown 
in court, through an audit by another CPA firm, that earnings had been materially overstated by more than 
30 percent in two different years, by overstating inventory. 

A jury trial found the auditor responsible for reckless behavior in the conduct of the audit. The trial 
judge overturned the jury verdict on the grounds that the CPA firm could not be held liable for damages 
under Rule 10b-5 unless there was proof that the CPA firm had actual knowledge of the misstatement. 
Reckless behavior was not sufficient for damages. 

On appeal, the Second Circuit Court of Appeals concluded that there had been sufficient evidence for 
the jury to conclude that the CPA firm had knowledge of the fraud. It therefore overturned the trial judge’s 
findings and affirmed the original jury’s guilty verdict. 

The court of appeals also stated that proof of recklessness may meet the requirement of intent in 
Rule 10b-5, but that it need not address whether there was sufficient recklessness in this case because the 
CPA firm had knowledge of the misstatement. 


Source: Sirota v. Solitron Devices, Inc., 673 F. 2nd 566 (1982). 


was met in cases in which the auditor knew all the relevant facts but made poor judg- 
ments. In such situations, the courts emphasized that the CPAs had requisite knowl- 
edge. The Solitron Devices case, described in Figure 5-8, is an example of that reasoning. 
In that case, the court of appeals ruled that reckless behavior on the part of the auditor 
was sufficient to hold the auditor liable for violation of Rule 10b-5. However, in subse- 
quent suits under Rule 10b-5, Worlds of Wonder (1994) and Software Toolworks (1994), two 
key Ninth Circuit court decisions stated that poor judgment is not proof of fraud. This 
view appears now to be winning favor in the courts. 

Recent rulings by the Supreme Court make it more difficult to hold secondary 
defendants, such as auditors, liable for fraudulent statements made by the primary 
defendant responsible for making the false statement or omission. In prior cases, 
auditors and other third parties have been held liable as “aiders or abettors” of fraud. 
However, in the Central Bank of Denver (1994) case, the Supreme Court ruled that liabil- 
ity under Rule 10b-5 did not extend to aiders or abettors who participated in financial 
statement misstatements but were not the primary defendants. Subsequently, in the 
Supreme Court’s ruling on the Janus Capital Group, Inc. (2011) case, they further clari- 
fied that a defendant in a case brought forth under Rule 10b-5 can only be held liable 
if they are the “maker” of a misstatement. The implication of these rulings for audit 
firms is that an audit firm can be held liable for misstatements made in their audit 
report, but not for aiding or abetting management’s financial statement misstate- 
ments. In order to prove intent to deceive in an audit report, a plaintiff would have to 
prove that the audit firm either did not believe their own opinion, or had no basis for 
such opinion. Although Rule 10b-5 continues to be a basis for lawsuits against audi- 
tors, Hochfelder and subsequent court decisions have limited the liability somewhat. 


The same three defenses available to auditors in common-law suits by third parties 
are also available for suits under the 1934 act: nonnegligent performance, lack of duty, 
and absence of causal connection. 

As we just discussed, the use of the lack of duty defense in response to actions 
under Rule 10b-5 has had varying degrees of success, depending on the jurisdiction. 
In the Hochfelder case, the court ruled that knowledge and intent to deceive were nec- 
essary for the auditor to be found liable. In other cases, gross negligence or reckless 
behavior was sufficient for the auditor to be found liable. Continued court interpreta- 
tions are likely to clarify this unresolved issue. 


Closely related to auditors’ liability is the SEC and PCAOB authority to sanction. The 
SEC and the PCAOB have the power in certain circumstances to sanction or suspend 
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practitioners from doing audits for SEC companies. The SEC Rules of Practice and the 
PCAOB Rules of the Board permit them to temporarily or permanently deny a CPA or 
CPA firm from being associated with financial statements of public companies, either 
because of a lack of appropriate qualifications or having engaged in unethical or 
improper professional conduct. 

In recent years, the SEC has temporarily suspended a number of individual CPAs 
from doing any audits of SEC clients. It has similarly prohibited a number of CPA 
firms from accepting any new SEC clients for a period, such as six months. In some 
cases, the SEC has required an extensive review of a major CPA firm’s practices by 
another CPA firm, or made CPA firms make changes in their practices. Individual 
CPAs and their firms have also been required to participate in continuing education 
programs. Sanctions such as these are published by the SEC and are often reported in 
the business press, making them a significant embarrassment to those involved. 


Another significant congressional action affecting both CPA firms and their clients 
was the passage of the Foreign Corrupt Practices Act of 1977. The act makes it 
illegal to offer a bribe to an official of a foreign country for the purpose of exerting 
influence and obtaining or retaining business. The prohibition against payments to 
foreign officials is applicable to all U.S. domestic firms, regardless of whether they are 
publicly or privately held, and to all foreign companies filing with the SEC. 

The law also requires SEC registrants under the Securities Exchange Act of 1934 
to meet additional requirements of reasonably complete and accurate records, plus an 
adequate system of internal control. The law significantly affected all SEC companies, 
and potentially affected auditors because of their responsibility to review and evalu- 
ate systems of internal control as a part of the audit. Although the provisions of the 
Foreign Corrupt Practices Act remain in effect, the provisions related to accounting 
records and internal control are largely superseded by the more stringent require- 
ments of the Sarbanes—Oxley Act of 2002. 


The Sarbanes—Oxley Act greatly increases the responsibilities of public companies 
and their auditors. The Act requires the CEO and CFO to certify the annual and quar- 
terly financial statements filed with the SEC. In addition, as discussed in Chapter 3, 
management must report its assessment of the effectiveness of internal control over 
financial reporting, and for accelerated filers, the auditor must provide an opinion on 
the effectiveness of internal control over financial reporting. As a result, auditors may 
be exposed to legal liability related to their opinions on internal control. The PCAOB 
also has the authority to sanction registered CPA firms for any violations of the Act. 
Table 5-3 summarizes the sources of liability to clients and others for breach of 
contract under common law, liability to third parties under common law, and liability 


The Livent Entertainment Corporation of Canada, Inc. was a 
theatre production company in Toronto, Canada. The company 
was famous for producing stage musicals in Canada and in the 
United States such as the productions of Joseph and the Amazing 
Technicolor Dreamcoat, Kiss of the Spider Woman, and the 1993 
Broadway revival of Show Boat, Fosse and Ragtime. 

By 1993, profits of Livent had plummeted, and there were 


Livent’s restatement in 1998 of the unqualified financial 
statements of 1996 and 1997 was disastrous. The share price 
plummeted from USD6.75 to just only $0.28. 

The 1998 restatement of Livent’s financial statements for 
1996 and 1997 resulted in a significant downward adjustment 
of reported income. The share prices went south too. The 
fallout from the reinstatement was criminal convictions, cross- 


disagreements between the co-founders Garth Drabinsky 
and Myron Gottlieb and the company. The co-founders were 
dismissed. With a debt liability of C$334 million, Livent sought 
bankruptcy protection in the US and Canada. A criminal investi- 
gation was launched in Canada. Regulators in the United States 
and Canada investigated their accounting practices. 

The receiver of Livent Entertainment of Canada Inc. 
successfully sued Deloitte & Touche in Canada for 
C$85 million for its negligence. Delioitte and Touche gave 
unqualified opinions of the financial statements of the company 
for financial years 1996 and 1997. The opinions were proven 
later to be untrue. 


borders proceeding and inquiries by the Canadian Securities and 
Exchanges Commission and the Ontario Securities Commission, 
and disciplinary action by the Canadian Institute of Chartered 
Accountants of partners of the audit firm. 


Sources: |. Benjamin Na & Matthew Karabus (2014) The increasing 
scope of auditors’ negligence: Livent Inc. v. Deloitte & Touche LLP, 
Gowling Lafleur Henderson LLP. Montreal, Canada. https://www. 
gowlings.com/KnowledgeCentre/article.asp?pubID=3289; 2. Bruce 
Cantwell (1999) Dramatic Cast Changes at Livent: Year In Review 
1998, Encyclopedia Britannica, Inc. Chicago IL, United States. http:// 
global.britannica.com/topic/bankruptcy- 1018075 
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TABLE 5-3 Summary of Auditor Liability 


Liability to Third Liability to Third Liability to Third 
Parties Under Parties Under 1933 Parties Under 1934 
Alleged Auditor Action Liability to Client Common Law Securities Act Securities Act 
Breach of contract Yes N/A N/A N/A 
Negligence Yes Primary Beneficiary — N/A! No 
Yes 


Other third parties — 
depends on jurisdiction 


Gross Negligence Yes Yes N/A Yes — likely 
Constructive fraud/Recklessness Yes Yes N/A Yes — likely 
Fraud Yes Yes N/A Yes — likely 


“Yes” indicates that the auditor could be held liable to a client or third party for the alleged auditor action. 
“No” means the auditor would not be liable for the alleged action. 
“N/A” means that the alleged auditor action is not an available basis to seek liability from the auditor under common law or the securities acts. 


'Material error or omission is required for liability under the 1933 act. 


to third parties under the 1933 and 1934 Securities acts. The table illustrates the strict 
burden on auditors to defend themselves under the 1933 act. Liability to third parties 
under common law and the 1934 act depends on the degree of negligence. Liability to 
third parties under common law also depends upon the jurisdiction and whether the 
third party is a primary beneficiary or known user of the financial statements. 

The defenses available to the auditor are summarized in Table 5-4. If the auditor is 
unable to prove a lack of duty to perform the service, the preferred defense is generally 
nonnegligent performance. 


CONCEPT CHECK 


1. What are the four major sources of auditors’ legal liability? 


2. Compare and contrast traditional auditors’ legal responsibilities to clients and third-party 
users under common law. How has that law changed in recent years? 


3. What are the auditor’s possible defenses against lawsuits filed under the Securities 
Exchange Act of 1934? 


Auditor Defenses Against Suits by Client, Third Parties Under Common 
Usd Law, and Under the 1933 and 1934 Securities Acts 


Third Parties 1933 1934 
Available Auditor Defenses Client Suits Common Law Securities Act Securities Act 
Lack of duty to perform service X x N/A X 
Nonnegligent performance (audit in Xx x x X 


accordance with audit standards) 


Contributory negligence by Xx N/A N/A N/A 
client or third party 


Absence of causal connection (no Xx Xx N/A? X 
reliance on financial statements) 


“X” indicates the auditor defense would be available. 
“N/A” indicates the defense generally would not be applicable. 


'Under the 1933 Securities Act, the auditor must prove due diligence in the performance of the audit. 
Auditor may prove that the loss was not attributable to the misleading financial statements. 
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A fourth way CPAs can be held liable is under criminal liability for accountants. 
CPAs can be found guilty for criminal action under both federal and state laws. Under 
state law, the most likely statutes to be enforced are the Uniform Securities Acts, which 
are similar to parts of the SEC rules. The more relevant federal laws affecting auditors 
are the 1933 and 1934 securities acts, as well as the Federal Mail Fraud Statute and the 
Federal False Statements Statute. All make it a criminal offense to defraud another 
person through knowingly being involved with false financial statements. In addition, 
the Sarbanes—Oxley Act of 2002 made it a felony to destroy or create documents to 
impede or obstruct a federal investigation. Under Sarbanes—Oxley, a person may face 
fines and imprisonment of up to 20 years for altering or destroying documents. These 
provisions were adopted following the United States v. Andersen (2002) case described in 
Figure 5-9, in which the government charged Andersen with obstruction of justice for 
the destruction and alteration of documents related to its audit of Enron. 

Unfortunately, a few notorious criminal cases have involved CPAs. Historically, 
one of the leading cases of criminal action against CPAs is United States v. Simon, which 
occurred in 1969. In this case, three auditors were prosecuted for filing false financial 
statements of a client with the government, and all three were held criminally liable. 
Three major criminal cases followed Simon: 


¢ In United States v. Natelli (1975), two auditors were convicted of criminal liabil- 
ity under the 1934 act for certifying financial statements of National Student 
Marketing Corporation that contained inadequate disclosures. 

° In United States v. Weiner (1975), three auditors were convicted of securities fraud 
in connection with their audit of Equity Funding Corporation of America. The 
fraud was so extensive and the audit work so poor that the court concluded 
that the auditors must have been aware of the fraud and were therefore guilty of 
knowing complicity. 

¢ In ESM Government Securities v. Alexander Grant & Co. (1986), management revealed 
to the partner in charge of the audit of ESM that the previous year’s audited finan- 
cial statements contained a material misstatement. Rather than complying with 
professional and firm standards, the partner agreed to say nothing in the hope 
that management would work its way out of the problem during the current year. 
The partner was convicted of criminal charges for his role in sustaining the fraud. 


These cases teach several critical lessons: 


¢ An investigation of the integrity of management is an important part of decid- 
ing on the acceptability of clients and the extent of work to perform. Auditing 
guidance for auditors in investigating new clients will be discussed in Chapter 8. 


FIGURE 5-9 United States v. Andersen (2002) — Criminal Liability 


In this case, the government charged Andersen with destruction of documents related to the firm’s audit of 
Enron. During the period between October 19, 2001, when Enron alerted Andersen that the SEC had 
begun an inquiry into Enron’s accounting for certain special purpose entities, and November 8, 2001, when 
the SEC served Andersen with a subpoena in connection with its work for Enron, Andersen personnel 
shredded extensive amounts of physical documentation and deleted computer files related to Enron. 

The firm was ultimately convicted of one count of obstruction of justice. The conviction was not 
based on the document shredding, but it was based on the alteration of a memo related to Enron’s charac- 
terization of charges as nonrecurring in its third quarter 2001 earnings release, in which the company 
announced a loss of $618 million. 

As a result of the conviction, Andersen was no longer able to audit publicly traded U.S. companies. 
The conviction was overturned by the U.S. Supreme Court in 2005 because the instructions provided the 
jury were too broad. The victory was largely symbolic since the firm effectively ceased operations after the 
original conviction. 


Source: United States v. Arthur Andersen, LLP, 374 F. 3d 281 (2002). 


¢ As discussed in Chapter 4, independence by all individuals on the engagement is 
essential, especially in a defense involving criminal actions. 

¢ Transactions with related parties require special scrutiny because of the poten- 
tial for misstatement. Auditing requirements for related-party transactions are 
discussed in Chapter 8. 

« Accounting principles cannot be relied on exclusively in deciding whether 
financial statements are fairly presented. The substance of the statements, con- 
sidering all facts, is required. 

* The potential consequences of the auditor knowingly committing a wrongful 
act are so severe that it is unlikely that the potential benefits can ever justify the 
actions. 


THE PROFESSION’S RESPONSE TO LEGAL LIABILITY 
The AICPA and the profession as a whole can do a number of things to reduce practi- OBJECTIVE 5-8 


tioners’ exposure to lawsuits: 
P Describe how the profession and 


1. Seek protection from nonmeritorious litigation individual CPAs can reduce the 
2. Improve auditing to better meet users’ needs threat of litigation. 
3. Educate users about the limits of auditing 


Let’s discuss some specific activities briefly: 


¢ Standard and rule setting. The IAASB, AICPA, and PCAOB must constantly set 
standards and revise them to meet the changing needs of auditing. For example, 
changes in auditing standards on the auditor’s responsibility to detect fraud 
were issued to address users’ needs and expectations as to auditor performance. 

* Oppose lawsuits. CPA firms must continue to oppose unwarranted lawsuits even 
if, in the short run, the costs of winning are greater than the costs of settling. 

¢ Education of users. The AICPA, leaders of CPA firms, and educators should edu- 
cate investors and others who read financial statements as to the meaning of an 
auditor’s opinion and to the extent and nature of the auditor’s work. In addition, 
users need to understand that auditors do not guarantee the accuracy of the 
financial records or the future prosperity of an audited company. People out- 
side of the profession need to understand that accounting and auditing are arts, 
not sciences. Perfection and precision are simply not achievable. 

* Sanction members for improper conduct and performance. A profession must police its 
own membership. The AICPA and the PCAOB have made progress in dealing 
with the problems of inadequate CPA performance, but more rigorous review 
of alleged failures is still needed. 

° Lobby for changes in laws. Since the 1990s several changes in state and federal laws 
have favorably impacted the legal environment for the profession. Most states 
have revised their laws to allow accounting firms to practice in different orga- 
nizational forms, including limited liability organizations that provide some 
protection from litigation. The passage of the Private Securities Litigation 
Reform Act of 1995 (the Reform Act) and the Securities Litigation Uniform 
Standards Act of 1998 significantly reduced potential damages in federal securi- 
ties-related litigation by providing for proportionate liability in most instances. 
The profession continues to pursue litigation reform at the state level, including 
application of a strict privity standard for liability to nonclients and proportion- 
ate liability in all cases not involving fraud. 
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the more common actions are as follows: Protecting Individual 


CPAs from Legal 
* Deal only with clients possessing integrity. There is an increased likelihood of having Liability 


legal problems when a client lacks integrity in dealing with customers, employees, 
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units of government, and others. A CPA firm needs procedures to evaluate the 
integrity of clients and should dissociate itself from clients found lacking integrity. 

* Maintain independence. Independence is more than merely financial. Independence 
requires an attitude of responsibility separate from the client’s interest. Much liti- 
gation has arisen from auditors’ too willing acceptance of client representations 
or from client pressure. The auditor must maintain an attitude of healthy profes- 
sional skepticism. 

°* Understand the client’s business. In several cases, the lack of knowledge of industry 
practices and client operations has been a major factor in auditors failing to 
uncover misstatements. 

° Perform quality audits. Quality audits require that auditors obtain appropriate 
evidence and make appropriate judgments about the evidence. It is essential, for 
example, that the auditor understands the client’s internal controls and modi- 
fies the evidence to reflect the findings. Improved auditing reduces the likeli- 
hood of failing to detect misstatements and the likelihood of lawsuits. 

¢ Document the work properly. The preparation of good audit documentation helps 
the auditor perform quality audits. Quality audit documentation is essential if an 
auditor has to defend an audit in court, including an engagement letter and a repre- 
sentation letter that define the respective obligations of the client and the auditor. 

° Exercise professional skepticism. Auditors are often liable when they are presented with 
information indicating a problem that they fail to recognize. Auditors need to 
strive to maintain a healthy level of skepticism, one that keeps them alert to poten- 
tial misstatements, so that they can recognize misstatements when they exist. 


It is also important for CPAs to carry adequate insurance and choose a form of 
organization that provides some form of legal liability protection to owners. In the 
event of actual or threatened litigation, an auditor should consult with experienced 
legal counsel. 


SUMMARY 


This chapter provides insight into the environment in which CPAs operate by highlighting 
the significance of the legal liability facing the CPA profession. No reasonable CPA wants 
to eliminate the profession’s legal responsibility for fraudulent or incompetent perfor- 
mance. It is certainly in the profession’s best interest to maintain public trust in the com- 
petent performance of the auditing profession, while avoiding liability for cases involving 
strictly business failure and not audit failure. To more effectively avoid legal liability, CPAs 
need to have an understanding of how they can be held liable to their clients or third par- 
ties. Knowledge about how CPAs are liable to clients under common law, to third parties 
under common law, to third parties under federal securities laws, and for criminal liabil- 
ity, provides auditors an awareness of issues that may subject them to greater liability. 
CPAs can protect themselves from legal liability in numerous ways, and the profession 
has worked diligently to identify ways to help CPAs reduce the profession’s potential ex- 
posure. It is necessary for the profession and society to determine a reasonable trade-off 
between the degree of responsibility the auditor should take for the financial statements 
and the audit cost to society. CPAs, Congress, the SEC, and the courts will all continue to 
have a major influence in shaping the final solution. 


ESSENTIAL TERMS 
Absence of causal connection—an Audit failure—a situation in which the 
auditor's legal defense under which auditor issues an incorrect audit opinion 
the auditor contends that the damages as the result of an underlying failure to 
claimed by the client were not brought comply with the requirements of auditing 
about by any act of the auditor standards 
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Audit risk—the risk that the auditor will 
conclude after conducting an adequate 
audit that the financial statements are 
fairly stated and an unmodified opinion 
can therefore be issued when, in fact, they 
are materially misstated 

Business failure—the situation when a 
business is unable to repay its lenders or 
meet the expectations of its investors be- 
cause of economic or business conditions 
Contributory negligence—an auditor's 
legal defense under which the auditor 
claims that the client failed to perform 
certain obligations and that it is the cli- 
ent’s failure to perform those obligations 
that brought about the claimed damages 
Criminal liability for accountants— 
defrauding a person through knowing in- 
volvement with false financial statements 
Foreign Corrupt Practices Act of 
1977—a federal statute that makes it il- 
legal to offer a bribe to an official of a 
foreign country for the purpose of exert- 
ing influence and obtaining or retaining 
business and that requires U.S. companies 
to maintain reasonably complete and ac- 
curate records and an adequate system of 
internal control 

Foreseeable users—an unlimited class 
of users that the auditor should have 
reasonably been able to foresee as being 
likely users of financial statements 
Foreseen users—members of a limited 
class of users who the auditor is aware will 
rely on the financial statements 

Lack of duty to perform—an auditor's 
legal defense under which the auditor 
claims that no contract existed with the 
client; therefore, no duty existed to per- 
form the disputed service 

Legal liability—the professional’s obliga- 
tion under the law to provide a reasonable 


level of care while performing work for 
those served 

Nonnegligent performance—an audi- 
tor’s legal defense under which the audi- 
tor claims that the audit was performed in 
accordance with auditing standards 
Private Securities Litigation Reform 
Act of 1995—a federal law passed in 
1995 that significantly reduced potential 
damages in securities-related litigation 
Prudent person concept—the legal 
concept that a person has a duty to exer- 
cise reasonable care and diligence in the 
performance of obligations to another 
Scienter—commission of an act with 
knowledge or intent to deceive 
Securities Act of 1933—a federal stat- 
ute dealing with companies that register 
and sell securities to the public; under 
the statute, third parties who are origi- 
nal purchasers of securities may recover 
damages from the auditor if the financial 
statements are misstated, unless the au- 
ditor proves that the audit was adequate 
or that the third party’s loss was caused 
by factors other than misleading financial 
statements 

Securities Exchange Act of 1934—a 
federal statute dealing with companies 
that trade securities on national and 
over-the-counter exchanges; auditors are 
involved because the annual reporting 
requirements include audited financial 
statements 

Ultramares doctrine—a common-law ap- 
proach to third-party liability, established 
in 1931 in the case of Ultramares Corporation 
v. Touche, in which ordinary negligence is 
insufficient for liability to third parties be- 
cause of the lack of privity of contract between 
the third party and the auditor, unless the 
third party is a primary beneficiary 


REVIEW QUESTIONS 


5-1 (OBJECTIVE 5-1) Lawsuits against CPA firms continue to increase. State your opinion of the 
positive and negative effects of the increased litigation on CPAs and on society as a whole. 

5-2 (OBJECTIVE 5-2) Business risk and audit failure are both causes of lawsuits to accounting 
firms. Differentiate. Why is audit failure more perilous to the auditor? 

5-3 (OBJECTIVE 5-3) How does the prudent person concept affect the liability of the auditor? 
5-4 (OBJECTIVES 5-1, 5-8) Discuss why many CPA firms have willingly settled lawsuits out of 
court. What are the implications to the profession? 

5-5 (OBJECTIVES 5-3, 5-4) What is meant by contributory negligence? Under what conditions 


will this likely be a successful defense? 


5-6 (OBJECTIVE 5-4) A common type of lawsuit against CPAs is for the failure to detect a fraud. 
State the auditor’s responsibility for such discovery. Give authoritative support for your answer. 
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5-7 (OBJECTIVE 5-4) Why is it important for a CPA firm to get an engagement letter from 
their client before starting their duties? 

5-8 (OBJECTIVE 5-5) Is the auditor’s liability under common law affected if the third party 
was unknown rather than known? Explain. 

5-9 (OBJECTIVE 5-6) Contrast the auditor’s liability under the Securities Act of 1933 with 
that under the Securities Exchange Act of 1934. 

5-10 (OBJECTIVES 5-4, 5-5, 5-6, 5-7) Distinguish among the auditor’s potential liability to the 
client, liability to third parties under common law, civil liability under the securities laws, 
and criminal liability. Describe one situation for each type of liability in which the auditor 
can be held legally responsible. 

5-11 (OBJECTIVE 5-6) Explain what mechanisms the SEC has on auditors to make sure that 
the auditors practice due care when conducting the work on listed companies. 

5-12 (OBJECTIVE 5-7) How did the Sarbanes—Oxley Act of 2002 increase criminal liability 
for auditors? 

5-13 (OBJECTIVE 5-8) In what ways can the profession positively respond to and reduce 
liability in auditing? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


5-14 (OBJECTIVES 5-4, 5-5) The following questions concern CPA firms’ liability under 
common law. Choose the best response. 


a. Ina common law action against an accountant, lack of privity is a viable defense if the 
plaintiff 
(1) is the client’s creditor who sues the accountant for negligence. 

(2) can prove the presence of gross negligence that amounts to a reckless disregard 
for the truth. 

(3) is the accountant’s client. 

(4) bases the action upon fraud. 

b. The 1136 Tenants case was important chiefly because of its emphasis on the legal 
liability of the CPA when associated with 
(1) an SEC engagement. 

(2) an audit resulting in a disclaimer of opinion. 
(3) letters for underwriters. 
(4) unaudited financial statements. 

c. DMO Enterprises, Inc., engaged the accounting firm of Martin, Seals, & Anderson 
to perform its annual audit. The firm performed the audit in a competent, nonneg- 
ligent manner and billed DMO for $48,000, the agreed fee. Shortly after delivery of 
the audited financial statements, Hightower, the assistant controller, disappeared, 
taking with him $82,000 of DMO’s funds. It was then discovered that Hightower had 
been engaged in a highly sophisticated, novel defalcation scheme during the past 
year. He had previously embezzled $105,000 of DMO funds. DMO has refused to pay 
the accounting firm’s fee and is seeking to recover the $187,000 that was stolen by 
Hightower. Which of the following is most likely true? 

(1) The accountants cannot recover their fee and are liable for $187,000. 

(2) DMO is entitled to rescind the audit contract and thus is not liable for the $48,000 
fee, but it cannot recover damages. 

(3) The accountants are entitled to collect their fee and are not liable for $187,000. 

(4) DMO is entitled to recover the $82,000 defalcation and is not liable for the 
$48,000 fee. 


5-15 (OBJECTIVE 5-6) The following questions deal with liability under the 1933 and 1934 

securities acts. Choose the best response. 
a. Major, Major & Sharpe, CPAs, are the auditors of MacLain Technologies. In connec- 
tion with the public offering of $10 million of MacLain securities, Major expressed an 
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unmodified opinion as to the financial statements. Subsequent to the offering, cer- 
tain misstatements were revealed. Major has been sued by the purchasers of the stock 
offered pursuant to the registration statement that included the financial statements 
audited by Major. In the ensuing lawsuit by the MacLain investors, Major will be able 
to avoid liability if 
(1) the misstatements were caused primarily by MacLain. 
(2) it can be shown that at least some of the investors did not actually read the audited 
financial statements. 
(3) it can prove due diligence in the audit of the financial statements of MacLain. 
(4) MacLain had expressly assumed any liability in connection with the public offering. 
b. Donalds & Company, CPAs, audited the financial statements included in the annual 
report submitted by Markum Securities, Inc., to the SEC. The audit was improper in 
several respects. Markum is now insolvent and unable to satisfy the claims of its cus- 
tomers. The customers have instituted legal action against Donalds based on Section 
10b and Rule 10b-5 of the Securities Exchange Act of 1934. Which of the following is 
likely to be Donalds’ best defense? 
(1) Section 10b does not apply to them. 
(2) They did not intentionally certify false financial statements. 
(3) They were not in privity of contract with the creditors. 
(4) Their engagement letter specifically disclaimed any liability to any party that 
resulted from Markum’s fraudulent conduct. 
c. Which is the true statement concerning an auditor’s statutory legal liability? 
(1) The Securities Act of 1933 broadened the auditor’s liability relative to common 
law and the Securities Exchange Act of 1934 narrowed it. 
(2) Criminal liability only arises under state law. 
(3) The auditor may limit exposure to liability by destroying documents that might 
suggest an improper act. 
(4) The auditor has a greater burden of defense under the Securities Act of 1933 than 
the Securities Exchange Act of 1934. 


DISCUSSION QUESTIONS AND PROBLEMS 


5-16 (OBJECTIVES 5-2, 5-3) The following are five independent scenarios. 


1. Alex Biscuit is one of the partners of a Certified Accountants firm Biscuits and Cream. 
Buscuits and Cream operate as a partnership in Glasgow. Sarah Cream, his other part- 
ner was convicted of manipulating the results of the audit of Red Bean Ltd. The share- 
holders of Red Bean are suing the firm. Will Alex be liable to the lawsuit in a personal 
capacity? Explain. 

2. The Inland Revenue Board has found the directors of Pian Lang Berhad guilty of 
tax evasion. Pian Lang kept two sets of contradictory accounts and documentation. 
One set of accounts and documentation was presented to the auditors Gong Gong 
Chartered Accountants and subsequently the Inland Revenue Board for their desk 
audit. The other version, which was the correct version, was hidden from the auditors 
and the tax authorities. Will Gong Gong Chartered Accountants be liable for the audit 
failure of Pian Lang Berhad. Explain. 

3. The shareholders of Cyberliterate are suing the firm Tak Fa Ham & Associates for 
negligence. The audits of Cyberliterate was performed by an audit junior who was not 
competent using Microsoft Excel. The audit partner Mr Tak did not review the work of his 
junior thoroughly. The audited financial statements were erroneous and were a subject of 
ridicule during the annual general meeting by the members. 

4. The firm Ram Chartered Accountants has received a letter from the Income Tax 
Department requesting that the accountants cooperate in a money laundering case involy- 
ing the directors of Ponyo Pte. Ltd. Ram Chartered Accountants has refused to respond, 
alleging that the audit files are considered privileged between the firm and its client. 
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5. “International Financial Reporting Standard 7: Financial Instruments: Disclosures” mentions 
that disclosures of fair value are not required for an investment in equity instruments 
that do not have a quoted price in an active market for an identical instrument. Your 
client is unhappy that his investment in Cancerfree, a company that implants good 
cells from dogs into humans to cure cancer is not included in his company’s State- 
ment of Financial Position. 


Required Analyze each situation and provide your assessment of the potential resolution of each 
scenario, including potential liability for the auditor or audit firm involved. 


5-17 (OBJECTIVES 5-3, 5-4, 5-5, 5-6) Complete the following statements using the following: 
1. Form 10-K, Engagement letters, Foreign Corrupt Practices Act of 1977, Intent to 
deceive, Negligence, Prudent person, Statutory law, Ultramares doctrine. 


a: are laws that have been passed by the Parliament, Congress or Local 
Legislative Bodies. 

b. Cenco Incorporated v. Seidman & Seidman deals alleged by the auditor in de- 
tecting fraud. 


c. In one decided case, it was held that although the accountants were negligent in de- 
tecting fraud in the accounts payables, they were not liable to the creditors because 
that creditors were not a primary beneficiary. This ruling is known as the 


d. The concept is whereby an auditor is expected only to conductthe audit 
with due care and not to perfection. 
e are signed to formalize the agreements about the services to be provided, 


fees, and timing between CPA firms and their clients. 

f. Annually, every listed company in the United States is required to submit audited 
statements to the SEC as a part of the reports. 

g. In the Hochfelder case, the auditors’ exposure to liability would significantly re- 
duced if the auditors can establish the 

h. makes it illegal to a bribe to an foreign official for the purpose of exerting 
influence and getting or retaining business relations. 


Terms 
a. Due diligence g. Intent to deceive 
b. Reliance on the financial statements hh. Privity of contract 
c. Fraud i. Gross negligence 
d. Ordinary negligence j. Foreseen users 
e. Separate and proportionate k. Material error or omission 
f. Contributory negligence 


Required For each of the 11 blanks in statements 1 through 8, identify the most appropriate term. 
No term can be used more than once. 
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5-18 (OBJECTIVES 5-3, 5-7) The following independent scenarios describe auditor behavioron 
an audit engagement. For each of the scenarios listed above, discuss whether the auditor's 
behavior would be considered nonnegligence, ordinary negligence, gross negligence, 
fraud, or criminal. 

1. Kajari is the audit partner of the team auditing MiracleDrug PLC. Kajari followed 
religiously the British auditing standards when performing the audit and issued an 
unmodified opinion. As all of the audit team members were all accountants, they 
did not realize a material misstatement pertaining the drug contraindications of their 
cancer drug sold in Indonesia. 

2. Chong would normally allocate five days for the audit of HoHo Transport Sdn Bhd. With 
the floods at the client’s place, he had to reduce the numbers of samples to be taken for the 
audit this year to meet the client’s dateline. Chong issued an unmodified opinion on the 
client’s financial statements. 

3. Edith was the audit senior auditing Robbie and Kimmie Kennels Pte. Ltd. She was of 
the opinion that the accounts payable of the company was true and fair to the require- 
ments of the Hong Kong Accounting Standards. However after the audit, one creditor 
complained that the company paid HK$100 less on one invoice. The average amount 
of account payables processed a month is HK10,000,000. 

4. Erica Gomez was the lead auditor at Kiholand BV. During her audits she found a set of 
documents that were incriminating to her husband. Her husband is a supplier to the 
company. She burnt the documents. 

5. Jayson Liem was the audit senior auditing Narnia Narratives PLC. Ten years ago he 
bought a lot of stock in Narnia Narratives under a distant relative’s name. He was 
disappointed with the performance of the stock at the stock market. During the au- 
dit, he noticed that there was one major software development, which needed to be 
impaired as there is no market for software designed for Windows XP. He knew that 
if the project were impaired, the value of his investment would plummet. He decided 
not to impair the project. 


For each of the scenarios listed above, discuss whether the auditor’s behavior would be 
considered nonnegligence, ordinary negligence, gross negligence, constructive fraud, 
fraud, or criminal behavior. 


5-19 (OBJECTIVES 5-4, 5-5) Lauren Yost & Co., a medium-sized CPA firm, was engaged to 
audit Stuart Supply Company. Several staff were involved in the audit, all of whom had at- 
tended the firm’s in-house training program on effective auditing methods. Throughout 
the audit, Yost spent most of her time in the field planning the audit, supervising the staff, 
and reviewing their work. 

A significant part of the audit entailed verifying the physical count, cost, and sum- 
marization of inventory. Inventory was highly significant to the financial statements, 
and Yost knew the inventory was pledged as collateral for a large loan to First City Na- 
tional Bank. In reviewing Stuart’s inventory count procedures, Yost told the president 
she believed the method of counting inventory at different locations on different days 
was highly undesirable. The president stated that it was impractical to count all inven- 
tory on the same day because of personnel shortages and customer preference. After 
considerable discussion, Yost agreed to permit the practice if the president signed a state- 
ment that no other method was practical. The CPA firm had at least one person at each 
site to audit the inventory count procedures and actual count. There were more than 40 
locations. 

Eighteen months later, Yost found out that the worst had happened. Management below 
the president's level had conspired to materially overstate inventory as a means of covering 
up obsolete inventory and inventory losses resulting from mismanagement. The misstate- 
ment occurred by physically transporting inventory at night to other locations after it had 
been counted in a given location. The accounting records were inadequate to uncover these 
illegal transfers. 

Both Stuart Supply Company and First City National Bank sued Lauren Yost & Co. 
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Required 


Required Answer the following questions, setting forth reasons for any conclusions stated: 
a. What defense should Lauren Yost & Co. use in the suit by Stuart? 
b. What defense should Lauren Yost & Co. use in the suit by First City National Bank? 
c. Is Yost likely to be successful in her defenses? 
d. Would the issues or outcome be significantly different if the suit was brought under 
the Securities Exchange Act of 1934? 


5-20 (OBJECTIVE 5-5) The CPA firm of Bigelow, Barton, and Brown was expanding rapidly. 
Consequently, it hired several junior accountants, including a man named Small. The part- 
ners of the firm eventually became dissatisfied with Small’s productivity and warned him 
they would be forced to discharge him unless his output increased significantly. 

At that time, Small was engaged in audits of several clients. He decided that to avoid 
being fired, he would reduce or omit some of the standard auditing procedures listed in 
audit programs prepared by the partners. One of the CPA firm’s clients, Newell Corpo- 
ration, was in serious financial difficulty and had adjusted several of the accounts being 
audited by Small to appear financially sound. Small prepared fictitious audit documenta- 
tion in his home at night to support purported completion of auditing procedures assigned 
to him, although he in fact did not examine the adjusting entries. The CPA firm rendered an 
unmodified opinion on Newell’s financial statements, which were grossly misstated. Sev- 
eral creditors, relying on the audited financial statements, subsequently extended large sums 
of money to Newell Corporation. 


Required Will the CPA firm be liable to the creditors who extended the money because of their 
reliance on the erroneous financial statements if Newell Corporation should fail to pay 
them? Explain.* 


5-21 (OBJECTIVES 5-3, 5-5) Doyle and Jensen, CPAs, audited the accounts of Regal Jewelry, 
Inc., a corporation that imports and deals in fine jewelry. Upon completion of the audit, 
the auditors supplied Regal Jewelry with 20 copies of the audited financial statements. The 
firm knew in a general way that Regal Jewelry wanted that number of copies of the audi- 
tor’s report to furnish to banks and other potential lenders. 

The balance sheet in question was misstated by approximately $800,000. Instead of 
having a $600,000 net worth, the corporation was insolvent. The management of Regal 
Jewelry had doctored the books to avoid bankruptcy. The assets had been overstated by 
$500,000 of fictitious and nonexisting accounts receivable and $300,000 of nonexisting 
jewelry listed as inventory when in fact Regal Jewelry had only empty boxes. The audit 
failed to detect these fraudulent entries. Thompson, relying on the audited financial state- 
ments, loaned Regal Jewelry $200,000. She seeks to recover her loss from Doyle and Jensen. 

Required State whether each of the following is true or false and give your reasons: 

a. If Thompson alleges and proves negligence on the part of Doyle and Jensen, she will 
be able to recover her loss. 

b. If Thompson alleges and proves constructive fraud (that is, gross negligence on the 
part of Doyle and Jensen), she will be able to recover her loss. 

c. Thompson does not have a contract with Doyle and Jensen. 

d. Unless actual fraud on the part of Doyle and Jensen can be shown, Thompson cannot 
recover her loss. 

e. Thompson is a third-party beneficiary of the contract Doyle and Jensen made with 

Regal Jewelry.* 

5-22 (OBJECTIVES 5-5, 5-6) Johnny Kan starts his investment consulting business on 
January 1, 2007. With scarce land resources in Hong Kong, many properties carry the 
nature of both business and residential purposes. Due to limited start-up funding, Johnny 
rents a flat in a multi-purpose building. Johnny and his parents use the office as their resi- 
dential address. During the course of preparing his first annual report for year 2007, in or- 
der to reduce the tax liability, Johnny charges $200,000 as salaries paid to his parents. This 
gives rise to a loss of $50,000 for the financial year. Under the Hong Kong Inland Revenue 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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Ordinance, the employer must file an annual employer’s return of remunerations with the 
Inland Revenue Department (‘IRD’) to report the amount of salaries and other remunera- 
tion paid to all the staff during the year of assessment. In addition, all employers in Hong 
Kong must comply with all legal obligations relating to the Mandatory Provident Fund 
(‘MPF’), which include enrolling all employees in MPF schemes and making monthly MPF 
contributions for them. The Hong Kong Labor Department also requires all employers 
to possess a valid employees’ compensation insurance policy to cover their employees. 
Mary Wong is the auditor of Johnny’s company. When she goes through the documents 
and records, she finds employment agreements entered into with Johnny’s parents and 
monthly acknowledgement receipts from his parents for the salaries paid by the company. 
According to the employment agreements, Johnny’s father and mother are employed in 
the capacity of office assistant and janitor, respectively. However, Mary finds no evidence 
of the employer’s return submitted to IRD, MPF contributions and employment insurance 
for Johnny’s parents. 

Do you think the salaries paid by Johnny to his parents are genuine and legitimate? 
Advise Mary about what she should do in this case. 


5-23 (OBJECTIVE 5-6) Under Section 11 of the Securities Act of 1933 and Section 10(b), Rule 
10b-5, of the Securities Exchange Act of 1934, a CPA may be sued by a purchaser of reg- 
istered securities. The following items relate to what a plaintiff who purchased securities 
must prove in a civil liability suit against a CPA. 
The plaintiff security purchaser must allege or prove: 
1. Material misstatements were included in a filed document. 
2. Amonetary loss occurred. 
3. Lack of due diligence by the CPA. 
4. Privity with the CPA. 
5. Reliance on the financial statements. 
6. The CPA had scienter (knowledge and intent to deceive). 
For each of the items 1 through 6 listed above, indicate whether the statement must be 
proven under 
a. Section 11 of the Securities Act of 1933 only. 
b. Section 10(b) of the Securities Exchange Act of 1934 only. 
c. Both Section 11 of the Securities Act of 1933 and Section 10(b) of the Securities 
Exchange Act of 1934. 
d. Neither Section 11 of the Securities Act of 1933 nor Section 10(b) of the Securities 
Exchange Act of 1934.* 


5-24 (OBJECTIVE 5-5) Johnny Jillians, Chartered Accountant, is the long time external audi- 
tor of Coco Audio Pte Ltd, maker of hi-fi systems. Coco Audio was once famous in the 
1970s for cassette tape decks made for the home. In the first decade of the 21* century, the 
sales of the company were in a slump as the company failed to introduce products suitable 
for playing MP3s. When preparing the audit, Johnny found that the company is still keep- 
ing cassette tape decks as part of the inventory and the amounts are substantial. 

Johnny suggested that Coco Audio impair the cassette tape decks. 

The CFO Esther Tan was not in favor of the impairment. Any attempts to impair obso- 
lete products would result in a big loss in the Income Statement. This will alarm the credi- 
tors. The creditors would press for payment thus creating a crunch in the cash flow of the 
company. As a favor to Esther for the long time support of his audit firm, Johnny decided 
to postpone the impairment to another financial year. 

Two months after the audit report was published, Coco Audio filed for bankruptcy. 
The company was unable to pay their utility bills and the salary of their workers. 

The disabled widow of the founder of Coco Audio, Mary Coco sued the auditor. She 
lost her savings due to the failure of the company. Mary due to her disability has never 
served in the management of the company. 


Will Mary succeed? Support your answer. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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Required 


Required 


/émm 5-25 (OBJECTIVE 5-6) The SEC Enforcement Division investigates possible violations of 
‘OP securities laws, recommends SEC action when appropriate, either in a federal court or 
before an administrative law judge, and negotiates settlements. Litigation Releases, which 

are descriptions of SEC civil and selected criminal suits in the federal courts, are posted on 

the SEC Web site (www.sec.gov/litigation/litreleases.shtml). Find Litigation Release No. 

22902, dated January 9, 2014. 

Required a. What is the nature of the complaint underlying LR No. 22902? 

b. What sections of the federal securities laws are the individuals involved accused of 
violating? 

c. What is the role of the independent auditor in this fraud? What possible defense(s) 
could the auditors use if they were also accused of violating federal securities laws in 
this case? 


CASE 


5-26 (OBJECTIVES 5-5, 5-6) Part 1. Whitlow & Company is a brokerage firm registered 
under the Securities Exchange Act of 1934. The act requires such a brokerage firm to 
file audited financial statements with the SEC annually. Mitchell & Moss, Whitlow’s 
CPAs, performed the annual audit for the year ended December 31, 2016, and rendered 
an unqualified opinion, which was filed with the SEC along with Whitlow’s financial 
statements. During 2016, Charles, the president of Whitlow & Company, engaged in a 
huge embezzlement scheme that eventually bankrupted the firm. As a result, substantial 
losses were suffered by customers and shareholders of Whitlow & Company, including 
Thaxton, who had recently purchased several shares of stock of Whitlow & Company 
after reviewing the company’s 2016 audit report. Mitchell & Moss’s audit was deficient; if 
they had complied with auditing standards, the embezzlement would have been discov- 
ered. However, Mitchell & Moss had no knowledge of the embezzlement, nor can their 
conduct be categorized as reckless. 


Required Answer the following questions, setting forth reasons for any conclusions stated: 
a. What liability to Thaxton, if any, does Mitchell & Moss have under the Securities 
Exchange Act of 1934? 
b. What theory or theories of liability, if any, are available to Whitlow & Company’s cus- 
tomers and shareholders under common law? 


Part 2. Jackson is a sophisticated investor. As such, she was initially a member of a small 
group that was going to participate in a private placement of $1 million of common stock of 
Clarion Corporation. Numerous meetings were held between management and the inves- 
tor group. Detailed financial and other information was supplied to the participants. Upon 
the eve of completion of the placement, it was aborted when one major investor withdrew. 
Clarion then decided to offer $2.5 million of Clarion common stock to the public pursu- 
ant to the registration requirements of the Securities Act of 1933. Jackson subscribed to 
$300,000 of the Clarion public stock offering. Nine months later, Clarion’s earnings dropped 
significantly, and as a result, the stock dropped 20% beneath the offering price. In addition, 
the Dow Jones Industrial Average was down 10% from the time of the offering. 

Jackson sold her shares at a loss of $60,000 and seeks to hold all parties liable who 
participated in the public offering, including Clarion’s CPA firm of Allen, Dunn, and Rose. 
Although the audit was performed in conformity with auditing standards, there were some 
relatively minor misstatements. The financial statements of Clarion Corporation, which 
were part of the registration statement, also contained minor misleading facts. It is believed 
by Clarion and Allen, Dunn, and Rose that Jackson’s asserted claim is without merit. 

Required Answer the following questions, setting forth reasons for any conclusions stated: 
a. If Jackson sues under the Securities Act of 1933, what will be the basis of her claim? 
b. What are the probable defenses that might be asserted by Allen, Dunn, and Rose in 
light of these facts?* 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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\ THE AUDIT PROCESS 


CHAPTERS 6-13 


ART 2 presents the audit process in a manner that 

will enable you to apply the concepts developed in 

these chapters to any audit area. Because the planning 
concepts covered in these chapters will be used extensively 
throughout the rest of the book, it is essential for you to master 
this material and fully understand the importance of audit 
planning. 


Chapters 6 and 7 deal with auditors’ and manage- 
ments’ responsibilities, management assertions and 
audit objectives, and general audit evidence concepts. 


Chapters 8 through 12 study various aspects of 
audit planning in depth, including risk assessment, 
understanding internal control, and auditors’ responsi- 
bility for detecting fraud. 


Chapter 13 summarizes and integrates audit plan- 
ning and audit evidence. 


Throughout the remainder of the book, many of the 
concepts are illustrated with examples based on the Hillsburg 
Hardware Company. The financial statements and other infor- 
mation from the company’s annual report are included in the 
glossy insert material to the textbook. 
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CHAPTER 


AUDIT RESPONSIBILITIES 
AND OBJECTIVES 
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LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


6-1 Explain the objective of con- 
ducting an audit of financial 
statements and an audit of 
internal controls. 

6-2 Distinguish management's 
responsibility for the finan- 
cial statements from the audi- 
tor’s responsibility for veri- 
fying those statements. 

6-3 — Explain the auditor's 
responsibility for discover- 
ing material misstatements 
due to fraud or error. 

6-4 Describe the need to main- 
tain professional skepticism 
when conducting an audit. 

6-5 Describe the key ele- 
ments of an effective profes- 
sional judgment process. 

6-6 Identify the benefits of 
a cycle approach to seg- 
menting the audit. 

6-7 Describe why the auditor 
obtains assurance by audit- 
ing transactions and end- 
ing balances, including pre- 
sentation and disclosure. 

6-8 Distinguish among the man- 
agement assertions about 
financial information. 

6-9 Link transaction-related 
audit objectives to man- 
agement assertions for 
classes of transactions. 

6-10 Link balance-related and pre- 
sentation and disclosure- 
related audit objectives to 
management assertions. 

6-I 1 Explain the relationship 
between audit objectives and 
the accumulation of audit 
evidence. 
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Riding the Tiger: Indian Computer Company 
Engages in Billion-Dollar Fraud 


During the period 2003 to 2008, Satyam Computer Services Limited, an information technol- 
ogy services company based in Hyderabad, India, that serviced more than a third of the Fortune 
500 companies, roiled Indian stock markets when it announced it deceived investors by engag- 
ing in a massive fraud. Company chairman Ramalinga Raju resigned after announcing that 
50.4 billion rupees ($1.04 billion) of the 53.6 billion rupees the company listed as assets in its 
financial statements for the second 
quarter ending in September 2008 
did not exist. 


During the period of the fraud, 
senior management manufactured 
over 6,000 fictitious invoices rep- 
resenting over $1 billion in revenue 
for services that were never pro- 
vided, in some cases for customers 
that did not exist. Management 
also created false bank statements 
to reflect payments on the false 
invoices and support the fictitious 
cash balances. Satyam provided 
certain employees with an administrative “super user” login identification and password that 
allowed them to access the invoice management system to record the false invoices. This pro- 
cess allowed those invoices to be included in revenue, but concealed their existence from the 
heads of Satyam’s business units, who would recognize that the services had not been provided. 


Satyam’s auditors sent confirmations to verify the existence of the bank balances. However, 
they did not maintain control over the confirmations as required by auditing standards. The 
audit engagement team relied on Satyam management to mail out the confirmation requests 
to the banks, and to return the confirmation responses to the engagement team, instead of 
directly contacting the banks as required by auditing standards. 


Raju admitted that he intentionally maintained the inflated revenues and profits because public 
knowledge of the company’s poor performance would likely lead to a takeover of the company, 
thereby exposing the fraud. Raju indicated, “It was like riding a tiger, not knowing how to get 
off without being eaten.” On January 7, 2009, the New York Stock Exchange suspended trad- 
ing of the company’s American Depository Shares (ADS). When trading resumed on January 
12, 2009, Satyam’s ADS price declined nearly 85 percent to close at $1.46. The Government 
of India assumed control of the company by dissolving Satyam’s Board of Directors and then 
selected a strategic investor to run the company. 


Sources: |. “SEC Charges Satyam Computer Services with Financial Fraud,” April 5, 2011 (www 
.sec.gov); 2. SEC Litigation Release 21915, April 5, 2011 (www.sec.gov); 3. PCAOB Release 
No. 105-201 1-002, April 5, 2011 (pcaobus.org/Enforcement). 


The Satyam story illustrates failure by the auditors to achieve the objectives of 
the audit of the company’s financial statements. This chapter describes the overall 
objectives of the audit, the auditor’s responsibilities in conducting the audit, and the 
specific objectives the auditor tries to accomplish. Without an understanding of these 
topics, planning and accumulating audit evidence during the audit has no relevance. 
Figure 6-1 summarizes the five topics that provide keys to understanding evidence 
accumulation. These are the steps used to develop specific audit objectives. 


OBJECTIVE OF CONDUCTING AN AUDIT 
OF FINANCIAL STATEMENTS 


Explain the objective of 
conducting an audit of financial 
statements and an audit of 
internal controls. 


The preface to the clarified AICPA auditing standards indicates 


The purpose of an audit is to provide financial statement users with an opinion by the auditor 
on whether the financial statements are presented fairly, in all material respects, in accor- 


dance with the applicable financial accounting framework. An auditor’s opinion enhances the 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education Limited, 2016. ProQu@dh & pce CéntraA W ie BEES PDIN SPBIMUFLESA NOD OB HEOOKH GE Gil. action 2?docID bGEB606. 


degree of confidence that intended users can place in the financial statements. 


Source: AICPA Professional Standards, U.S. Auditing Standards AICPA (Clarified), 2015. Copyright by American Institute of 
CPAs. All rights reserved. Used with permission. 


Our primary focus is the section that emphasizes issuing an opinion on financial 
statements. For larger public companies, the auditor also issues a report on internal 
control over financial reporting as required by Section 404 of the Sarbanes—Oxley 
Act. Auditors accumulate evidence in order to reach conclusions about whether the 
financial statements are fairly stated and to determine the effectiveness of internal 
control, after which they issue the appropriate audit report. 

If the auditor believes that the statements are not fairly presented or is unable to 
reach a conclusion because of insufficient evidence, the auditor has the responsibil- 
ity of notifying users through the auditor’s report. Subsequent to their issuance, if 
facts indicate that the statements were not fairly presented, as in the Satyam case, 
the auditor will probably have to demonstrate to the courts or regulatory agencies 
that the audit was conducted in a proper manner and the auditor reached reasonable 
conclusions. 


FIGURE 6-1 Steps to Develop Audit Objectives 


Understand objectives and 
responsibilities for the audit 


ee eee: 


Divide financial statements 
into cycles 


Se 


Know management assertions 
about financial statements 


— 


Know general audit objectives 
for classes of transactions, 
accounts, and disclosures 


Know specific audit objectives 
for classes of transactions, 
accounts, and disclosures 
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Understand objectives 
and responsibilities 
for the audit 


Divide financial 
statements 
into cycles 


Know management 
assertions about 
financial statements 


Know general audit 
objectives for classes 
of transactions, 
accounts, and 
disclosures 


Know specific audit 
objectives for classes 
of transactions, 
accounts, and 
disclosures 


MANAGEMENT?’S RESPONSIBILITIES 


Distinguish management's 
responsibility for the financial 
statements from the auditor’s 
responsibility for verifying those 
statements. 
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The responsibility for adopting sound accounting policies, maintaining adequate 
internal control, and making fair representations in the financial statements rests with 
management rather than with the auditor. Because they operate the business daily, a 
company’s management knows more about the company’s transactions and related 
assets, liabilities, and equity than the auditor. In contrast, the auditor’s knowledge of 
these matters and internal control is limited to that acquired during the audit. 

The annual reports of many public companies include a statement about man- 
agement’s responsibilities and relationship with the CPA firm. Figure 6-2 presents 
selected sections of the report of management for International Business Machines 
(IBM) Corporation as a part of its annual report. Read the report carefully to deter- 
mine what management states about its responsibilities. 

Management’s responsibility for the integrity and fairness of the representations 
(assertions) in the financial statements carries with it the privilege of determining 
which presentations and disclosures it considers necessary. If management insists on 
financial statement disclosure that the auditor finds unacceptable, the auditor can 
either issue an adverse or qualified opinion or withdraw from the engagement. 

The Sarbanes—Oxley Act requires the chief executive officer (CEO) and the chief finan- 
cial officer (CFO) of public companies to certify the quarterly and annual financial state- 
ments submitted to the SEC. In signing those statements, management certifies that the 
financial statements fully comply with the requirements of the Securities Exchange Act of 
1934 and that the information contained in the financial statements fairly presents, in all 
material respects, the financial condition and results of operations. The Sarbanes—Oxley 
Act provides for criminal penalties, including significant monetary fines or imprisonment 
up to 20 years, for anyone who knowingly falsely certifies those statements. 


International Business Machines Corporation’s 
Report of Management 


FIGURE 6-2 


REPORT OF MANAGEMENT 


International Business Machines Corporation and Subsidiary Companies 


Management Responsibility for Financial Information 


Responsibility for the integrity and objectivity of the financial information presented in this Annual Report 
rests with IBM management. The accompanying financial statements have been prepared in accordance with 
accounting principles generally accepted in the United States of America, applying certain estimates and 
judgments as required. 


IBM maintains an effective internal control structure. It consists, in part, of organizational arrangements 
with clearly defined lines of responsibility and delegation of authority, and comprehensive systems and 
control procedures. An important element of the control environment is an ongoing internal audit 
program. Our system also contains self-monitoring mechanisms, and actions are taken to correct 
deficiencies as they are identified. 


[third paragraph omitted] 


The Audit Committee of the Board of Directors is composed solely of independent, non-management 
directors, and is responsible for recommending to the Board the independent registered public accounting 
firm to be retained for the coming year, subject to stockholder ratification. The Audit Committee meets 
periodically and privately with the independent registered public accounting firm, with the company’s internal 
auditors, as well as with IBM management, to review accounting, auditing, internal control structure, and 
financial reporting matters. 


Tage Nemes Mato (4 


Virginia M. Rometty Martin J. Schroeter 
President and Chief Executive Officer Senior Vice President and Chief Financial Officer, 
February 24, 2015 Finance and Enterprise Transformation 

February 24, 2015 


Source: IBM 2007 Annual Report: Report of Management. 
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AUDITOR’S RESPONSIBILITIES 


AICPA auditing standards state 


The overall objectives of the auditor, in conducting an audit of financial statements, are to: 


(a) obtain reasonable assurance about whether the financial statements as a whole are free 
from material misstatement, whether due to fraud or error, thereby enabling the audi- 
tor to express an opinion on whether the financial statements are presented fairly, in all 
material respects, in accordance with an applicable financial reporting framework; and 

(b) report on the financial statements, and communicate as required by auditing stan- 
dards, in accordance with the auditor’s findings. 


Source: AICPA Professional Standards, U.S. Auditing Standards AICPA (Clarified), “Overall Objectives of the Independent Auditor 
(AU-C 200),” 2015. Copyright by American Institute of CPAs. All rights reserved. Used with permission. 


This paragraph discusses the auditor’s responsibility for detecting material 
misstatements in the financial statements. When the auditor also reports on the effec- 
tiveness of internal control over financial reporting, the auditor is also responsible for 
identifying material weaknesses in internal control over financial reporting. The audi- 
tor’s responsibilities for audits of internal control are discussed in Chapters 11 and 12. 

This paragraph and the related discussion in the standards about the auditor's respon- 
sibility to detect material misstatements include several important terms and phrases. 


Material Versus Immaterial Misstatements Misstatements are usually considered 
material if the combined uncorrected errors and fraud in the financial statements 
would likely have changed or influenced the decisions of a reasonable person using 
the statements. Although it is difficult to quantify a measure of materiality, auditors 
are responsible for obtaining reasonable assurance that this materiality threshold has 
been satisfied. It would be extremely costly (and probably impossible) for auditors to 
have responsibility for finding all immaterial errors and fraud. 


Reasonable Assurance Assurance is a measure of the level of certainty that the 
auditor has obtained at the completion of the audit. Auditing standards indicate 
reasonable assurance is a high, but not absolute, level of assurance that the financial 
statements are free of material misstatements. The concept of reasonable, but not 
absolute, assurance indicates that the auditor is not an insurer or guarantor of the cor- 
rectness of the financial statements. Thus, an audit that is conducted in accordance 
with auditing standards may fail to detect a material misstatement. 

The auditor is responsible for reasonable, but not absolute, assurance for several 
reasons: 


1. Most audit evidence results from testing a sample of a population such as 
accounts receivable or inventory. Sampling inevitably includes some risk of not 
uncovering a material misstatement. Also, the areas to be tested; the type, extent, 
and timing of those tests; and the evaluation of test results require significant 
auditor judgment. Even with good faith and integrity, auditors can make mistakes 
and errors in judgment. 

2. Accounting presentations contain complex estimates, which inherently involve 
uncertainty and can be affected by future events. As a result, the auditor has to 
rely on evidence that is persuasive, but not convincing. 

3, Fraudulently prepared financial statements are often extremely difficult, if not impos- 
sible, for the auditor to detect, especially when there is collusion among management. 


If auditors were responsible for making certain that all the assertions in the state- 
ments were correct, the types and amounts of evidence required and the resulting 
cost of the audit function would increase to such an extent that audits would not be 
economically practical. Even then, auditors would be unlikely to uncover all material 
misstatements in every audit. The auditor’s best defense when material misstatements 
are not uncovered is to have conducted the audit in accordance with auditing standards. 
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Explain the auditor’s 
responsibility for discovering 
material misstatements due to 
fraud or error. 


IN THE MATTER 
OF ROBERT 
PINKAS 


Auditor’s Responsibilities 
for Detecting Material 
Errors 


Auditor’s Responsibilities 


for Detecting Material 
Fraud 
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Pinkas misappropriated $173,000 from a fund client 
to pay the costs of defending himself in an unrelated 
commission investigation. He subsequently made 
material misrepresentations to the fund’s investors 
about the misappropriation, telling them that multi- 
ple law firms had reviewed the fund’s indemnification 
provisions and concluded that his use of fund assets 
to cover his attorney’s fees in the other matter was 
appropriate. Pinkas then misappropriated $632,000 
from the same client to cover the disgorgement he 
agreed to pay as part of a settlement in the other 
matter with the Commission. After misappropriating 
these funds, he violated an investment adviser bar 
imposed in the other matter by continuing to associ- 
ate with an investment adviser. 

Pinkas, 58 years old, lives in Ohio. He was an 
investment adviser to several pooled investment 


vehicles. He was a defendant in an action involving, 
among other things, the overvaluation of portfolio 
investments and misrepresentations and omissions 

to an advisory client. Pinkas agreed to a settlement 
with the Commission in September 2010, pursuant 

to which he was enjoined from violating various 
provisions of the federal securities laws, ordered to 
pay a $325,000 civil penalty and $632,729 in disgorge- 
ment and prejudgment interest, barred from serving as 
an officer or director of a publicly-traded company for 
five years, and barred from associating with any invest- 
ment adviser with a right to reapply after one year. 


Sources: United States of America Before the Securities and 
Exchange Commission Investment Advisers Act of 1940. Release 
No. 3371. Administrative Processing File No. 3-14759. (February 
15, 2012) (www.sec.govilitigation/admin/20| 2/ia-337 | pdf) 


ErrorsVersus Fraud Auditing standards distinguish between two types of misstatements: 
errors and fraud. Either type of misstatement can be material or immaterial. An error is an 
unintentional misstatement of the financial statements, whereas fraud is intentional. Two 
examples of errors are: a mistake in extending price times quantity on a sales invoice and 
overlooking older raw materials in determining the lower of cost or market for inventory. 

For fraud, there is a distinction between misappropriation of assets, often called 
defalcation or employee fraud, and fraudulent financial reporting, often called 
management fraud. An example of misappropriation of assets is a clerk taking cash 
at the time a sale is made and not entering the sale in the cash register. An example of 
fraudulent financial reporting is the intentional overstatement of sales near the bal- 
ance sheet date to increase reported earnings. 


Auditors spend a great portion of their time planning and performing audits to detect 
unintentional mistakes made by management and employees. Auditors find a variety 
of errors resulting from such things as mistakes in calculations, omissions, misunder- 
standing and misapplication of accounting standards, and incorrect summarizations 
and descriptions. 


Auditing standards make no distinction between the auditor’s responsibilities for 
searching for errors and fraud. In either case, the auditor must obtain reason- 
able assurance about whether the statements are free of material misstatements. 
Throughout the rest of this book, we consider how the auditor plans and performs 
audits for detecting both errors and fraud. The standards recognize that fraud is often 
more difficult to detect because management or the employees perpetrating the fraud 
attempt to conceal the fraud, similar to the Satyam case. Still, the difficulty of detection 
does not change the auditor’s responsibility to properly plan and perform the audit to 
detect material misstatements, whether caused by fraud or error. 


Fraud Resulting from Fraudulent Financial Reporting Versus Misappropriation 
of Assets Both fraudulent financial reporting and misappropriation of assets are 
potentially harmful to financial statement users, but there is an important differ- 
ence between them. Fraudulent financial reporting harms users by providing them 
incorrect financial statement information for their decision making. When assets are 
misappropriated, stockholders, creditors, and others are harmed because assets are no 
longer available to their rightful owners. 

Typically, fraudulent financial reporting is committed by management, some- 
times without the knowledge of employees. Management is in a position to make 
accounting and reporting decisions without employees’ knowledge. An example is 
the decision to omit an important footnote disclosure about pending litigation. 
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Usually, but not always, theft of assets is perpetrated by employees and not by man- 
agement, and the amounts are often immaterial. However, there are well-known exam- 
ples of extremely material misappropriation of assets by employees and management, 
similar to the Adelphia fraud described in the vignette box on the previous page. 

There is an important distinction between the theft of assets and misstatements 
arising from the theft of assets. Consider the following three situations: 


1. Assets were taken and the theft was covered by misstating assets. For example, 
cash collected from a customer was stolen before it was recorded as a cash 
receipt, and the account receivable for the customer’s account was not credited. 
The misstatement has not been discovered. 

2. Assets were taken and the theft was covered by understating revenues or over- 
stating expenses. For example, cash from a cash sale was stolen, and the transac- 
tion was not recorded. Or, an unauthorized disbursement to an employee was 
recorded as a miscellaneous expense. The misstatement has not been discovered. 

3. Assets were taken, but the misappropriation was discovered. The income state- 
ment and related footnotes clearly describe the misappropriation. 


In all three situations, there has been a misappropriation of assets, but the finan- 
cial statements are misstated only in situations 1 and 2. In situation 1, the balance 
sheet is misstated, whereas in situation 2, revenues or expenses are misstated. 


In obtaining reasonable assurance that the financial statements are free of material 
misstatement, the auditor takes into account applicable legal and regulatory frame- 
works relevant to the client. For example, when auditing the financial statements of a 
bank, the auditor would need to consider requirements of banking regulators such as 
the FDIC, Federal Reserve, or state banking commission, among others. The auditor’s 
ability to detect material misstatements arising from failure to comply with laws and 
regulations is impacted by the following factors: 


* Many laws and regulations primarily relate to operating aspects of the business 
and typically do not affect the financial statements and are not captured by the 
client’s information systems related to financial reporting. 

* Noncompliance may involve actions to conceal it, such as collusion, forgery, 
deliberate failure to record transactions, management override of controls, or 
intentional misrepresentations made to the auditor. 

¢ Whether an act constitutes noncompliance is a matter for legal determination, 
such as by a court of law. 


One of the difficulties for the auditor is determining how laws and regulations 
impact financial statement amounts and disclosures. As the impact from noncompli- 
ance is further removed from affecting financial statements, the less likely the audi- 
tor is to become aware of or recognize noncompliance when auditing the financial 
statements. The auditor’s responsibilities regarding noncompliance with laws and 
regulations (frequently referred to as illegal acts) depend on whether the laws or regula- 
tions are expected to have a direct effect on the amounts and disclosures in the financial 
statements. 


Laws and Regulations with a Direct Effect on the Financial Statements The pro- 
visions of certain laws and regulations, such as tax and pension laws and regulations, 
are generally recognized to have a direct effect on the amounts and disclosures in the 
financial statements. For example, a violation of federal tax laws directly affects income 
tax expense and income taxes payable. The auditor should obtain sufficient appropriate 
evidence regarding material amounts and disclosures that are directly affected by laws 
and regulations. For example, in auditing income tax expense, to identify whether there 
have been any material violations of federal or state tax laws, the auditor might hold 
discussions with client personnel and examine reports issued by the Internal Revenue 
Service after completion of an examination of the client’s tax return. 
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Auditor’s Responsibility 


to Consider Laws and 
Regulations 


Laws and Regulations That Do Not Have a Direct Effect on the Financial 
Statements The provisions of many laws and regulations are unlikely to have a direct 
effect on the financial statements. However, compliance with those laws and regula- 
tions is often fundamental to operation of the business and necessary to avoid mate- 
rial penalties. Examples include complying with the terms of an operating license, 
federal employee safety requirements, and environmental regulations. 

The auditor should perform the following procedures to identify instances of 
noncompliance with other laws and regulations that may have a material effect on the 
financial statements: 


¢ Inquire of management and those charged with governance about whether the 
entity is in compliance with such laws and regulations. 
* Inspect correspondence, ifany, with the relevant licensing or regulatory authorities. 


During the audit, other audit procedures may bring instances of suspected 
noncompliance to the auditor’s attention. However, in the absence of identified or 
suspected noncompliance, the auditor is not required to perform audit procedures 
beyond those previously discussed. 


Audit Procedures When Noncompliance Is Identified or Suspected If the audi- 
tor becomes aware of information concerning an instance of noncompliance or 
suspected noncompliance with laws and regulations, the auditor should obtain an 
understanding of the nature and circumstances of the act. Additional information 
should be obtained to evaluate the possible effects on the financial statements. 

The auditor should discuss the matter with management at a level above those 
involved with the suspected noncompliance and, when appropriate, those charged 
with governance. If management or those charged with governance are unable to 
provide sufficient information that supports that the entity is in compliance with the 
laws and regulations, and the auditor believes the effect of the noncompliance may be 
material to the financial statements, the auditor should consider the need to obtain 
legal advice. The auditor should also evaluate the effects of the noncompliance on 
other aspects of the audit, including the auditor’s risk assessment and the reliability of 
other representations from management. 


Reporting of Identified or Suspected Noncompliance Unless the matters involved 
are inconsequential, the auditor should communicate with those charged with gover- 
nance matters involving noncompliance with laws and regulations that came to the 
auditor’s attention during the course of the audit. If the matter involved is believed to 
be intentional and material, it should be communicated to those charged with gover- 
nance, such as the board of directors, as soon as practicable. The auditor should also 
identify whether a responsibility exists to report the identified or suspected noncom- 
pliance to parties outside the entity, such as regulatory authorities. 

Ifthe noncompliance has a material effect and has not been adequately reflected in 
the financial statements, the auditor should express a qualified or adverse opinion on 
the financial statements. If the auditor is precluded by management or those charged 
with governance from obtaining sufficient appropriate evidence to evaluate whether 
noncompliance that may be material to the financial statements has occurred or is 
likely to have occurred, the auditor should express a qualified opinion or disclaim an 
opinion on the financial statements on the basis of the scope limitation. 


PROFESSIONAL SKEPTICISM 
‘OBJECTIVE 6-40 Auditing standards require that an audit be designed to provide reasonable assurance 


ae of detecting both material errors and fraud in the financial statements. To accom- 
Describe the need to maintain : . : , , ; 
Sroleesional skentcisin when plish this, the audit must be planned and performed with an attitude of professional 
conducting an audit. skepticism in all aspects of the engagement, recognizing the possibility that a material 
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misstatement could exist regardless of the auditor’s prior experience with the integrity 
and honesty of client management and those charged with governance. 


Aspects of Professional Skepticism Professional skepticism consists of two pri- 
mary components: a questioning mind and a critical assessment of the audit evidence. 
While auditors would like to believe that the organizations they accept as clients 
have integrity and are honest, maintaining a questioning mind helps auditors offset 
the natural bias to want to trust the client. A questioning mindset means the audi- 
tor approaches the audit with a “trust but verify” mental outlook. Similarly, as they 
obtain and evaluate evidence supporting financial statement amounts and disclosures, 
professional skepticism also involves a critical assessment of the evidence that includes 
asking probing questions and paying attention to inconsistencies. When auditors 
embrace the responsibility to maintain a questioning mind and to critically evaluate 
evidence, they significantly reduce the likelihood of audit failure throughout the audit. 


Elements of Professional Skepticism While the concept of professional skepticism 
has been a foundational element of auditing standards for years, it continues to be dif- 
ficult to implement in practice. Unfortunately, auditors are human and thus are subject 
to natural biases to trust individuals they know and with whom they interact on a reg- 
ular basis. In an audit environment, auditors sometimes convince themselves that they 
only accept clients they can trust and who have high integrity. Thus, it is often difficult 
for auditors to embrace the possibility that even their clients may lack competence or 
may try to deceive them throughout the entire audit process. Despite these limitations, 
auditors need to work to overcome these judgment biases and they need to be continu- 
ally reminded of the importance of maintaining appropriate professional skepticism, 
and recognize that the risk of material misstatements is present in all audits. 

Academic research on the topic of professional skepticism suggests there are six 
characteristics of skepticism:! 


1. Questioning mindset—a disposition to inquiry with some sense of doubt 

2. Suspension of judgment—withholding judgment until appropriate evidence is 
obtained 

3. Search for knowledge—a desire to investigate beyond the obvious, with a desire 
to corroborate 

4. Interpersonal understanding—recognition that people’s motivations and percep- 
tions can lead them to provide biased or misleading information 


and critical assessment of audit evidence as a result 
of subconscious human biases and other circum- 


PCAOB STAFF 
ALERT ON 


The PCAOB publishes Staff Audit Practice Alerts to 
highlight new, emerging, or otherwise noteworthy 


PROFESSIONAL 
SKEPTICISM 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


circumstances that may affect how auditors conduct 
audits under the existing requirements of the 
PCAOB standards. In December 2012, the PCAOB 
issued Staff Audit Practice Alert No. 10, Maintain- 
ing and Applying Professional Skepticism in Audits, 
emphasizing that professional skepticism is essential 
to the performance of effective audits, and it is to 
be applied throughout the audit by each individual 
auditor on the engagement team. It is especially 
important in those areas of the audit that involve 
significant management judgments or transactions 
outside the normal course of business, and it is 
important in the consideration of fraud. 

The Alert describes important impediments to 
professional skepticism, noting that auditors are 
often challenged in maintaining a questioning mindset 


stances. These can cause auditors to gather, evaluate, 
rationalize, and recall information in a manner that 

is consistent with expectations and pressures of 

the client rather than external users. Incentives and 
pressures exist that interfere with the application of 
professional skepticism, allowing subconscious biases 
to prevail. Fee pressures, scheduling, or workload 
demands may lead auditors to accept information 
too quickly. And, over time, auditors may be lured 
into placing too much trust in management, which 
causes them to avoid negative encounters with mem- 
bers of management. 


Source: PCAOB Staff Practice Alert No. 10, Maintaining and 
Applying Professional Skepticism in Audits, December 4, 2012 
(pcaobus.org). 


' Based on “Development of a Scale to Measure Professional Skepticism,” by R. Kathy Hurtt, Auditing: A Journal of Practice & 


Theory, May 2010. 
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5. Autonomy—the self-direction, moral independence, and conviction to decide for 
oneself, rather than accepting the claims of others 

6. Self-esteem—the self-confidence to resist persuasion and to challenge assump- 
tions or conclusions 


Awareness of these six elements throughout the engagement can help auditors 
fulfill their responsibility to maintain an appropriate level of professional skepticism. 
Asking the right questions and probing further with follow-up questions until the 
auditor is satisfied with the responses, while being alert to unusual behaviors from 
respondents as they answer questions, can make the difference between detecting and 
failing to detect a material misstatement in the financial statements. 


PROFESSIONAL JUDGMENT 


Describe the key elements of an 
effective professional judgment 
process. 
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To assist auditors with maintaining an appropriate level of professional skepticism 
when professional judgments are made during an audit, the profession has devel- 
oped professional judgment frameworks that illustrate an effective decision-making 
process and that guide auditors’ thinking to help them be aware of their own judg- 
ment tendencies, traps, and biases. 


Elements of the Judgment Process The Center for Audit Quality’s Professional 
Judgment Resource outlines five key elements of a professional judgment process, as 
illustrated in Figure 6-3, that auditors apply when making professional judgments. 


Identify and Define the Issue The starting point to an effective professional judg- 
ment begins with identifying and defining the issue by carefully analyzing the situ- 
ation and its potential effect on the audit. Failure to identify the correct issue often 
leads to an incorrect analysis and an inappropriate judgment. Taking time to identify 
the primary issue to be addressed and incorporating perspectives on other important 
considerations that need to be evaluated are both part of the initial step in developing 
an appropriate conclusion. As part of this step, the auditor considers the impact of the 


FIGURE 6-3 Elements of an Effective Judgment Process 


Identify 
and Define 
the Issue 


Review and Gather the 
Complete the Facts and 
Documentation Information 
and Rationale and Identify 

for the the Relevant 
Conclusion r Literature 


Perform the 
Make the Analysis and 
Decision Identify 

Alternatives 


Source: Professional Judgment Resource, Provided courtesy of the Center for Audit Quality (2014). 
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issue on the financial statements, the level of complexity and uncertainty surround- 
ing the issue, whether there are any related issues that should be considered, and the 
impact of the issue on planned audit procedures. For example, an entity may have 
recorded an unusual sales transaction that involves terms different from the normal 
course of business. The auditor may benefit from first thinking about the important 
issues associated with this transaction, such as whether the terms of the transaction 
support its inclusion as revenue in the financial statements, whether there are unique 
valuation concerns associated with related receivables, and whether any unique dis- 
closures should be made in light of its unusual nature. 


Gather the Facts and Information and Identify the Relevant Literature With the 
problem defined, the auditor seeks to understand the relevant facts and available infor- 
mation concerning the issue. This might include obtaining facts and information about 
key inputs and assumptions to a transaction, event, or situation through discussions 
with client personnel who are knowledgeable of the situation. When gathering facts 
and information, the auditor should be alert for other information that either confirms 
or contradicts facts and information, in addition to evaluating the sources of that infor- 
mation. To evaluate the effect of the issue on the audit of the financial statements, the 
auditor should consider the accounting and auditing standards and rules relevant to 
the issue. As more is learned about the facts and circumstances surrounding the issue, 
the auditor may determine that subject-matter experts are needed to make the judgment. 
For example, the auditor may need to gather contracts related to the unusual sales trans- 
action in addition to other documentation evidencing delivery of products or services 
associated with the sale, and the auditor may want to discuss the transaction with man- 
agement, including those in sales functions, to better understand the business rationale 
underlying the transaction so that the auditor is aware of those facts when evaluating the 
appropriateness of the revenue recognition in light of GAAP requirements. 


Perform the Analysis and Identify Potential Alternatives The next element of the 
professional judgment process involves analyzing the issue based on the facts and infor- 
mation gathered and the relevant authoritative literature identified. As part of that anal- 
ysis, the auditor considers a number of factors such as whether he or she understands 
the form and substance of the transaction or event, whether the relevant authoritative 
literature has been applied consistently by the client to similar situations, whether the 
auditor has been able to corroborate the facts and assumptions that are important to 
the analysis, and whether the auditor has identified any discrepancies or inconsistencies 
in the facts and information obtained. For example, the auditor would determine if the 
facts and information associated with the unusual sales transaction satisfy the account- 
ing criteria for revenue recognition and related financial statement disclosure. The audi- 
tor would consider whether there is any information that is incomplete or contradictory 
with the information used by the entity to justify the inclusion of that revenue in the 
financial statements and would obtain other information to resolve any inconsistencies. 


Make the Decision Once the analysis of the facts and information has been com- 
pleted, the auditor applies judgment to make a decision. The analysis may identify 
only one appropriate response to the issue, or it may conclude that there are multiple 
responses that could reasonably be made in the circumstances, requiring the auditor to 
identify which alternative best addresses the issue. After making the decision, the audi- 
tor should step back and evaluate the judgment process to determine that all of the key 
activities in the judgment process have been appropriately performed. In light of all the 
information obtained for the unusual sales transaction, the auditor would determine 
whether the inclusion of the transaction is in accordance with accounting standards. 


Review and Complete the Documentation and Rationale for the Conclusion As the 
auditor articulates in written form the rationale of his or her judgment, the auditor may 
find that the reasoning appears faulty or incomplete and therefore is not persuasive. This 
should direct the auditor to evaluate which aspects of the analysis and judgment process 
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jail Strategies to Mitigate Common Judgment Tendencies 


Judgment Tendency Strategy to Avoid or Mitigate Tendency 


Confirmation: The tendency to put more weight Make the opposing case and consider alternative 
on information that is consistent with initial explanations 
beliefs or preferences Consider potentially disconfirming or conflicting 
information 


Overconfidence: The tendency to overestimate one’s own _— Challenge opinions and experts 
abilities to perform tasks or to make accurate assess- | Challenge underlying assumptions 
ments of risks or other judgments and decisions 


Anchoring: The tendency to make assessments by Solicit input from others 
starting from an initial value and then adjusting Consider management bias, including the potential 
insufficiently away from that initial value for fraud or material misstatements 
Availability: The tendency to consider information Consider why something comes to mind 
that is easily retrievable or what’s easily accessible Obtain and consider objective data 
as being more likely or more relevant Consult with others and make the opposing case 


Source: Professional Judgment Resource, Provided courtesy of the Center for Audit Quality (2014). 


may warrant further consideration. The process of documenting helps the auditor to 
be more objective and complete in assessing the reasoning used in reaching a judgment 
decision. For example, the auditor’s documentation of the facts and information associ- 
ated with the unusual sales transaction and the auditor’s rationale for concluding the 
transaction was recorded in accordance with standards and may help the auditor identify 
for further consideration any aspects that might not be clear or persuasive before reach- 
ing a final conclusion about the appropriateness of the accounting treatment. 

The judgment process illustrated by Figure 6-3 (p. 174) is often iterative and may 
require some steps to be combined, repeated, or evaluated in a different order. 


Potential Judgment Tendencies, Traps, and Biases Auditors should be alert for 
potential judgment tendencies, traps, and biases that may impact the decision-making 
process. All people are subject to common pitfalls that affect their ability to make 
sound judgments. A number of research studies have identified common judgment 
tendencies along with a number of strategies that can be employed to mitigate their 
effects. Table 6-1 includes four common judgment tendencies and related strategies to 
avoid them and mitigate bias. 

Awareness of these and other potential traps helps the auditor take steps to miti- 
gate their effects and strengthen professional skepticism. There are a number of other 
techniques auditors can employ to avoid potential traps, such as reassessing how 
the decision or judgment was reached, explaining the judgment rationale to others, 
and engaging in self-reflection that includes assessing whether time pressures, self- 
interest, and biases might have influenced the auditor’s decision-making process. 


CONCEPT CHECK 


I. Distinguish between management’s and the auditor’s responsibility for the financial 
statements being audited. 


2. Explain the concept of professional skepticism and identify its two elements. 


FINANCIAL STATEMENT CYCLES 


Audits are performed by dividing the financial statements into smaller segments or 
components. The division makes the audit more manageable and aids in the assign- 
ment of tasks to different members of the audit team. For example, most auditors 
treat fixed assets and notes payable as different segments. Each segment is audited 
separately but not on a completely independent basis. (For example, the audit of fixed 
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assets may reveal an unrecorded note payable.) After the audit of each segment is com- 
pleted, including interrelationships with other segments, the results are combined. A 
conclusion can then be reached about the financial statements taken as a whole. 

There are different ways of segmenting an audit. One approach is to treat every 
account balance on the statements as a separate segment. Segmenting that way is 
usually inefficient. It would result in the independent audit of such closely related 
accounts as inventory and cost of goods sold. 


A common way to divide an audit is to keep closely related types (or classes) of trans- 
actions and account balances in the same segment. This is called the cycle approach. 
For example, sales, sales returns, cash receipts, and charge-offs of uncollectible 
accounts are the four classes of transactions that cause accounts receivable to increase 
and decrease. Therefore, they are all parts of the sales and collection cycle. Similarly, 
payroll transactions and accrued payroll are parts of the payroll and personnel cycle. 

The logic of using the cycle approach is that it ties to the way transactions are 
recorded in journals and summarized in the general ledger and financial statements. 
Figure 6-4 shows that flow. To the extent that it is practical, the cycle approach com- 
bines transactions recorded in different journals with the general ledger balances that 
result from those transactions. 

The cycles used in this text are listed below and are then explained in detail. Note 
that each of these cycles is so important that one or more later chapters address the 
audit of each cycle: 

* Sales and collection cycle 

¢ Acquisition and payment cycle 

* Payroll and personnel cycle 


¢ Inventory and warehousing cycle 
* Capital acquisition and repayment cycle 


Figure 6-5 (p. 178) illustrates the application of cycles to audits using the December 
31, 2016, trial balance for Hillsburg Hardware Company. (The financial statements 
prepared from this trial balance are included in the glossy insert to the textbook.) A 
trial balance is used to prepare financial statements and is a primary focus of every 
audit. Prior-year account balances are usually included for comparative purposes, but 
are excluded from Figure 6-5 in order to focus on transaction cycles. The letter repre- 
senting a cycle is shown for each account in the left column beside the account name. 
Observe that each account has at least one cycle associated with it, and only cash and 
inventory are a part of two or more cycles. 


FIGURE 6-4 Transaction Flow from Journals to Financial Statements 
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FIGURE 6-5 Hillsburg Hardware Co. Adjusted Trial Balance 


HILLSBURG HARDWARE CO. 
TRIAL BALANCE 
December 31, 2016 


Debit Credit 

Cash in bank $ 827,568 
Trade accounts receivable 20,196,800 
Allowance for uncollectible accounts $ 1,240,000 
Other accounts receivable 945,020 
Inventories 29,864,62 | 
Prepaid expenses 431,558 
Land 3,456,420 
Buildings 32,500,000 
Computer and other equipment 3,758,347 
Furniture and fixtures 2,546,421 
Accumulated depreciation 31,920,126 
Trade accounts payable 4,719,989 
Notes payable 4,179,620 
Accrued payroll 1,349,800 
Accrued payroll taxes 119,663 
Accrued interest 149,560 
Dividends payable 1,900,000 
Accrued income tax 795,442 
Long-term notes payable 24,120,000 
Deferred tax 738,240 
Other accrued payables 829,989 
Capital stock 5,000,000 
Capital in excess of par value 3,500,000 
Retained earnings 11,929,075 
Sales 144,327,789 
Sales returns and allowances 1,241,663 
Cost of goods sold 103,240,768 
Salaries and commissions 7,738,900 
Sales payroll taxes 1,422,100 
Travel and entertainment—selling 1,110,347 
Advertising 2,611,263 
Sales and promotional expense 321,620 
Sales meetings and training 924,480 
Miscellaneous sales expense 681,041 
Executive and office salaries 5,523,960 
Administrative payroll taxes 682,315 
Travel and entertainment—administrative 561,680 
Computer maintenance and supplies 860,260 
Stationery and supplies 762,568 
Postage 244,420 
Telecommunications 72223115 
Rent 312,140 
Legal fees and retainers 383,060 
Auditing and related services 302,840 
Depreciation 1,452,080 
Bad debt expense 3,323,084 
Insurance 722,684 
Office repairs and maintenance 843,926 
Miscellaneous office expense 643,680 
Miscellaneous general expense 323,842 
Gain on sale of assets 719,740 
Income taxes 1,746,600 
Interest expense 2,408,642 
Dividends 1,900,000 

$237,539,033 $237,539,033 
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The accounts for Hillsburg Hardware Co. are summarized in Table 6-2 by cycle, 
and include the related journals and financial statements in which the accounts 
appear. The following observations expand on the information contained in Table 6-2. 


¢ All general ledger accounts and journals for Hillsburg Hardware Co. are 
included at least once. For a different company, the number and titles of jour- 
nals and general ledger accounts will differ, but all will be included. 

¢ Some journals and general ledger accounts are included in more than one cycle. 
When that occurs, it means that the journal is used to record transactions from 
more than one cycle and indicates a tie-in between the cycles. The most impor- 
tant general ledger account included in and affecting several cycles is general 
cash (cash in bank). General cash connects most cycles. 


\:j8=t-a Cycles Applied to Hillsburg Hardware Co. 


General Ledger Accounts Included in the Cycle (See Figure 6-5) 


Journals Included in the Cycle 


(See Figure 6-4, p. 177) Balance Sheet Income Statement 

Sales and collection Sales journal Cash in bank Sales 
Cash receipts journal Trade accounts receivable Sales returns and allowances 
General journal Other accounts receivable Bad debt expense 


Allowance for uncollectible accounts 


Acquisition and Acquisitions journal Cash in bank Advertising® 
payment Cash disbursements journal Inventories Travel and entertainment® 
General journal Prepaid expenses Sales meetings and training® 

Land Sales and promotional expense® 
Buildings Miscellaneous sales expense® 
Computer and other equipment Travel and entertainment’ 
Furniture and fixtures Stationery and supplies” 
Accumulated depreciation Postage’ 
Trade accounts payable Telecommunications* 
Other accrued payables Computer maintenance and supplies” 
Accrued income tax Depreciation* 
Deferred tax Rent 


Legal fees and retainers” 
Auditing and related services 
Insurance” 

Office repairs and maintenance expense 
Miscellaneous office expense” 
Miscellaneous general expense’ 
Gain on sale of assets 

Income taxes 


A 


A 


A 


Payroll and personnel Payroll journal Cash in bank Salaries and commissions® 
General journal Accrued payroll Sales payroll taxes® 
Accrued payroll taxes Executive and office salaries” 


Administrative payroll taxes 


Inventory and Acquisitions journal Inventories Cost of goods sold 
warehousing Sales journal 
General journal 


Capital acquisition and Acquisitions journal Cash in bank Interest expense 
repayment Cash disbursements journal Notes payable 
General journal Long-term notes payable 


Accrued interest 

Capital stock 

Capital in excess of par value 
Retained earnings 

Dividends 

Dividends payable 
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¢ The sales and collection cycle is the first cycle listed and is a primary focus on 
most audits. Collections on trade accounts receivable in the cash receipts jour- 
nal is the primary operating inflow to cash in the bank. 

¢ The capital acquisition and repayment cycle is closely related to the acquisition 
and payment cycle. Transactions in the acquisition and payment cycle include the 
purchase of inventory, supplies, and other goods and services related to operations. 
Transactions in the capital acquisition and repayment cycle are related to financing 
the business, such as issuing stock or debt, paying dividends, and repaying debt. 


Although the same journals are used for transactions in the acquisition and pay- 
ment and the capital acquisition and repayment cycles, it is useful to separate capital 
acquisition and repayment cycle transactions into a separate transaction cycle. First, 
capital acquisitions and repayments relate to financing the business, rather than oper- 
ations. Second, most capital acquisition and repayment cycle accounts involve few 
transactions, but each is often highly material and therefore should be audited exten- 
sively. Considering both reasons, it is more convenient to separate the two cycles. 


¢ The inventory and warehousing cycle is closely related to all other cycles, especially 
for a manufacturing company. The cost of inventory includes raw materials (acqui- 
sition and payment cycle), direct labor (payroll and personnel cycle), and manufac- 
turing overhead (acquisition and payment cycle and payroll and personnel cycle). 
The sale of finished goods involves the sales and collection cycle. Because inventory 
is material for most manufacturing companies, it is common to borrow money 
using inventory as security. In those cases, the capital acquisition and repayment 
cycle is also related to inventory and warehousing. Inventory is included as a sepa- 
rate cycle both because it is related to other cycles and because for most manufac- 
turing and retail companies, inventory is usually highly material, there are unique 
systems and controls for inventory, and inventory is often complex to audit. 


Figure 6-6 illustrates the relationships of the five cycles and general cash. Note that 
cycles have no beginning or end except at the origin and final disposition of a com- 
pany. A company begins by obtaining capital, usually in the form of cash. In a manu- 
facturing company, cash is used to acquire raw materials, fixed assets, and related 
goods and services to produce inventory (acquisition and payment cycle). Cash is also 
used to acquire labor for the same reason (payroll and personnel cycle). Acquisition 
and payment and payroll and personnel are similar in nature, but the functions are 
sufficiently different to justify separate cycles. The combined result of these two cycles 
is inventory (inventory and warehousing cycle). At a subsequent point, the inventory 
is sold and billings and collections result (sales and collection cycle). The cash gener- 
ated is used to pay dividends and interest or finance capital expansion and to start the 


FIGURE 6-6 Relationships Among Transaction Cycles 


General 
cash 


| Capital acquisition 


and repayment cycle 


Sales and Acquisition Payroll and 
collection and payment personnel 
cycle cycle cycle 


Inventory and < | 
warehousing cycle 


Throughout this text, the term audit objectives refers to transaction-related, bal- 
ance-related, and presentation and disclosure-related audit objectives. Before examin- 
ing audit objectives in more detail, we first deal with management assertions. 


MANAGEMENT ASSERTIONS 


Distinguish among the 
management assertions about 
financial information. 


PCAOB Assertions 


International and 
AICPA Assertions 
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Management assertions are implied or expressed representations by management 
about classes of transactions and the related accounts and disclosures in the finan- 
cial statements. In most cases they are implied. Examine Figure 6-5 on page 178. 
Management of Hillsburg Hardware Co. asserts that cash of $827,568 was present in 
the company’s bank accounts as of the balance sheet date. Unless otherwise disclosed 
in the financial statements, management also asserts that the cash was unrestricted 
and available for normal use. Management further asserts that all required disclosures 
related to cash are accurate and are understandable. Similar assertions exist for each 
asset, liability, owners’ equity, revenue, and expense item in the financial statements. 
These assertions apply to classes of transactions, account balances, and presentation 
and disclosures. 

Management assertions are directly related to the financial reporting framework 
used by the company (usually U.S. GAAP or IFRS), as they are part of the criteria 
that management uses to record and disclose accounting information in financial statements. 
The definition of auditing in Chapter 1, in part, states that auditing is a comparison 
of information (financial statements) to established criteria (assertions established 
according to accounting standards). Auditors must therefore understand the asser- 
tions to do adequate audits. 


PCAOB auditing standards note that management implicitly or explicitly makes 
assertions regarding the recognition, measurement, presentation, and disclosure of 
the various elements of the financial statements and related disclosures. The PCAOB 
describes five categories of management assertions: 


¢ Existence or occurrence—Assets or liabilities of the public company exist at a 
given date, and recorded transactions have occurred during the period. 

* Completeness—All transactions and accounts that should be presented in the 
financial statements are so included. 

¢ Valuation or allocation—Assets, liability, equity, revenue, and expense compo- 
nents have been included in the financial statements at appropriate amounts. 

* Rights and obligations—The public company holds or controls rights to the 
assets, and liabilities are obligations of the company at a given date. 

* Presentation and disclosure—The components of the financial statements are 
properly classified, described, and disclosed. 


These assertions are similar to the assertions in international and AICPA auditing 
standards, as described next. 


PCAOB standards provide for one set of assertions that apply to all financial state- 
ment information. International auditing standards and AICPA auditing standards 
further divide management assertions into three categories: 


1. Assertions about classes of transactions and events for the period under audit 

2. Assertions about account balances at period end 

3. Assertions about presentation and disclosure 

The mapping of PCAOB assertions to the assertions in international auditing 
standards and AICPA auditing standards is shown in Table 6-3. The first three PCAOB 
assertions are applicable to account balances and classes of transactions. Presentation 
and disclosure is treated as a single assertion. Not only do the international auditing 
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TABLE 6-3 


PCAOB Auditing Standards 
Assertions 


Assertions About Transactions, 
Balances, and Presentation and 
Disclosure 


Existence or occurrence—Assets or 
liabilities exist at a given date, and 
recorded transactions have occurred 
during the period. 


Management Assertions for Each Category of Assertions 


International Auditing Standards and AICPA Auditing Standards Assertions 


Assertions About Classes of 
Transactions and Events 


Occurrence—Transactions and 
events that have been recorded 
have occurred and pertain to 
the entity. 


Assertions About Account 
Balances 


Existence—Assets, liabilities, and 
equity interests exist. 


Assertions About Presentation 
and Disclosure 


Occurrence and rights and obligations— 
Disclosed events and transactions 
have occurred and pertain to the 
entity. 


Completeness—All transactions and 
accounts that should be presented 
in the financial statements are so 
included. 


Completeness—Alll transactions 
and events that should have 
been recorded have been 
recorded. 


Completeness—All assets, liabili- 
ties, and equity interests that 
should have been recorded 
have been recorded. 


Completeness—All disclosures that 
should have been included in the 
financial statements have been 
included. 


Valuation or allocation—Assets, liability, 
equity, revenue, and expense com- 
ponents have been included in the 
financial statements at appropriate 
amounts. 


Accuracy—Amounts and other 
data relating to recorded trans- 
actions and events have been 
recorded appropriately. 


Classification—Transactions and 
events have been recorded in 
the proper accounts. 


Cutoff—Transactions and events 
have been recorded in the cor- 
rect accounting period. 


Valuation and allocation—Assets, 
liabilities, and equity interests 
are included in the financial 
statements at appropriate 
amounts and any resulting valu- 
ation adjustments are appropri- 
ately recorded. 


Accuracy and valuation—Financial and 
other information is disclosed 
appropriately and at appropriate 
amounts. 


Classification and understandability— 
Financial and other information is 
appropriately presented and de- 
scribed and disclosures are clearly 
expressed. 


Rights and obligations—The company 
holds or controls rights to the as- 
sets, and liabilities are obligations of 
the company at a given date. 


Rights and obligations—The entity 
holds or controls the rights to 
assets, and liabilities are the 
obligation of the entity. 


Presentation and disclosure—The com- 
ponents of the financial statements 
are properly classified, described, 


(See the international and AICPA 
assertions for presentation and 
disclosure.) 


(See the international and AICPA 
assertions for presentation and 
disclosure.) 


and disclosed. 


(See above assertions.) 


standards and AICPA auditing standards separate the assertions related to transac- 
tions from the assertions related to account balances and presentation and disclosure, 
they also provide additional assertions related to the PCAOB valuation or allocation 
assertion, as shown in Table 6-3. The international auditing standards and AICPA 
auditing standards assertions are grouped so that assertions related across categories 
are included on the same table row. 


Assertions About Classes of Transactions and Events Management makes several 
assertions about transactions. These assertions also apply to other events that are 
reflected in the accounting records, such as recording depreciation and recognizing 
pension obligations. As illustrated in Table 6-3, international auditing standards and 
AICPA auditing standards include three specific assertions that relate to the valua- 
tion or allocation assertion in the PCAOB auditing standards. The accuracy asser- 
tion addresses whether the transactions have been recorded at correct amounts. The 
classification assertion addresses whether transactions have been recorded in the 
appropriate accounts. The cutoff assertion addresses whether transactions have been 
recorded in the proper accounting period. 
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Assertions About Account Balances International auditing standards and AICPA 
auditing standards include four assertions related to account balances, as shown in 
Table 6-3 (p. 183). These address existence, completeness, valuation and allocation, 
and rights and obligations for account balances at year-end. They map directly to four 
of the five PCAOB auditing standards assertions. 


Assertions About Presentation and Disclosure With increases in the complex- 
ity of transactions and the need for expanded disclosures about these transactions, 
assertions about presentation and disclosure have increased in importance. While the 
PCAOB auditing standards include an overall assertion related to presentation and 
disclosure, international auditing standards and AICPA auditing standards provide 
four specific assertions that address occurrence and rights and obligations, complete- 
ness, accuracy and valuation, and classification and understandability. 

The occurrence and rights and obligations assertion addresses whether disclosed 
events have occurred and are the rights and obligations of the entity. For example, if 
the client discloses that it has acquired another company, it asserts that the transaction 
has been completed. The completeness assertion deals with whether all required dis- 
closures have been included in the financial statements. As an example, management 
asserts that all material transactions with related parties have been disclosed in the 
financial statements. The accuracy and valuation assertion deals with whether finan- 
cial information is disclosed fairly and at appropriate amounts. Management’s disclo- 
sure of the amount of unfunded pension obligations and the assumptions underlying 
these amounts is an example of this assertion. Finally, the classification and under- 
standability assertion relates to whether amounts are appropriately classified in the 
financial statements and footnotes, and whether the balance descriptions and related 
disclosures are understandable. For example, management asserts that the classifica- 
tion of inventories as finished goods, work-in-process, and raw materials is appropri- 
ate, and the disclosures of the methods used to value inventories are understandable. 


Auditors may use different terms to express the management assertions as long as 
all the aspects included in Table 6-3 are addressed. The auditor should consider the 
relevance of each assertion for each significant class of transactions, account balance, 
and presentation and disclosure. Relevant assertions have a meaningful bearing on 
whether the account is fairly stated and are used to assess the risk of material misstate- 
ment and the design and performance of audit procedures. For example, valuation is 
likely to be a relevant assertion for accounts receivable, but not for cash. 

After the relevant assertions have been identified, the auditor can then develop 
audit objectives for each category of assertions. The auditor’s audit objectives follow 
and are closely related to management assertions. That is not surprising because the 
auditor’s primary responsibility is to determine whether management assertions 
about financial statements are justified. The reason for using audit objectives, rather 
than the assertions, is to provide a framework to help the auditor accumulate suf- 
ficient appropriate evidence and decide the proper evidence to accumulate given the 
circumstances of the engagement. The objectives remain the same from audit to audit, 
but the evidence varies depending on the circumstances. 

Developing audit objectives for classes of transactions, account balances, and 
presentation and disclosure helps the auditor design audit procedures to accumulate 
sufficient appropriate evidence about each aspect of the assertions. For example, 
developing an audit objective specific to the accuracy of transactions helps the auditor 
design and perform audit procedures to obtain evidence about the accuracy of trans- 
actions, while developing an audit objective for the classification of transactions helps 
the auditor design and perform audit procedures to obtain evidence about whether 
the transactions are recorded in the appropriate accounts. The remainder of this book 
focuses on audit objectives related to transactions, audit objectives related to account 
balances, and audit objectives related to presentation and disclosure. 
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TRANSACTION-RELATED AUDIT OBJECTIVES 


The auditor’s transaction-related audit objectives follow and are closely related to 
management's assertions about classes of transactions. There is a difference between 
general transaction-related audit objectives and specific transaction-related audit 
objectives for each class of transactions. The six general transaction-related audit 
objectives discussed here are applicable to every class of transactions and are stated in 
broad terms. Specific transaction-related audit objectives are also applied to each class 
of transactions but are stated in terms tailored to a specific class of transactions, such 
as sales transactions. Once the auditor establishes general transaction-related audit 
objectives, they can be used to develop specific transaction-related audit objectives for 
each class of transactions being audited. 


Occurrence—Recorded Transactions Exist This objective deals with whether 
recorded transactions have actually occurred. Inclusion of a sale in the sales journal 
when no sale occurred violates the occurrence objective. This objective is the auditor’s 
counterpart to the management assertion of occurrence for classes of transactions. 


Completeness—Existing Transactions Are Recorded This objective deals with 
whether all transactions that should be included in the journals have actually been 
included. Failure to include a sale in the sales journal and general ledger when a sale 
occurred violates the completeness objective. This objective is the counterpart to the 
management assertion of completeness for classes of transactions. 

The occurrence and completeness objectives emphasize opposite audit concerns. 
Occurrence deals with potential overstatement; completeness deals with unrecorded 
transactions (understatement). 


Accuracy—Recorded Transactions Are Stated at the Correct Amounts This 
objective addresses the accuracy of information for accounting transactions and is 
one part of the accuracy assertion for classes of transactions. For sales transactions, 
this objective is violated if the quantity of goods shipped was different from the quan- 
tity billed, the wrong selling price was used for billing, extension or adding errors 
occurred in billing, or the wrong amount was included in the sales journal. 

It is important to distinguish between accuracy and occurrence or completeness. 
For example, if a recorded sales transaction should not have been recorded because 
the shipment was on consignment, the occurrence objective has been violated, even 
if the amount of the invoice was accurately calculated. If the recorded sale was for a 
valid shipment but the amount was calculated incorrectly, there is a violation of the 
accuracy objective but not of the occurrence objective. The same relationship exists 
between completeness and accuracy. 


Posting and Summarization—Recorded Transactions Are Properly Included in the 
Master Files and Are Correctly Summarized This objective deals with the accuracy 
of the transfer of information from recorded transactions in journals to subsidiary 
records and the general ledger. It is part of the accuracy assertion for classes of trans- 
actions. For example, if a sales transaction is recorded in the wrong customer’s record 
or at the wrong amount in the master file or the sum of all sales transactions posted 
from the sales journal to the general ledger is inaccurate, this objective is violated. 
Because the posting of transactions from journals to subsidiary records, the general 
ledger, and other related master files is typically accomplished automatically by com- 
puterized accounting systems, the risk of random human error in posting is minimal. 
Once the auditor can establish that the computer is functioning properly, there is a 
reduced concern about posting process errors. 


Classification—Transactions Included in the Client’s Journals Are Properly 
Classified As the auditor’s counterpart to management's classification assertion for 
classes of transaction, this objective addresses whether transactions are included in 
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Link transaction-related audit 
objectives to management 
assertions for classes of 
transactions. 


General Transaction- 
Related Audit Objectives 


Understand objectives 
and responsibilities 
for the audit 


__ H 


Divide financial 
statements 
into cycles 


Know management 
assertions about 
financial statements 


Know general audit 
objectives for classes 
of transactions, 
accounts, and 
disclosures 


Know specific audit 
objectives for classes 
of transactions, 
accounts, and 
disclosures 


TABLE 6-4 


Management Assertions About General Transaction-Related Specific Sales Transaction-Related Audit 


Hillsburg Hardware Co.: Management Assertions and Transaction-Related 
Audit Objectives Applied to Sales Transactions 


Classes of Transactions and Events Audit Objectives Objectives 

Occurrence Occurrence Recorded sales are for shipments made to nonfictitious 
customers. 

Completeness Completeness Existing sales transactions are recorded. 

Accuracy Accuracy Recorded sales are for the amount of goods shipped 


and are correctly billed and recorded. 


Posting and summarization Sales transactions are properly included in the master 
file and are correctly summarized. 


Classification 


Classification Sales transactions are properly classified. 


Cutoff 


Timing Sales transactions are recorded on the correct dates. 


Specific Transaction- 
Related Audit Objectives 


Relationships Among 
Management Assertions 
and Transaction-Related 
Audit Objectives 


Link balance-related 

and presentation and 
disclosure-related audit 
objectives to management 
assertions. 
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the appropriate accounts. Examples of misclassifications for sales are: including cash 
sales as credit sales, recording a sale of operating fixed assets as revenue, and misclas- 
sifying commercial sales as residential sales. 


Timing—Transactions Are Recorded on the Correct Dates The timing objective 
for transactions is the auditor’s counterpart to management’s cutoff assertion. A tim- 
ing error occurs if a transaction is not recorded on the day it took place. A sales trans- 
action, for example, should be recorded on the date of shipment. 


After the general transaction-related audit objectives are determined, specific transac- 
tion-related audit objectives for each material class of transactions can be developed. 
Such classes of transactions typically include sales, cash receipts, acquisitions of goods 
and services, payroll, and so on. At least one specific transaction-related audit objec- 
tive should be included for each general transaction-related audit objective unless the 
auditor believes that the general transaction-related audit objective is not relevant or is 
unimportant in the circumstances. 


Table 6-4 illustrates the relationships among management assertions, the general 
transaction-related audit objectives, and specific transaction-related audit objectives 
as applied to sales for Hillsburg Hardware Co. Notice that there is a one-to-one rela- 
tionship between assertions and objectives, except for the accuracy assertion. The 
accuracy assertion has two objectives because of the need to provide auditors with 
guidance in testing transaction accuracy. 


BALANCE-RELATED AND PRESENTATION 
AND DISCLOSURE-RELATED AUDIT OBJECTIVES 


Balance-related audit objectives are similar to the transaction-related audit objectives 
just discussed. They also follow from management assertions and they provide a 
framework to help the auditor accumulate sufficient appropriate evidence related to 
account balances. Presentation and disclosure-related audit objectives are similar to 
both transaction-related and balance-related audit objectives, except that they focus 
on presentation of the financial statements and on the footnote disclosure informa- 
tion that accompanies those statements. There are also both general and specific 
balance-related and presentation and disclosure-related audit objectives. 

There are two differences between balance-related and transaction-related audit 
objectives. First, as the terms imply, balance-related audit objectives are applied to 
account balances such as accounts receivable and inventory rather than classes of 
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transactions such as sales transactions and purchases of inventory. Second, there 
are eight balance-related audit objectives compared to six transaction-related audit 
objectives. 

Because of the way audits are performed, balance-related audit objectives are 
almost always applied to the ending balance in balance sheet accounts, such as 
accounts receivable, inventory, and notes payable. However, some balance-related 
audit objectives are applied to certain income statement accounts. These usually 
involve nonroutine transactions and unpredictable expenses, such as legal expense or 
repairs and maintenance. Other income statement accounts are closely related to bal- 
ance sheet accounts and are tested simultaneously, such as depreciation expense with 
accumulated depreciation and interest expense with notes payable. 

When using the balance-related audit objectives to audit account balances, the 
auditor accumulates evidence to verify detail that supports the account balance, rather 
than verifying the account balance itself. For example, in auditing accounts receivable, 
the auditor obtains a listing of the accounts receivable master file that agrees to the 
general ledger balance (see p. 532 for an illustration). The accounts receivable balance- 
related audit objectives are applied to the customer accounts in that listing. 

There are four presentation and disclosure-related audit objectives that focus 
mostly on information included in the footnotes to the financial statements, includ- 
ing its accuracy and understandability. The presentation and disclosure-related audit 
objectives are similar to the transaction-related and balance-related audit objectives, 
except that they focus on the presentation of information in the form of financial 
statements and the related footnote disclosures. 


Throughout the following discussion of the eight balance-related audit objectives, we 
make references to a supporting schedule, by which we mean a client-provided sched- 
ule or electronic file, such as the list of accounts receivable just discussed. 


Existence—Amounts Included Exist This objective deals with whether the amounts 
included in the financial statements should actually be included. For example, inclu- 
sion of an account receivable from a customer in the accounts receivable trial balance 
when there is no receivable from that customer violates the existence objective. This 
objective is the auditor’s counterpart to the management assertion of existence for 
account balances. 


Completeness—Existing Amounts Are Included This objective deals with whether 
all amounts that should be included have actually been included. Failure to include an 
account receivable from a customer in the accounts receivable trial balance when a 
receivable exists violates the completeness objective. This objective is the counterpart 
to the management assertion of completeness for account balances. 

The existence and completeness objectives emphasize opposite audit concerns. 
Existence deals with potential overstatement; completeness deals with unrecorded 
amounts (understatement). 


Accuracy—Amounts Included Are Stated at the Correct Amounts The accuracy 
objective refers to amounts being included at the correct amount. An inventory item 
on a client’s inventory listing can be wrong because the number of units of inven- 
tory on hand was misstated, the unit price was wrong, or the total was incorrectly 
extended. Each of these violates the accuracy objective. Accuracy is one part of the 
valuation and allocation assertion for account balances. 


Classification—Amounts Included in the Client’s Listing Are Properly Classified 
Classification involves determining whether items included on a client’s listing 
are included in the correct general ledger accounts. For example, on the accounts 
receivable listing, receivables must be separated into short-term and long-term, and 
amounts due from affiliates, officers, and directors must be classified separately 
from amounts due from customers. Classification is also part of the valuation and 
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allocation assertion. The classification balance-related audit objective is closely related 
to the presentation and disclosure-related audit objectives, but relates to how balances 
are classified in general ledger accounts so they can be appropriately presented and 
disclosed in the financial statements. 


Cutoff—Transactions Near the Balance Sheet Date Are Recorded in the Proper 
Period In testing for cutoff of account balances, the auditor’s objective is to deter- 
mine whether transactions are recorded and included in account balances in the 
proper period. An account balance will be misstated if transactions near the end of 
the accounting period are not properly recorded. For an annual audit, the end of the 
accounting period is the balance sheet date. Cutoff tests can be thought of as a part of 
verifying either the balance sheet accounts or the related transactions, but for conve- 
nience, auditors usually perform them as a part of auditing balance sheet accounts. 
For this reason, we also include cutoff as a balance-related audit objective related to 
the valuation and allocation assertion for account balances. The timing objective for 
transactions deals with the proper timing of recording transactions throughout the 
year, whereas the cutoff objective for balance-related audit objectives relates only to 
transactions near year-end. For example, in a December 31 year-end audit, a sales 
transaction recorded in March for a February shipment is a transaction-related audit 
objective error, but not a balance-related audit objective error. 


Detail Tie-In—Details in the Account Balance Agree with Related Master File 
Amounts, Foot to the Total in the Account Balance, and Agree with the Total in 
the General Ledger Account balances on financial statements are supported by 
details in master files and schedules prepared by clients. The detail tie-in objective is 
concerned that the details on lists are accurately prepared, correctly added, and agree 
with the general ledger. For example, individual accounts receivable on a listing of 
accounts receivable should be the same in the accounts receivable master file, and the 
total should equal the general ledger control account. Detail tie-in is also a part of the 
valuation and allocation assertion for account balances. 


Realizable Value—Assets Are Included at the Amounts Estimated to Be 
Realized This objective concerns whether an account balance has been reduced for 
declines from historical cost to net realizable value or when accounting standards 
require fair market value accounting treatment. Examples when the objective applies 
are considering the adequacy of the allowance for uncollectible accounts receivable 
and write-downs of inventory for obsolescence. The objective generally applies only 
to asset accounts, although some liabilities are recorded at fair value, and is also a part 
of the valuation and allocation assertion for account balances. 


Rights and Obligations In addition to existing, most assets must be owned before 
it is acceptable to include them in the financial statements. Similarly, liabilities must 
belong to the entity. Rights are always associated with assets and obligations with 
liabilities. This objective is the auditor’s counterpart to the management assertion of 
rights and obligations for account balances. 


The same as for transaction-related audit objectives, after the general balance-related 
audit objectives are determined, specific balance-related audit objectives for each 
account balance on the financial statements can be developed. At least one specific 
balance-related audit objective should be included for each general balance-related 
audit objective unless the auditor believes that the general balance-related audit objec- 
tive is not relevant or is unimportant for the account balance being considered. There 
may be more than one specific balance-related audit objective for a general balance- 
related audit objective. For example, specific balance-related audit objectives for 
rights and obligations of the inventory of Hillsburg Hardware Co. could include (1) the 
company has title to all inventory items listed and (2) inventory is not pledged as col- 
lateral for a loan unless it is disclosed. 


Hillsburg Hardware Co.: Management Assertions and Balance-Related Audit 


Bre 8 Objectives Applied to Inventory 
Management Assertions General Balance-Related Specific Balance-Related Audit Objectives Applied 
About Account Balances Audit Objectives to Inventory 
Existence Existence All recorded inventory exists at the balance sheet date. 
Completeness Completeness All existing inventory has been counted and included in the 


inventory summary. 


Valuation and allocation Accuracy Inventory quantities on the client’s perpetual records agree 
with items physically on hand. 
Prices used to value inventories are materially correct. 
Extensions of price times quantity are correct and details 
are correctly added. 


Classification Inventory items are properly classified as to raw materials, 
work in process, and finished goods. 
Cutoff Purchase cutoff at year-end is proper. 
Sales cutoff at year-end is proper. 
Detail tie-in Total of inventory items agrees with general ledger. 
Realizable value Inventories have been written down where net realizable 


value is impaired. 


Rights and obligations Rights and obligations The company has title to all inventory items listed. 
Inventories are not pledged as collateral. 


Table 6-5 illustrates the relationships among management assertions, the general bal- 
ance-related audit objectives, and specific balance-related audit objectives as applied 
to inventory for Hillsburg Hardware Co. Notice that there is a one-to-one relationship 
between assertions and objectives, except for the valuation and allocation assertion. 
The valuation and allocation assertion has multiple objectives because of the com- 
plexity of valuation issues and the need to provide auditors with additional guidance 
for testing valuation. 


Relationships Among 
Management Assertions 
and Balance-Related 
Audit Objectives 


The presentation and disclosure-related audit objectives are identical to the man- 
agement assertions for presentation and disclosure discussed previously. The same 
concepts that apply to balance-related audit objectives apply equally to presenta- 
tion and disclosure audit objectives. Table 6-6 includes the management assertions 
about presentation and disclosure, related general presentation and disclosure- 
related audit objectives, and specific audit objectives for notes payable for Hillsburg 
Hardware Co. 


Presentation and 
Disclosure-Related Audit 
Objectives 


Hillsburg Hardware Co.: Management Assertions and Presentation 


TABLE 6-6 : a 5 4 a 

and Disclosure-Related Audit Objectives Applied to Notes Payable 
Management Assertions General Presentation Specific Presentation and Disclosure- 
About Presentation and and Disclosure-Related Related Audit Objectives Applied to Notes 
Disclosure Audit Objectives Payable 
Occurrence and rights and Occurrence and rights and Notes payable as described in the footnotes exist and 

obligations obligations are obligations of the company. 

Completeness Completeness All required disclosures related to notes payable are 


included in the financial statement footnotes. 
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The auditor must obtain sufficient appropriate audit evidence to support all management 
assertions in the financial statements. This is done by accumulating evidence in support 
of some appropriate combination of transaction-related audit objectives and balance- 
related audit objectives. A comparison of Tables 6-4 (p. 186) and 6-5 (p. 189) illustrates 
the significant overlap between the transaction-related and balance-related audit objec- 
tives. Rights and obligations is the only balance-related assertion without a similar trans- 
action-related assertion. Presentation and disclosure-related audit objectives are closely 
related to the balance-related audit objectives. Auditors often consider presentation and 
disclosure audit objectives when addressing the balance-related audit objectives. 

The auditor must decide the appropriate audit objectives and the evidence to 
accumulate to meet those objectives on every audit. To do this, auditors follow an 
audit process, which is a well-defined methodology for organizing an audit to ensure 
that the evidence gathered is both sufficient and appropriate and that all required 
audit objectives are both specified and met. If the client is an accelerated filer public 
company, the auditor must also plan to meet the objectives associated with report- 
ing on the effectiveness of internal control over financial reporting. PCAOB Auditing 
Standard 5 requires that the audit of the effectiveness of internal control be integrated 
with the audit of the financial statements. The audit process, as described in this text, 
has four specific phases, as shown in Figure 6-8. The rest of this chapter provides a 
brief introduction to each of the four phases of the audit process. 


For any given audit, there are many ways in which an auditor can accumulate evidence 
to meet the overall audit objective of providing an opinion on the financial state- 
ments. Two overriding considerations affect the approach the auditor selects: 


1. Sufficient appropriate evidence must be accumulated to meet the auditor’s pro- 
fessional responsibility. 
2. The cost of accumulating the evidence should be minimized. 


The first consideration is the most important, but cost minimization is necessary if 
CPA firms are to be competitive and profitable. If there were no concern for control- 
ling costs, evidence decision making would be easy. Auditors would keep adding 
evidence, without concern for efficiency, until they were sufficiently certain that there 
were no material misstatements. 

Concern for sufficient appropriate evidence and cost control necessitates planning the 
engagement. The plan should result in an effective audit approach at a reasonable cost. The 
auditor performs procedures to assess the risk that material misstatements in the financial 


FIGURE 6-8 Four Phases of a Financial Statement Audit 


Plan and design an audit approach 
based on risk assessment procedures 


Perform tests of controls and 
substantive tests of transactions 


Perform substantive analytical 
procedures and tests of details of balances 


Complete the audit and 
issue an audit report 
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statements may be present. Those risk assessment procedures are a critical component 
to planning and designing an audit approach, which can be broken down into several 
parts. Three key aspects are introduced here and are discussed in subsequent chapters. 


Obtain an Understanding of the Entity and Its Environment To adequately assess 
the risk of misstatements in the financial statements and to interpret information 
obtained throughout the audit, the auditor must have a thorough understanding of the 
client’s business and related environment, including knowledge of strategies and pro- 
cesses. The auditor should study the client’s business model, perform analytical proce- 
dures, and make comparisons to competitors. The auditor must also understand any 
unique accounting requirements of the client’s industry. For example, when auditing 
an insurance company, the auditor must understand how loss reserves are calculated. 


Understand Internal Control and Assess Control Risk The risk of misstatement in 
the financial statements is reduced if the client has effective controls over computer 
operations and transaction processing. In Chapter 2, we discussed how the ability of the 
client’s internal controls to generate reliable financial information and safeguard assets 
and records is one of the most important and widely accepted concepts in the theory 
and practice of auditing. The auditor identifies internal controls and evaluates their effec- 
tiveness, a process called assessing control risk. If internal controls are considered effective, 
planned assessed control risk can be reduced and the amount of audit evidence to be 
accumulated can be significantly less than when internal controls are not adequate. 


Assess Risk of Material Misstatement The auditor uses the understanding of the 
client’s industry and business strategies, as well as the effectiveness of controls, to 
assess the risk of misstatements in the financial statements. This assessment will 
then impact the audit plan and the nature, timing, and extent of audit procedures. For 
example, if the client is expanding sales by taking on new customers with poor credit 
ratings, the auditor will assess a higher risk of misstatement for net realizable value of 
accounts receivable and plan to expand testing in this area. 


Before auditors can justify reducing planned assessed control risk when internal controls 
are believed to be effective, they must first test the effectiveness of the controls. The proce- 
dures for this type of testing are commonly referred to as tests of controls. For example, 
assume a client’s internal controls require computer matching of all relevant terms on the 
customer sales order, shipping document, and sales invoice before sales invoices are trans- 
mitted to customers. This control is directly related to the occurrence and accuracy transac- 
tion-related audit objectives for sales. The auditor might test the effectiveness of this control 
by comparing a sample of sales invoices to related shipping documents and customer sales 
orders, or by performing tests of the computerized controls related to this process. 

Auditors also evaluate the client’s recording of transactions by verifying the mon- 
etary amounts of transactions, a process called substantive tests of transactions. 
For example, the auditor might use computer software to compare the unit selling 
price on duplicate sales invoices with an electronic file of approved prices as a test of 
the accuracy objective for sales transactions. Like the test of control in the preceding 
paragraph, this test satisfies the accuracy transaction-related audit objective for sales. 
For the sake of efficiency, auditors often perform tests of controls and substantive 
tests of transactions at the same time. 


There are two general categories of phase III procedures. Analytical procedures 
consist of evaluations of financial information through analysis of plausible relation- 
ships among financial and nonfinancial data. When analytical procedures are used 
as evidence to provide assurance about an account balance, they are referred to as 
substantive analytical procedures. For example, to provide some assurance for 
the accuracy objective for both sales transactions (transaction-related audit objective) 
and accounts receivable (balance-related audit objective), the auditor might examine 
sales transactions in the sales journal for unusually large amounts and also compare 
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Controls and Substantive 
Tests of Transactions 
(Phase II) 


Perform Substantive 
Analytical Procedures 
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Balances (Phase III) 


Complete the Audit and 


Issue an Audit Report 
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total monthly sales with prior years. If a company is consistently using incorrect sales 
prices or improperly recording sales, significant differences are likely. 

Tests of details of balances are specific procedures intended to test for mon- 
etary misstatements in the balances in the financial statements. An example related 
to the existence objective for accounts receivable (balance-related audit objective) is 
direct, written communication with the client’s customers to identify whether the 
receivable exists. Tests of details of ending balances are essential to the conduct of the 
audit because much of the evidence is obtained from third-party sources and there- 
fore is considered to be of high quality. 


After the auditor has completed all procedures for each audit objective and for each 
financial statement account and related disclosures, it is necessary to combine the 
information obtained to reach an overall conclusion as to whether the financial state- 
ments are fairly presented. This highly subjective process relies heavily on the audi- 
tor’s professional judgment. When the audit is completed, the CPA must issue an audit 
report to accompany the client’s published financial statements. These reports were 
discussed in Chapter 3. 


CONCEPT CHECK 


1. Describe what is meant by the cycle approach to auditing. What are the advantages of 
dividing the audit into different cycles? 


2. Define what is meant by a management assertion about financial statements. Describe 
how PCAOB assertions and assertions in international and AICPA auditing standards are 
similar and different. 


SUMMARY 
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This chapter described management’s responsibility for the financial statements and 
internal control and the auditor’s responsibility to audit the financial statements and the 
effectiveness of internal control over financial reporting. This chapter emphasized the 
critical importance of maintaining an attitude of professional skepticism and highlighted a 
professional judgment process to help auditor decision making. This chapter also discussed 
management assertions and the related objectives of the audit and the way the auditor sub- 
divides an audit to result in specific audit objectives. The auditor then accumulates evidence 
to obtain assurance that each audit objective has been satisfied. The illustration for sales 
transactions and accounts receivable shows that the auditor can obtain assurance by accu- 
mulating evidence using tests of controls, substantive tests of transactions, substantive ana- 
lytical procedures, and tests of details of balances. In some audits, there is more emphasis 
on certain tests such as substantive analytical procedures and tests of controls, whereas in 
others, there is emphasis on substantive tests of transactions and tests of details of balances. 


ESSENTIAL TERMS 


Analytical procedures—evaluations of 
financial information through analysis of 
plausible relationships among financial 
and nonfinancial data 


Balance-related audit objectives—eight 
audit objectives that must be met before the 
auditor can conclude that any given account 
balance is fairly stated; the general balance- 
related audit objectives are existence, com- 


pleteness, accuracy, classification, cutoff, 
detail tie-in, realizable value, and rights and 
obligations 


Cycle approach—a method of dividing 
an audit by keeping closely related types of 
transactions and account balances in the 
same segment 


Error—an unintentional misstatement of 
the financial statements 
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Fraud—an intentional misstatement of 
the financial statements 


Fraudulent financial reporting— 
intentional misstatements or omissions 
of amounts or disclosures in financial 
statements to deceive users; often called 
management fraud 


Management assertions—implied or 
expressed representations by manage- 
ment about classes of transactions, related 
account balances, and presentation and 
disclosures in the financial statements 


Misappropriation of assets—a fraud 
involving the theft of an entity’s assets; 
often called defalcation 


Noncompliance with laws and regula- 
tions—failure to comply with applicable 
laws and regulations; often referred to as 
illegal acts 


Phases of the audit process—the four 
aspects of a complete audit: (1) plan and 
design an audit approach, (2) perform tests 
of controls and substantive tests of trans- 
actions, (3) perform substantive analytical 
procedures and tests of details of balances, 
and (4) complete the audit and issue an 
audit report 


Presentation and disclosure-related 
audit objectives—four audit objectives 
that must be met before the auditor can 
conclude that presentation and disclo- 
sures are fairly stated; the four presenta- 
tion and disclosure-related audit objectives 
are occurrence and rights and obligations, 
completeness, accuracy and valuation, and 
classification and understandability 


Professional skepticism—an attitude of 
the auditor that includes a questioning mind 


that is alert to conditions that may indicate 
possible misstatement due to fraud or error, 
and a critical assessment of audit evidence 


Relevant assertions—assertions _ that 
have a meaningful bearing on whether an 
account is fairly stated and used to assess the 
risk of material misstatement and the design 
and performance of audit procedures 


Risk assessment procedures—audit pro- 
cedures performed to obtain an understand- 
ing of the entity and its environment, includ- 
ing the entity’s internal control, to identify 
and assess the risks of material misstatement 


Substantive analytical procedure—an 
analytical procedure in which the auditor 
develops an expectation of recorded 
amounts or ratios to provide evidence sup- 
porting an account balance 


Substantive tests of transactions— 
audit procedures testing for monetary mis- 
statements to determine whether the six 
transaction-related audit objectives have 
been satisfied for each class of transactions 


Tests of controls—audit procedures to 
test the effectiveness of controls in support 
of a reduced assessed control risk 


Tests of details of balances—audit pro- 
cedures testing for monetary misstatements 
to determine whether the eight balance- 
related audit objectives have been satisfied 
for each significant account balance 


Transaction-related audit objectives— 
six audit objectives that must be met before 
the auditor can conclude that the total for 
any given class of transactions is fairly 
stated; the general transaction-related 
audit objectives are occurrence, complete- 
ness, accuracy, classification, timing, and 
posting and summarization 


REVIEW QUESTIONS 


6-1 (OBJECTIVE 6-1) State the objective of the audit of financial statements. In general terms, 


how do auditors meet that objective? 


6-2 (OBJECTIVE 6-3) Distinguish between the terms errors and fraud. What is the auditor’s 


responsibility for finding each? 


6-3 (OBJECTIVE 6-3) Explain the auditor’s responsibility for detecting material misstate- 


ments due to fraud or error. 


6-4 (OBJECTIVE 6-3) List two major characteristics that are useful in predicting the likeli- 
hood of fraudulent financial reporting in an audit. For each of the characteristics, state 
two things that the auditor can do to evaluate its significance in the engagement. 


6-5 (OBJECTIVE 6-3) Explain the auditor’s responsibility to consider compliance with laws 
and regulations. How does this responsibility differ for laws and regulations that have a 
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direct effect on the financial statements compared to other laws and regulations that do 
not have a direct effect? 

6-6 (OBJECTIVE 6-3) What is the auditor’s responsibility when noncompliance with laws or 
regulations is identified or suspected? 

6-7 (OBJECTIVE 6-4) What are the six elements of professional skepticism? Describe two of 
those six elements. 

6-8 (OBJECTIVE 6-5) What are the five elements of an effective professional judgment 
process? 

6-9 (OBJECTIVE 6-5) Describe two of the more common judgment traps and biases. 

6-10 (OBJECTIVE 6-6) Identify the cycle to which each of the following general ledger 
accounts will ordinarily be assigned: sales, accounts payable, retained earnings, accounts 
receivable, inventory, and repairs and maintenance. 

6-11 (OBJECTIVES 6-6, 6-7) Describe the cycle approach to segmenting an audit and how the 
auditor conducts financial statement audits using the cycle approach. 

6-12 (OBJECTIVE 6-8) Identify the three broad categories of management assertions. 

6-13 (OBJECTIVES 6-7, 6-8) Distinguish between PCAOB assertions and international and 
AICPA assertions. Why are PCAOB assertions similar to the assertions in international 
and AICPA auditing standards? 

6-14 (OBJECTIVE 6-9) Identify the specific transaction-related audit objectives and relation- 
ships among management assertions and transaction-related audit objectives. 

6-15 (OBJECTIVE 6-10) Distinguish between the existence and completeness balance-related 
audit objectives. State the effect on the financial statements (overstatement or understate- 
ment) of a violation of each in the audit of accounts receivable. 

6-16 (OBJECTIVES 6-9, 6-10) What are specific audit objectives? Explain their relationship to 
the general audit objectives. 

6-17 (OBJECTIVES 6-8, 6-10) Identify the presentation and disclosure-related audit 
objectives. 

6-18 (OBJECTIVES 6-8, 6-10) Identify the management assertion and presentation and dis- 
closure-related audit objective for the specific presentation and disclosure-related audit 
objective: Read the fixed asset footnote disclosure to determine that the types of fixed 
assets, depreciation methods, and useful lives are clearly disclosed. 

6-19 (OBJECTIVE 6-11) Identify the four phases of the audit. What is the relationship of the 
four phases to the objective of the audit of financial statements? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


6-20 (OBJECTIVE 6-1) The following questions concern the reasons auditors do audits. 
Choose the best response. 


a. Which of the following best describes the reason why an independent auditor 

reports on financial statements? 

(1) A misappropriation of assets may exist, and it is more likely to be detected by 
independent auditors. 

(2) Different interests may exist between the company preparing the statements and 
the persons using the statements. 

(3) A misstatement of account balances may exist and is generally corrected as the 
result of the independent auditor’s work. 

(4) Poorly designed internal controls may be in existence. 


b. Because of the risk of material misstatement, an audit should be planned and per- 
formed with an attitude of 
(1) objective judgment. (3) professional skepticism. 
(2) independent integrity. (4) impartial conservatism. 
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c. The major reason an independent auditor gathers audit evidence is to 
(1) form an opinion on the financial statements. 

(2) detect fraud. 

(3) evaluate management. 

(4) assess control risk. 


6-21 (OBJECTIVE 6-3) The following questions deal with errors and fraud. Choose the best 
response. 


a. An independent auditor has the responsibility to design the audit to provide reason- 
able assurance of detecting errors and fraud that might have a material effect on the 
financial statements. Which of the following, if material, is a fraud as defined in audit- 
ing standards? 

(1) Misappropriation of an asset or groups of assets 

(2) Clerical mistakes in the accounting data underlying the financial statements 

(3) Mistakes in the application of accounting principles 

(4) Misinterpretation of facts that existed when the financial statements were 

prepared 


b. What assurance does the auditor provide that errors and fraud that are material to the 
financial statements will be detected? 


Errors Fraud 

(1) Limited Negative 
(2) Reasonable Reasonable 
(3) Limited Limited 

(4) Reasonable Limited 


c. Which of the following statements describes why a properly designed and executed 
audit may not detect a material misstatement in the financial statements resulting 
from fraud? 

(1) Audit procedures that are effective for detecting unintentional misstatements 
may be ineffective for an intentional misstatement that is concealed through 
collusion. 

(2) An audit is designed to provide reasonable assurance of detecting material errors, 
but there is no similar responsibility concerning fraud. 

(3) The factors considered in assessing control risk indicated an increased risk of 
intentional misstatements, but only alow risk of unintentional misstatements. 

(4) The auditor did not consider factors influencing audit risk for account balances that 
have effects pervasive to the financial statements taken as a whole. 


6-22 (OBJECTIVE 6-8) The following questions deal with management assertions. Choose 
the best response. 


a. An auditor reviews aged accounts receivable to assess likelihood of collection to sup- 
port management's assertion about account balances of 
(1) existence. 
(2) completeness. 
(3) valuation and allocation. 
(4) rights and obligations. 


b. An auditor will most likely review an entity’s periodic accounting for the numeri- 
cal sequence of shipping documents to ensure all documents are included to support 
management’s assertion about classes of transactions of 
(1) occurrence. 

2) completeness. 

3) accuracy. 

4) classification. 
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c. In the audit of accounts payable, an auditor’s procedures will most likely focus pri- 
marily on management's assertion about account balances of 
(1) existence. 


(2) completeness. 
(3) valuation and allocation. 
(4) classification and understandability. 
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DISCUSSION QUESTIONS AND PROBLEMS 


6-23 (OBJECTIVE 6-1) This problem requires you to access authoritative standards to com- = 
pare the objective of an audit as defined by AICPA auditing standards (see p. 145) and FN 
International Standards on Auditing (ISA 200) (www.iaasb.org) and the objective of an ‘Ov 
audit of internal control over financial reporting as defined by PCAOB auditing standards 4% 
(AS 5) (www.pcaobus.org). 


a. Compare the objective of an audit under AICPA Auditing Standards and International Required 
Standards on Auditing. Are there substantive differences in the objective of an audit 
as defined by these two sets of standards? 
b. What is the objective of an audit of internal control over financial reporting according 
to PCAOB auditing standards? 
c. What defines whether financial statements are fairly stated, and what defines whether 
internal control is considered effective? Are they related? 


6-24 (OBJECTIVES 6-2, 6-3) The following are selected portions of the report of management 
from a published annual report. 


Report of Management 
Management’s Report on Internal Control over Financial Reporting 


The Company’s managementis responsible for establishing and maintaining adequate 
internal control over financial reporting. The Company’s internal control over finan- 
cial reporting is a process designed under the supervision of its President and Chief 
Executive Officer and Chief Financial Officer to provide reasonable assurance regard- 
ing the reliability of financial reporting and the preparation of the Company’s financial 
statements for external reporting in accordance with accounting principles generally 
accepted in the United States of America. Management evaluates the effectiveness of 
the Company’s internal control over financial reporting using the criteria set forth by 
the Committee of Sponsoring Organizations of the Treadway Commission (COSO) 
in Internal Control—Integrated Framework. Management, under the supervision and with 
the participation of the Company’s President and Chief Executive Officer and Chief 
Financial Officer assessed the effectiveness of the Company’s internal control over 
financial reporting as of December 31, 2016, and concluded it is effective. 


Management’s Responsibility for Consolidated Financial Statements 


Management is also responsible for the preparation and content of the accompanying 
consolidated financial statements as well as all other related information contained in 
this annual report. These financial statements have been prepared in conformity with 
accounting principles generally accepted in the United States, and necessarily include 
amounts which are based on management's best estimates and judgments. 


a. What are the purposes of the two parts of the report of management? Required 
b. What is the auditor’s responsibility related to the report of management? 


6-25 (OBJECTIVES 6-1, 6-3) Auditors provide “reasonable assurance” that the financial state- 
ments are “fairly stated, in all material respects.” Questions are often raised as to the 
responsibility of the auditor to detect material misstatements, including misappropriation 
of assets and fraudulent financial reporting. 


a. Discuss the concept of “reasonable assurance” and the degree of confidence that Required 
financial statement users should have in the financial statements. 
b. What are the responsibilities of the independent auditor in the audit of financial state- 
ments? Discuss fully, but in this part do not include fraud in the discussion. 
c. What are the responsibilities of the independent auditor for the detection of fraud 
involving misappropriation of assets and fraudulent financial reporting? Discuss 
fully, including your assessment of whether the auditor’s responsibility for the detec- 
tion of fraud is appropriate. 
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6-26 (OBJECTIVE 6-4) The following information was obtained from several account- 
ing and auditing enforcement releases issued by the Securities and Exchange 
Commission (SEC) after its investigation of fraudulent financial reporting involving 
ABC, Inc: 


ABC, Inc., was an international retailer of gym wear based in Perth, Australia. 
The company incurred large amounts of advertising expenses and most suppliers 
offered financial assistance through unwritten agreements with ABC to help pay for 
these advertising expenses. If ABC promoted a particular supplier’s products in one 
of its advertisements, that supplier typically would consider agreeing to provide an 
“advertising co-op credit” to the Company to share the costs of the advertisement. 
Just for ABC offset this co-op revenue against advertising expense on its income 
statement, thereby increasing its net earnings. Although every supplier agreement 
was somewhat different, ABC’s receipt of advertising co-op revenue was contingent 
upon subsequent approval by the supplier. If the supplier approved the advertise- 
ment, it would usually issue the co-op payment to ABC in the form ofa credit memo 
offsetting expenses on ABC’s merchandise purchases from that supplier. The com- 
pany’s CFO, controller, and VP of Operations directed the Company’s accounting 
department to book co-op receivables and related revenues that they knew were 
not owed by certain supplier, including Nike, New Balance, Adidas, and Reebok. 
These fraudulent practices resulted in over A$20 million in fictitious pretax earn- 
ings being reported, out of total pretax income of approximately A$50 million. The 
SEC ultimately brought charges against a number of senior executives at ABC and 
some supplier representatives. 


Required a. What does it mean to approach an audit with six characteristics of professional skep- 
ticism? 

b. What circumstances related to the accounting treatment of the supplier allowances 
should increase an auditor’s professional skepticism? 

c. What factors might have caused the auditor to inappropriately accept the assertions 
by management that the supplier allowances should be reflected in the financial 
statements? 

d. Develop three probing questions related to the supplier allowances that the auditor 
should have asked in the audit of ABC’s financial statements. 


© @.. 6-27 (opjective 6-5) The following independent scenarios describe auditor decisions made 
during an audit engagement. 


1. Cai Di worked on the audit of China Healthcare Associations (CHA), which operates 
hospitals and outpatient centers in Shanghai and Beijing. Cai was assigned responsi- 
bility to audit the allowance for patient receivables. For the past several years, CHA’s 
accounting policy required that the recorded allowance for patient receivables be set 
to equal the total amount of receivables over 180 days past due. Prior audit testing of 
the allowance in previous years has found that the subsequent write-offs of patient 
receivables have closely approximated the amount included in the allowance. During 
the current year audit, Cai examined the amount recorded in the general ledger allow- 
ance account and reconciled that amount to the amount shown in CHA’s consolidat- 
ed aged trial balance in the 180 days past due amount. Given that the dollar amounts 
agreed, Cai concluded that the allowance was in accordance with CHA accounting 
policy and fairly stated. While media reports and other industry publications sug- 
gested that recent regulatory changes in healthcare insurance were affecting patients’ 
ability to pay, Cai concluded that CHA’s allowance was fairly stated given the amounts 
complied with CHA’s policy. 


2. John Peter was assigned responsibility for evaluating the goodwill impairment testing 
process at ABC, Inc. Because ABC’ growth strategy was based mostly on acquisitions, 
the company had experience in performing annual impairment tests of goodwill. 
The client provided John extensive information along with detailed schedules that 
documented management’s testing approaches, and it provided her support for key 
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assumptions made by management. John reviewed the schedules in detail and tested 
the key calculations. While John’s firm has a number of valuation specialists as part 
of its staff, John decided not to request their assistance in making an independent 
assessment of goodwill impairment given that the client’s documentation was exten- 
sive and it would take too much time to have the firm’s valuation specialists complete 
an independent assessment. 


3. Jason Peter was responsible for auditing the occurrence of sales transactions in the 
audit of ABC Manufacturing. As part of his testing, he reviewed the contracts signed 
between ABC Manufacturing and its customers to determine that the transaction 
terms justified the recording of sales for the year under audit. In addition, he exam- 
ined documentation related to the sales transactions, including the customers’ pur- 
chase orders, shipping documents, and invoices generated by ABC. That evidence 
examined supported the correct recording of sales in the current year. However, 
Jason also noticed in the customer files copies of email exchanges between ABC 
Manufacturing sales agents and the customers suggesting that some of the terms of 
the sales agreements could be waived at the customers’ discretion. Jason decided to 
rely on the contracts and sales transactions documentation to conclude that the sales 
were properly stated, given that the other information was only included in emails. 


4. John Peter works on a number of audits of technology equipment manufacturers and 
has developed extensive knowledge and experience in the industry. On the recent au- 
dit engagement of financial statements for ABC Technologies, John was responsible 
for auditing the valuation of inventories, including the reserve for obsolescence. Giv- 
en his familiarity with the industry, John decided to conduct a quick analytical proce- 
dure regarding the days in inventory and determined that the reserve was fairly stated, 
given it was in line with reserves established by some of his other clients. He deter- 
mined that additional evidence was not necessary to obtain because of his experience 
with other clients. 


For each of the scenarios listed above, describe the most likely judgment trap that ulti- Required 
mately biased the auditor's decision making in the audit. 


6-28 (OBJECTIVE 6-5) The following general ledger accounts are included in the trial balance 
for an audit client, Jones Wholesale Stationery Store. 


Accounts payable Depreciation expense— Prepaid insurance 
Accounts receivable furniture and equipment Property tax expense 
Accrued interest expense Furniture and equipment Property tax payable 
Accrued sales salaries Income tax expense Purchases 
Accumulated depreciation— Income tax payable Rent expense 
furniture and equipment Insurance expense Retained earnings 
Advertising expense Interest expense Salaries, office and general 
Allowance for doubtful accounts Inventory Sales 
Bad debt expense Loans payable Sales salaries expense 
Cash Notes payable Telecommunications 
Common stock Notes receivable—trade expense 


a. Identify the accounts in the trial balance that are likely to be included in each transac- Required 
tion cycle. Some accounts will be included in more than one cycle. Use the format 
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Balance Sheet Income Statement 
Cycle Accounts Accounts 
Sales and collection 
Acquisition and payment 
Payroll and personnel 


Inventory and warehousing 
Capital acquisition and repayment 
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b. How will the general ledger accounts in the trial balance most likely differ if the com- 
pany were a retail store rather than a wholesale company? How will they differ for a 
hospital or a government unit? 


6-29 (OBJECTIVE 6-8) The following are various management assertions (a. through m.) 
related to sales and accounts receivable. 


Management Assertion 
a. Receivables are appropriately classified as to trade and other receivables in the 
financial statements and are clearly described. 
. Sales transactions have been recorded in the proper period. 
. Accounts receivable are recorded at the correct amounts. 
. Sales transactions have been recorded in the appropriate accounts. 
. All required disclosures about sales and receivables have been made. 
. All accounts receivable have been recorded. 
. Disclosures related to receivables are at the correct amounts. 
. Sales transactions have been recorded at the correct amounts. 
. Recorded accounts receivable exist. 
. Disclosures related to sales and receivables relate to the entity. 
. Recorded sales transactions have occurred. 
. There are no liens or other restrictions on accounts receivable. 
. All sales transactions have been recorded. 


S} — Ao we. O99 moana 


Required a. Explain the differences among management assertions about classes of transactions 
and events, management assertions about account balances, and management asser- 
tions about presentation and disclosure. 

b. For each assertion, indicate whether it is an assertion about classes of transactions 
and events, an assertion about account balances, or an assertion about presentation 
and disclosure. 

c. Indicate the name of the assertion made by management. (Hint: See Table 6-3 on 
p. 183.) 


6-30 (OBJECTIVES 6-8, 6-10) The following are specific balance-related audit objectives applied 
to the audit of accounts receivable (a. through h.) and management assertions about 
account balances (1 through 4). The list referred to in the specific balance-related audit 
objectives is the list of the accounts receivable from each customer at the balance sheet date. 


Specific Balance-Related Audit Objective 

a. There are no unrecorded receivables. 

b. Uncollectible accounts have been provided for. 

c. Receivables that have become uncollectible have been written off. 

d. All accounts on the list are expected to be collected within one year. 

e. The total of the amounts on the accounts receivable listing agrees with the general 
ledger balance for accounts receivable. 

f. All accounts on the list arose from the normal course of business and are not due 
from related parties. 

g. Sales cutoff at year-end is proper. 

h. Receivables have not been sold or discounted. 


Management Assertion About Account Balances 
1. Existence 3, Valuation and allocation 
2. Completeness 4. Rights and obligations 


Required For each specific balance-related audit objective, identify the appropriate management 
assertion. (Hint: See Table 6-5 on p. 189.) 


6-31 (OBJECTIVES 6-8, 6-9) The following are specific transaction-related audit objectives 
applied to the audit of cash disbursement transactions (a. through f.), management asser- 
tions about classes of transactions (1 through 5), and general transaction-related audit 
objectives (6 through 11). 
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Specific Transaction-Related Audit Objective 

a. Existing cash disbursement transactions are recorded. 

b. Recorded cash disbursement transactions are for the amount of goods or services 
received and are correctly recorded. 

c. Cash disbursement transactions are properly included in the accounts payable 
master file and are correctly summarized. 

d. Recorded cash disbursements are for goods and services actually received. 

e. Cash disbursement transactions are properly classified. 

f. Cash disbursement transactions are recorded on the correct dates. 


Management Assertion About General Transaction-Related 
Classes of Transactions Audit Objective 
1. Occurrence 6. Occurrence 
2. Completeness 7. Completeness 
3. Accuracy 8. Accuracy 
4. Classification 9. Posting and summarization 
5. Cutoff 10. Classification 
11. Timing 


a. Explain the differences among management assertions about classes of transactions Required 
and events, general transaction-related audit objectives, and specific transaction- 
related audit objectives and their relationships to each other. 

b. For each specific transaction-related audit objective, identify the appropriate man- 
agement assertion. 

c. For each specific transaction-related audit objective, identify the appropriate general 
transaction-related audit objective. 


6-32 (OBJECTIVE 6-10) The following (1 through 18) are the balance-related, transaction- 
related, and presentation and disclosure-related audit objectives. 


Balance-Related Transaction-Related Presentation and Disclosure 
Audit Objectives Audit Objectives Audit Objectives 

1. Existence 9. Occurrence 15. Occurrence and rights 
2. Completeness 10. Completeness 16. Completeness 

3. Accuracy 11. Accuracy 17. Accuracy and valuation 
4. Classification 12. Classification 18. Classification and 

5. Cutoff 13. Timing understandability 

6. Detail tie-in 14. Posting and 

7. Realizable value summarization 

8. Rights and obligations 


Identify the specific audit objective (1 through 18) that each of the following specific Required 
audit procedures (a. through 1.) satisfies in the audit of sales, accounts receivable, and cash 
receipts for fiscal year ended December 31, 2016. 


a. Examine a sample of duplicate sales invoices to determine whether each one has a 
shipping document attached. 

b. Add all customer balances in the accounts receivable trial balance and agree the 
amount to the general ledger. 

c. For a sample of sales transactions selected from the sales journal, verify that the 
amount of the transaction has been recorded in the correct customer account in the 
accounts receivable subledger. 

d. Inquire of the client whether any accounts receivable balances have been pledged as 
collateral on long-term debt and determine whether all required information is in- 
cluded in the footnote description for long-term debt. 

e. For a sample of shipping documents selected from shipping records, trace each ship- 
ping document to a transaction recorded in the sales journal. 
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f. Discuss with credit department personnel the likelihood of collection of all accounts 
as of December 31, 2016, with a balance greater than $100,000 and greater than 90 
days old as of year end. 

g. Examine sales invoices for the last five sales transactions recorded in the sales journal 
in 2016 and examine shipping documents to determine they are recorded in the cor- 
rect period. 

h. For a sample of customer accounts receivable balances at December 31, 2016, exam- 
ine subsequent cash receipts in January 2017 to determine whether the customer paid 
the balance due. 

Determine whether all risks related to accounts receivable are adequately disclosed. 
Foot the sales journal for the month of July and trace postings to the general ledger. 

. Send letters to a sample of accounts receivable customers to verify whether they have 
an outstanding balance at December 31, 2016. 

]. Determine whether long-term receivables and related party receivables are reported 

separately in the financial statements. 


ee 


6-33 (OBJECTIVE 6-11) Following are seven audit activities. 


a. Examine sales transactions in the sales journal for unusually large amounts and also 
compare total monthly sales with prior years. 

b. Understand the unique accounting requirements of the client’s industry. 

c. Combine the information obtained to reach an overall conclusion as to whether the 
financial statements are fairly presented. 

d. Test the effectiveness of control by comparing a sample of sales invoices to related 
shipping documents and customer sales orders. 

e. Identify whether the accounts receivable exists through direct written communica- 
tion with the client’s customers. 

f. Identify internal controls and evaluate effectiveness, a process called assessing control 
risk. 

g. Use computer software to compare to compare the unit selling price on duplicate sales 
invoices with an electronic file of approved prices as a test of the accuracy objectives 
for sales transactions. 


Required For each activity listed above, indicate in which phase of the audit the procedure was likely 
performed. 
a. Plan and design an audit approach based on risk assessment procedures (Phase 1) 
b. Perform tests of controls and substantive tests of transactions (Phase II) 
c. Perform analytical procedures and tests of details of balances (Phase III) 
d. Complete the audit and issue an audit report (Phase IV) 
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Rick Chulick, President and Chief Operating Officer 


DEAR SHAREHOLDERS 


March 29, 2017 
We are proud to announce another year of noticeable improvement. 

In last year’s letter we stated, “We are committed to increasing the efficiency and effectiveness of opera- 
tions through cost savings and productivity improvements, in light of current economic conditions. In addi- 
tion, we intend to maintain and further develop our customer base through recently implemented post-sale 
service programs.” The operating results in this report demonstrate that our objectives have been achieved, 
resulting in a net income increase of $740,000 from 2015 to 2016. This amounts to 15 cents per share, a 
23.2% increase from last year. Our goal in the current year is to further improve the results of operations and 
create value for shareholders. In doing so, we will focus primarily on the following three strategic components 


of our business plan: 


1. Post-sale service arrangements designed to further develop and maintain our customer base. 

2. Aggressive advertising campaigns that allow us to penetrate markets dominated by national wholesale hardware 
store chains. 

3. Implementation of new warehouse technology designed to increase productivity and reduce stocking and distri- 


bution costs. 


We will report our progress throughout the year. 


Christopher J. Kurran Rick Chulick 
Chief Executive Officer President and Chief Operating Officer 
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BusInNess 


History 

Hillsburg Stores Inc. began operations in 1987 in Gary, Indiana, 
as a retail hardware store chain. On September 25, 1993, 
Hillsburg merged with Handy Hardware and Lumber Company, 
which established the concept of selling high-quality hardware 
through wholesale distribution outlets, to form Handy-Hillsburg, 
Inc., a Washington corporation. On June 5, 1997, after spin- 
ning Off all of its lumber-related assets to Handy Corporation, 
the company changed its name to Hillsburg Hardware, Inc. On 
October 22, 1999, the company reincorporated from Washington 
to Delaware and changed its name to Hillsburg Hardware 
Company (hereafter referred to as “the Company”), which trades 
on the NASDAQ under the symbol “HLSB.” 


Overview 

Hillsburg Hardware Company is a wholesale distributor of 
hardware equipment to a variety of independent, high-quality 
hardware stores in the midwestern part of the United States. The 
primary products are power and hand tools, landscaping equip- 
ment, electrical equipment, residential and commercial con- 
struction equipment, and a wide selection of paint products. 

More than 90% of the Company’s products are purchased 
from manufacturers and shipped either directly to customers or 
to the main warehouse in Gary, Indiana, where shipments are 
combined to minimize the costs of freight and handling. 

Hardware retailers, now more than ever, find it advanta- 
geous to purchase from us rather than directly from manufactur- 
ers. We make it possible for smaller, independent retailers to 
purchase on an as-needed basis, rather than in bulk. Moreover, 
we offer our customers a range of high-quality products that 
cannot be found at most national chains. 

We also offer far more post-sale services to customers than 
are offered by manufacturers and other national distributors. We 
simplify the purchasing process by assigning each customer a 
permanent salesperson. Each salesperson becomes involved in 


the sales process, and also acts as a liaison between the cus- 
tomer and post-sale service areas. For example, when custom- 
ers experience technical problems with recently purchased hard- 
ware, their salesperson has the responsibility to coordinate both 
exchanges and warranty repairs with the manufacturer. This 
process adds value for customers and makes post-sales service 
more efficient and less problematic. Low turnover and extensive 
training of our salespeople enhance this service. 

To further encourage customer loyalty, each customer 
is given access to our internal database system —ONHAND 
(Online Niche-Hardware Availability Notification Database). The 
ONHAND system lets customers check the availability of hard- 
to-find products instantly over the Internet. Moreover, the sys- 
tem includes data such as expected restock dates for items that 
are currently sold out and expected availability dates for items 
that will soon be introduced to the market. 

Because of the two aforementioned processes, we have 
managed to maintain a repeat-customer base. Nearly 75% of 
all first-time customers make at least one additional purchase 
within one year of their first purchase. 

Recently, there have been major consolidations in the 
wholesale hardware industry. We believe this consolidation trend 
is advantageous to our operations as a distributor of hard-to- 
find, high-quality hardware equipment. The recent consolida- 
tion of Builder’s Plus Hardware, Inc., one of the top ten largest 
national hardware store chains, is a case in point. One month 
after the consolidation, Builder’s Plus decided not to carry high- 
end construction and landscaping equipment in order to focus 
on what it called the “typical hardware customer.” 


Products 

To more effectively manage inventory, we carefully monitor the 
composition of net sales by category of items sold. The follow- 
ing chart indicates the percentage of net sales by class of mer- 
chandise sold during the years 2016, 2015, and 2014: 


25% 
n — ™@ 2016 
_l ° @ 2015 
rs 15% 
% M2014 
= 
Wu 
Z 10% 
Le 
O 5% 
8 
0% 
Power Landscaping Electrical Residential Commercial Paint 
Tools Tack Equipment Equipment Construction Construction Products 


MERCHANDISE TYPE 


Created from undip-ebooks on 2020-12-10 22:09:31. 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Marketing Program 

This year, the Company made a significant investment in a 

new advertising campaign. Various Internet, radio, newspaper, 
magazine, and television advertisements were purchased at the 
local and regional levels using the Company’s new catchphrase, 
“Hardware for Hard Workers.” The new jingle has been partially 
responsible for the fiscal 2016 increase in sales of 9%. 


Customers 

The majority of our customers are located in Illinois, Michigan, 
Wisconsin, Ohio, and Missouri. Our current customer base con- 
sists of more than 400 independently owned hardware stores. 
Approximately 25% of our customers make up more than 80% 
of total sales revenue. To promote long-standing relationships 
with customers, we offer an array of incentive and customer 
appreciation programs. Since these programs were implemented 
in 2007, customer satisfaction ratings have improved steadily in 
each subsequent year. 


Suppliers 

We purchase hardware and other products from more than 300 
manufacturers in the United States. No single vendor accounted 
for more than 5% of our purchases during fiscal 2016, but our 
25 largest vendors accounted for nearly 35%. We currently have 
long-term supply agreements with two vendors: Mechanical 
Tools and Painter’s Paradise. These agreements are in effect 
until the end of fiscal year 2017. The combined dollar amount of 
each contract is not expected to exceed 5% of total purchases 
for the year. 


Wholesale Hardware 


Competitors 

There are other regional wholesale hardware distributors that 
compete with the Company, but national wholesale hardware 
store chains dominate the industry. Most of our competitors 

are not only larger, but have greater financial resources than 
our company. Ten national chains exist in the geographic area 
in which Hillsburg Hardware Co. operates. Of the ten national 
chains, Hardware Bros., Tools & Paint, and Construction City 
account for a significant portion of the wholesale hardware mar- 
ket share and also carry the hard-to-find and high-quality items 
we provide. The success of our business depends on our ability 
to keep distribution costs to a minimum and our customers sat- 
isfied through superior customer service. 

The chart below is a breakdown of market share in the 
wholesale hardware market by competitor category, including 
the 2% market share held by the Company. The chart illustrates 
that we have considerable opportunity for sales growth. 


Employees 

Hillsburg Hardware currently employs 319 individuals. The major- 
ity of our employees are involved in day-to-day sales. Because 
of our marketing and customer relations strategy, we make sig- 
nificant investments in ongoing training and professional devel- 
opment activities. Each year employees are required to attend 

75 hours of professional training. Each employee receives a 
performance evaluation at least four times per year, usually once 
each quarter. Our turnover is among the lowest in the industry 
because of our compensation, training, and evaluation programs. 
We regard our employees as our most valuable asset. 
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Properties NAME AGE POSITION 
The Company owns and operates its main warehouse and an 
administrative office. The main warehouse and administrative 
office are in the same 475,000 square-foot building. We also rent 
a second warehouse for which rental fees are $312,000 annually. 
The building, located in Detroit, Michigan, serves as an off-site 
storage facility. 


John P. Higgins 55 Chairman of the Board 


Christopher J. Kurran 47 Chief Executive 


KuUSINeESS 


Legal Proceedings Officer (b) 
On September 3, 2015, a suit was filed in the Circuit Court in 
Gary, Indiana, against the Company. The product liability suit, 
“Don Richards v. Hillsburg Hardware Co.” is related to injuries 
that resulted from an alleged defective design of a tractor Rick Chulick 48 President and Chief 
manufactured by Silo-Tractor, a U.S. corporation. The suit is cur- Operating Officer (a) 
rently in pretrial proceedings. In the opinion of our legal counsel 
the suit is without merit. We intend to vigorously defend our 
position. 
The Company does not believe any other legal issues Avis A. Zomer 44 — Chief Financial Officer 

materially affect its finances. 
Executive Officers 
The following list provides names, ages, and present positions 
of the Company’s officers: = Brandon S. Mack 51 Vice President Sales 

r and Marketing 

) 
Mary R. Moses 36 —- Vice President 


Merchandising 


Vanessa M. Namie 53 Vice President 
Operations (c) 


Joseph A. Akins 64 Vice President Quality 
Assurance (d) 


‘a) Mr. Chulick has been President and Chief Operating Officer of the Company since 
November 2006. 

b) Mr. Kurran has been Chief Executive Officer of the Company since September 2006. 
Prior to his role as CEO, Mr. Kurran was employed from 1997-2005 by Trini Enterprises, 
an industrial distributor. 

‘c) Ms. Namie has been employed by the company since its inception in 1999. She 

has held her current position since 2005 and served as an operations manager from 
1999-2005. 

(d) Mr. Akins was Chief Operating Officer and President of Hardware Bros., one of the ten 
largest wholesale hardware chains in the nation, from 2003-2008. 
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Controls and Procedures 

Pursuant to Section 404 of the Sarbanes-Oxley Act of 2002 
and related Exchange Act Rules, we have carefully evaluated 
the design and operating effectiveness of our internal control 
over financial reporting. After careful review of all key controls 
over financial reporting, our Chief Executive Officer and Chief 
Financial Officer implemented new controls to strengthen pro- 
cesses surrounding revenue recognition. In compliance with 
Section 404 and related Exchange requirements, management 
has issued its report that internal controls over financial report- 
ing are operating effectively as of December 31, 2016 based 
on criteria established in the COSO Internal Control-Integrated 
Framework. 


“We offer our 
Customers a range 
of high-quality 
oroducts that cannot 
be found at most 
national chains.” 


Information Regarding Common Equity 
Hillsburg Hardware Company’s common stock currently trades 
on the NASDAQ under the symbol “HLSB.” The following chart 
shows the high and low prices of the Company’s common stock 
by quarter for the years 2016 and 2015: 


2016 2015 
HIGH LOW HIGH LOW 
Quarter 1 22.50 19.05 23.30 20.00 
Quarter 2 22.55 20.10 22.75 20.25 
Quarter 3 22.30 20.99 24.10 19.75 
Quarter 4 22.40 17.95 21.50 18.20 


On March 23, 2017, there were 1,250 shareholders of our com- 
mon stock. 


Dividend Policy 

Dividend payments on common stock are authorized annually by 
the Board of Directors. For 2016, dividend payments totaled $1.9 
million, which is $.38 per share. 
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ACCOUNTING FIRM 


Board of Directors and Stockholders 
Hillsburg Hardware Company 


We have audited the accompanying balance sheets of Hillsburg Hardware Company as of December 31, 2016 and 2015, and the 
related statements of income, stockholders’ equity and comprehensive income, and cash flows for each of the years in the three- 
year period ended December 31, 2016. We have also audited Hillsburg Hardware Company, Inc.’s internal control over financial 
reporting as of December 31, 2016, based on criteria established in Internal Control-Integrated Framework issued by the Committee 
of Sponsoring Organizations of the Treadway Commission (COSO). Hillsburg Hardware Company’s management is responsible for 
these financial statements, for maintaining effective internal control over financial reporting, and for its assessment of the effective- 
ness of internal control over financial reporting, included in the accompanying report, Management’s Responsibility for the Financial 
Statements. Our responsibility is to express an opinion on these financial statements and an opinion on the company’s internal 
control over financial reporting based on our audits. 


We conducted our audits in accordance with the standards of the Public Company Accounting Oversight Board (United States). 
Those standards require that we plan and perform the audits to obtain reasonable assurance about whether the financial state- 
ments are free of material misstatement and whether effective internal control over financial reporting was maintained in all material 
respects. Our audit of financial statements included examining, on a test basis, evidence supporting the amounts and disclosures in 
the financial statements, assessing the accounting principles used and significant estimates made by management, and evaluating 
the overall financial statement presentation. Our audit of internal control over financial reporting included obtaining an understanding 
of internal control over financial reporting, assessing the risk that a material weakness exists, and testing and evaluating the design 
and operating effectiveness of internal control based on the assessed risk. Our audits also included performing such other proce- 
dures as we considered necessary in the circumstances. We believe that our audits provide a reasonable basis for our opinions. 


A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability 
of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted ac- 
counting principles. A company’s internal control over financial reporting includes those policies and procedures that (1) pertain to 
the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of 
the company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial state- 
ments in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being 
made only in accordance with authorizations of management and directors of the company; and (3) provide reasonable assurance 
regarding the prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have 
a material effect on the financial statements. 


Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections 
of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes 
in conditions, or that the degree of compliance with the policies or procedures may deteriorate. 


In our opinion, the financial statements referred to above present fairly, in all material respects, the financial position of Hillsburg 
Hardware Company, Inc. as of December 31, 2016 and 2015, and the results of its operations and its cash flows for each of the 
years in the three-year period ended December 31, 2016, in conformity with accounting principles generally accepted in the United 
States of America. Also in our opinion, Hillsoburg Hardware Company maintained, in all material respects, effective internal control 
over financial reporting as of December 31, 2016, based on criteria established in Internal Control-Integrated Framework issued by 


the Committee of Sponsoring Organizations of the Treadway Commission (COSO). 
berger & Anthony, yep 


Berger and Anthony, LLP 
Gary, Indiana 
March 21, 2017 
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The accompanying financial statements of Hillsburg Hardware Company have been prepared by management, which is responsible 
for their integrity and objectivity. The statements have been prepared in conformity with accounting principles generally accepted 

in the United States of America and include amounts based on management’s best estimates and judgments. Management has 
also prepared information elsewhere in this Annual Report that is consistent with data in the financial statements. The Company’s 
financial statements have been audited by Berger and Anthony, independent Certified Public Accountants. Our auditors were given 
unrestricted access to all financial records and related data, including minutes of the meetings of the Board of Directors. We believe 
all representations made to Berger and Anthony were legitimate and appropriate. 


Management’s Responsibility for the Financial Statements 
To Our Shareholders: 


The management of Hillsburg Hardware Company is responsible for establishing and maintaining adequate internal control over fi- 
nancial reporting. Hillsburg Hardware Company’s internal control system was designed to provide reasonable assurance to the com- 
pany’s management and board of directors regarding the preparation and fair presentation of published financial statements. 


Hillsburg Hardware Company management assessed the effectiveness of the company’s internal control over financial reporting as 
of December 31, 2016. In making this assessment, it used the criteria set forth by the Committee of Sponsoring Organizations of the 
Treadway Commission (COSO) in Internal Control-Integrated Framework. Based on our assessment we believe that, as of December 
31, 2016, the company’s internal control over financial reporting is effective based on those criteria. 


Hillsburg Hardware Company’s independent auditors have issued an audit report on our financial statements and internal control 
over financial reporting. This report appears on the preceding page. 


Mefloge a Aime 


John P. Higgins Christopher J. Kurran Avis A. Zomer 
Chairman of the Board Chief Executive Officer Chief Financial Officer 
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Balance Sheet 


Hillsburg Hardware Company 
Balance Sheets (in thousands) 


ASSETS 
Current assets 
Cash and cash equivalents 
Trade receivables (net of allowances of $1,240 and $1,311) 
Other receivables 
Merchandise inventory 
Prepaid expenses 


Total current assets 


Property and equipment 
Land 
Buildings 
Equipment, furniture, and fixtures 
Less: accumulated depreciation 
Total property and equipment (net) 


Total assets 


LIABILITIES AND STOCKHOLDERS’ EQUITY 
Current liabilities 

Trade accounts payable 

Notes payable 

Accrued payroll 

Accrued payroll tax 

Accrued interest and dividends payable 

Accrued income tax 


Total current liabilities 


Long-term notes payable 
Deferred income taxes 


Other long-term payables 


STOCKHOLDERS’ EQUITY 

Capital stock ($1 par value; 5,000,000 shares issued) 
Capital in excess of par value 

Retained earnings 

Total stockholders’ equity: 

Total liabilities and stockholders’ equity 


See Notes to Financial Statements. 
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December 31 


2016 2015 

$ 828 $ 743 
18,957 16,210 
945 915 
29,865 31,600 
432 427 
51,027 49,895 
3,456 3,456 
32,500 32,000 
6,304 8,660 
(31,920) (33,220) 
10,340 10,896 

$ 61,367 $ 60,791 
$ 4,720 $ 4,432 
4,180 4,589 
1,350 715 
120 116 
2,050 1,975 
796 523 
13,216 12,350 
24,120 26,520 
738 722 

830 770 
5,000 5,000 
3,500 3,500 
13,963 11,929 
22,463 20,429 
$ 61,367 $ 60,791 
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stockholders’ Equity 


Hillsburg Hardware Company op) 
Statement of Operations (in thousands) 
Year Ended December 31 a 
2016 2015 2014 CD 
Net sales $ 143,086 $ 131,226 $ 122,685 3 
Cost of sales 103,241 94,876 88,724 OD 
Gross profit 39,845 36,350 33,961 > 
Selling, general and administrative expenses 32,475 29,656 28,437 f 
Operating income 7,370 6,694 5,524 
Other income and expense © 
Interest expense 2,409 2,035 2,173 
Gain on sale of assets (720) - -— C) 
Total other income/expense (net) 1,689 2,035 2,173 ce 
Earnings before income taxes 5,681 4,659 3,351 OD 
Provision for income taxes 1,747 1,465 1,072 = 
Net income $ 3,934 3,194 2,279 Q) 
Earnings per share $ 0.79 $ 0.64 $ 0.46 oma 
See Notes to Financial Statements. O 
Hillsburg Hardware Company 
Statement of Stockholders’ Equity (in thousands) 
Common Stock Paid-in Retained Total 
Shares Par value Capital Earnings Stockholders’ Equity 
Balance as of December 31, 2013 5,000 $ 5,000 $ 3,500 $ 10,256 $ 18,756 
Net income 2,279 2,279 
Dividends paid (1,900) (1,900) 
Balance as of December 31, 2014 5,000 $ 5,000 $ 3,500 $ 10,635 $ 19,135 
Net income 3,194 3,194 
Dividends paid (1,900) (1,900) 
Balance as of December 31, 2015 5,000 $ 5,000 $ 3,500 $ 11,929 $ 20,429 
Net income 3,934 3,934 
Dividends paid (1,900) (1,900) 
Balance as of December 31, 2016 5,000 $ 5,000 $ 3,500 $ 13,963 $ 22,463 


See Notes to Financial Statements. 
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Hillsburg Hardware Company 
Statement of Cash Flows (in thousands) 


Year Ended December 31 


OPERATING ACTIVITIES 2016 2015 2014 
Net income $ 3,934 $ 3,194 $ 2,279 


Adjustments to reconcile net income to net cash 
provided by (used in) operating activities: 


Joe Flows 


Depreciation and amortization 1,452 1,443 1,505 
(Gain) or Loss on sale of assets (720) ~ ~ 
Deferred income taxes increase (decrease) 16 (8) 43 


Changes in assets and liabilities: 


Trade and other receivables (2,777) (393) (918) 
Merchandise inventory 1,735 (295) (430) 
Prepaid expenses (5) (27) (55) 
Accounts payable 288 132 76 
Accrued liabilities 714 77 142 
Income taxes payable 273 23 13 
Net cash provided by operating activities 4,910 4,146 2,655 

INVESTING ACTIVITIES 
Capital expenditures (10,500) (1,800) (2,292) 
Sale of equipment 10,324 ~ = 
Net cash used in investing activities (176) (1,800) (2,292) 


FINANCING ACTIVITIES 


Dividend payment (1,900) (1,900) (1,900) 
Proceeds (repayments) from borrowings (net) (2,749) (423) 1,602 

Net cash used in financing activities (4,649) (2,323) (298) 
Net increase in cash and cash equivalents 85 23 65 
Cash and cash equivalents at beginning of year 743 720 655 
Cash and cash equivalents at end of year $ 828 $ 743 $ 720 


See Notes to Financial Statements. 
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1. Description of Significant Accounting 
Policies and Business 
Hillsburg Hardware is a wholesale distributor of high-quality 
power tools, hand tools, electrical equipment, landscaping 
equipment, residential and commercial construction equipment, 
and paint products. The majority of customers are smaller, inde- 
pendent hardware stores located in Illinois, Michigan, Wisconsin, 
Ohio, and Missouri. 


Allowance for Doubtful Accounts: The allowance for doubt- 
ful accounts is maintained to account for expected credit losses. 
Estimates of bad debts are based on individual customer risks 
and historical collection trends. Allowances are evaluated and 
updated when conditions occur that give rise to collection 
issues. 


Merchandise Inventory: Merchandise inventory is presented 
at the lower of average cost or market. To present accurately 
the estimated net realizable value of the accounts, inventory 
balances are adjusted when current and expected future market 
conditions, as well as recent and historical turnover trends, 
indicate adjustments are necessary. 


Property, Plant and Equipment: Land, buildings, computers 
and other equipment, and furniture and fixtures are stated at 
historical cost. Depreciation is calculated on a straight-line basis 
over estimated useful lives of the assets. Estimated useful lives 
are 20 to 35 years for buildings and 2 to 10 years for equipment 
and furniture and fixtures. 


Revenue Recognition: Revenues are recognized when goods 
are shipped, title has passed, the sales price is fixed, and col- 
lectibility is reasonably assured. A sales returns and allowance 
account is maintained to reflect estimated future returns and 
allowances. Adjustments to the sales returns and allowance 
account are made in the same period as the related sales are 
recorded and are based on historical trends, as well as analyses 
of other relevant factors. Sales are recorded net of returns and 
allowances in the statements referred to in this report. 


Income Taxes: The deferred income tax account includes tem- 
porary differences between book (financial accounting) income 
and taxable income (for IRS reporting purposes). The account 


consists largely of temporary differences related to (1) the valua- 
tion of inventory, (2) depreciation, and (3) other accruals. 


2. Other Receivables 

The other receivables balance consists largely of vendor allow- 
ances and vendor rebates. When vendor allowances and vendor 
rebates are recognized (all activities required by the supplier 

are completed, the amount is determinable, and collectibility is 
reasonably certain), they are recorded as reductions of costs of 
goods sold. 


3. Notes Payable 

Notes payable for the year ended December 31, 2016, consists 
of three notes payable to the bank. Each note carries a fixed 
interest rate of 8.5%. One note for $4,180,000 matures in June 
2017 and the other two mature on December 31, 2019. During 
2016, there was an additional note outstanding in the amount of 
$4,400,000, which was paid off during October 2016. 


4. Commitments 

The Company is currently committed to an operating lease that 
expires in 2020. Rental payments for the remainder of the con- 
tract are set at $312,000 per annum. 


5. Segment Reporting 

The Company operates in one segment. The breakdown of 
revenues (in thousands) from different products is listed in the 
chart below: 


SEGMENT REPORTING 

2016 2015 2014 
Power Tools $ 31,479 $ 27,557 $ 26,991 
Hand Tools 21,463 19,684 18,403 
Landscaping Equipment 14,309 15,645 13,494 
Electrical Goods 17,170 15,849 11,042 
Residential 


Construction Equipment 21,463 18,372 15,949 


Commercial 
Construction Equipment 11,447 10,498 9,815 


Paint Products 25,755 23,621 26,991 


$143,086 $131,226 $122,685 


6. Earnings Per Share 
Earnings per share calculations for 2016, 2015, and 2014 were 
computed as follows: 


Numerators 
(net income in thousands): $3,934, $3,194, and $2,279 


Denominators 
(shares of common stock): 5,000,000 (unchanged for all years) 


Diluted earnings per share was the same as basic earnings per 
share for all years. 
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ISCUSSIOM 


Managements D 


Management’s Discussion and 
Analysis of Financial Condition and 
Results of Operations 


The following discussion and analysis of the results of our 
operations and our financial condition are based on the financial 
statements and related notes included in this report. When 
preparing the financial statements, we are frequently required 

to use our best estimates and judgments. These estimates and 
judgments affect certain asset, liability, revenue, and expense 
account balances. Therefore, estimates are evaluated constantly 
based on our analyses of historical trends and our understand- 
ing of the general business environment in which we operate. 
There are times, however, when different circumstances and 
assumptions cause actual results to differ from those expected 
when judgments were originally made. The accounting policies 
referred to in Note 1 to the financial statements, in our opinion, 
influence the judgments and estimates we use to prepare our 
financial statements. 


Results of Operations 
For the year ended December 31, 2016, gross profit increased 
by 9.6% or $3,495,000 from 2015. This increase in gross profit 
more than offsets the increase in operating expenses from 2015 
to 2016 of $2,819,000 or 9.5%. The increase in gross margin 
largely explains the operating income increase of $676,000. 
For the year ended December 31, 2015, gross profit 
increased by $2,389,000 or 7% from 2014. Total operating 
expenses increased by $1,219,000 or approximately 4.3% 
from 2014. The increase in gross profit offset the total oper- 
ating expense increase, and the net result was a $1,170,000 
increase in operating income. 


Net Sales: From 2015 to 2016 net sales increased by 
$11,860,000 or 9%. The increase in net sales can be ex- 
plained largely by an aggressive advertising campaign that 
the Company organized during the second half of 2016. 

Net sales for 2015 increased by $8,541,000 or 7.0% from 
2014, which is consistent with industrywide average revenue 
growth of 7% from 2014 to 2015. 


Gross Profit: Gross profit as a percentage of net sales 
stayed relatively stable at 27.68% and 27.70% in 2014 and 
2015, respectively, but increased to 27.85% in 2016. The 
2016 increase is mostly due to improved vendor incentive 
programs, our focus on cost containment, and increases in 
the resale values of certain commodities such as PVC pip- 
ing material and certain types of metal wiring. While gross 
profit percentages in the industry have declined somewhat, 
our position as a niche provider in the overall hardware 
market allows us to charge premium prices without losing 
customers. 


Selling, General, and Administrative Expenses: Selling 
expenses increased by $1,911,000 or 14.8% from 2015 to 
2016 and by $805,000 or 6.7% from 2014 to 2015. As a per- 
centage of net sales, selling expenses increased by 0.52% 
since 2015 and decreased by 0.03% from 2014 to 2015. The 
increase in selling expenses as a percentage of net sales 
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from 2015 to 2016 is due to our new advertising campaign 
and increased expenditures on sales meetings and training. 

General and administrative expenses increased by 
$908,000 or 5.4% from 2015 to 2016 and by $414,000 or 
2.5% from 2014 to 2015. As a percentage of net sales, 
general and administrative expenses decreased by 0.42% 
since 2015 and decreased by 0.55% from 2014 to 2015. 
The overall increase from 2015 to 2016 was caused mostly 
by unexpected repairs needed to reattach and replace dam- 
aged shelving units in our main warehouse building. 


Interest Expense: In 2016, interest expense increased by 
$374,000, or approximately 18.4%, compared to 2015. The 
increase was due to an overall interest rate increase and 

the restructuring of debt covenants that are less restrictive 
but demand higher interest rates. In 2015 interest expense 
decreased by $138,000 or 6.4% compared to 2014. The 
2015 decrease was mainly due to the Company’s decision 
to decrease the level of long-term debt. The average interest 
rates on short- and long-term debt during 2016 were ap- 
proximately 10.5% and 8.5% respectively. 


Liquidity 

During 2016, our working capital requirements were primar- 
ily financed through our line of credit, under which we are 
permitted to borrow up to the lesser of $7,000,000 or 75% of 
accounts receivable outstanding less than 30 days. The aver- 
age interest rate on these short-term borrowings in 2016 was 
approximately 10.5% 

Cash provided by operating activities for 2016 and 2015 
was $4,910,000 and $4,146,000 respectively. The change 
from 2015 to 2016 is primarily due to the increase in net 
income. Increases in receivables were largely offset by de- 
creases in inventories and increases in payables and other 
current liabilities. The increase in cash provided from operat- 
ing activities of $1,491,000 from 2014 to 2015 is largely the 
result of the increase in net income and smaller increases in 
receivables and merchandise inventory in 2015 compared 
to 2014. We believe that cash flow from operations and the 
available short-term line of credit will continue to allow us to 
finance operations throughout the current year. 


Statement of Condition 

Merchandise inventory and trade accounts receivable together 
accounted for over 95% of current assets in both 2016 and 2015. 
Merchandise inventory turned over approximately 3.4 times in 
2016 and 3.0 times in 2015. Average days to sell inventory were 
108.6 and 120.9 in 2016 and 2015 respectively. Net trade receiv- 
ables turned over approximately 7.6 times in 2016 and in 2015. 
Days to collect accounts receivable computations were 48.1 and 
48.0 in 2016 and 2015 respectively. Both inventory and accounts 
receivable turnover are lower than industry averages. We plan 
for this difference to satisfy the market in which we operate. Our 
market consists of smaller, independent hardware stores that 
need more favorable receivable collection terms and immediate 
delivery of inventory. Because we hold large amounts of inven- 
tory, we are able to fill orders quicker than most of our competi- 
tors even during the busiest times of the year. 
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Outlook 

During 2016 we experienced another year of noticeable improve- 
ment, despite the economic environment. The Company’s financial 
performance can largely be attributed to (1) a continued focus on 
cost containment, (2) productivity improvements, (3) aggressive 
advertising, and (4) the implementation of programs designed to 
enhance customer satisfaction. 

During 2017, we will continue to apply the same strategic ef- 
forts that improved 2016 performance. We are also implementing 
anew warehouse information system designed to increase pro- 
ductivity and reduce stocking and distribution costs. Management 
believes that earnings growth will be primarily driven by (1) contin- 
ued focus on customer satisfaction, (2) penetration into markets 
currently dominated by national wholesale hardware store chains, 
and (3) the use of technology to attract additional customers and 
promote more efficient operations. 


Hillsburg Hardware Company 


Five-Year Financial Summary (in thousands) 


Information Concerning Forward-Looking 
Statements 

This report contains certain forward-looking statements 
(referenced by such terms as “expects” or “believes”) that are 
subject to the effects of various factors including (1) changes in 
wholesale hardware prices, (2) changes in the general busi- 
ness environment, (3) the intensity of the competitive arena, 

(4) new national wholesale hardware chain openings, and (5) 
certain other matters influencing the Company’s ability to react 
to changing market conditions. Therefore, management wishes 
to make readers aware that the aforementioned factors could 
cause the actual results of our operations to differ consider- 
ably from those indicated by any forward-looking statements 
included in this report. 


BALANCE SHEET DATA: 2016 2015 2014 2013 2012 
Current assets $ 51,027 $ 49,895 $ 49,157 $ 47,689 $ 46,504 
Total assets 61,367 60,791 59,696 57,441 51,580 
Current liabilities 13,216 12,350 12,173 12,166 9,628 
Long-term notes payable 24,120 26,520 26,938 25,432 25,223 
Total stockholders’ equity 22,463 20,429 19,135 18,756 15,764 
INCOME STATEMENT DATA: 
Net sales $ 143,086 $ 131,226 $122,685 $ 120,221 $ 117,115 
Cost of sales 103,241 94,876 88,724 88,112 85,663 
Gross profit 39,845 36,350 33,961 32,109 31,452 
Earnings before income taxes 5,681 4,659 3,351 3,124 1,450 
Net income 3,934 3,194 2,279 2,142 994 
Cash provided by operating activities 4,910 4,146 2,655 1,811 1,232 
Per common share data: 

Net income $ 0.79 $ 0.64 $ 0.46 $ 0.43 $ 0.22 

Cash dividends per share $ 0.38 $ 0.38 $ 0.38 $ = $ — 

Common shares outstanding 5,000 5,000 5,000 5,000 4,500 


KEY OPERATING RESULTS AND FINANCIAL POSITION RATIOS: 


Gross profit (“%) 27.85% 
Return on assets (%) 9.30% 
Return on common equity (%) 26.49% 


27.70% 27.68% 26.71% 26.86% 
7.73% 5.72% 5.73% 2.86% 
23.55% 17.69% 18.10% 9.50% 
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AUDIT EVIDENCE 


CHAPTER 


CEO Confesses to Falsifying Documents to Hide Fraud 
for Over Twenty Years 


Nine days after his surprise Las Vegas wedding, Russell Wasendorf, Chief Executive Officer 
of Peregrine Financial Group, was found unconscious in his car with a tube running from the 
exhaust pipe into the vehicle. By week’s end, regulators had discovered that approximately 
$215 million in customer money was missing, the futures trading firm had filed for Chapter 7 
liquidating bankruptcy, and its fancy offices were closed. A suicide note was found inside the car 
that admitted the CEO had committed fraud for over 20 years. 


The fraud was exposed 
when the National Futures 
Association (NFA) sent an 
audit team to review Peregrine’s 
books and pressure Peregrine 
into participating in a new 
online system for verifying 
accounts, which would have 
likely made it impossible for 
Wasendorf to continue the 
fraud. Wasendorf had fooled 
the NFA a year earlier after the 
regulator received a report ona 
Friday that Peregrine’s account 
for customer balances had less 
than $10 million. The following Monday, the NFA received a fax purportedly from the bank 
indicating the account held more than $200 million; investigation revealed that the fax had been 
sent by Wasendorf. 


In the signed note found in his car, Mr. Wasendorf admitted to using basic computer software 
programs to make “very convincing forgeries” of bank statements and official correspondence 
from the bank. To prevent other Peregrine employees from learning about the real bank bal- 
ances, Wasendorf insisted that only he could open mail from the bank. Auditors typically con- 
firm bank balances directly with the bank. However, Wasendorf supplied the auditor with the 
address for a post office box that he controlled for the mailing of the confirmations. 


Although Wasendorf’s son was Peregrine’s president, Wasendorf claims that he was the sole 
perpetrator of the fraud. He indicated that the scheme began out of financial desperation as he 
was unable to obtain capital. He admits to taking less than half of the $215 million investigators 
claim is missing, and investigators continue to track the missing funds. Some called for leniency 
because of Wasendorf’s support for charities, but the judge imposed the maximum 50-year 
sentence. 


Sources: |. PJ. Huffstutter, “Peregrine Boss Wasendorf Gets 50 Years Jail for Fraud,” Reuters 
(January 30, 2013) (www.reuters.com); 2. Jacob Bunge, Scott Patterson, and Julie Steinberg, 
“Peregrine CEO’s Dramatic Confession,’ The Wall Street Journal (July 14-15, 2012) (www 
.wsj.com); 3. Jacob Bunge, “Peregrine CEO Arrested,” The Wall Street Journal (July 13, 2012) 
(www.wsj.com); 4. Azam Ahmed and Peter Lattman, “At Peregrine Financial, Signs of Trouble 
Seemingly Missed for Years,’ The New York Times (July 13, 2012) (www.nytimes.com). 
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LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


7-1 Contrast audit evidence 
with evidence used by other 
professions. 

7-2 Identify the four audit evidence 
decisions that are needed to 
create an audit program. 

7-3 Specify the characteristics 
that determine the per- 
suasiveness of evidence. 

7-4 — Identify and apply the 
eight types of evidence 
used in auditing. 

7-5 Know the types of analytical 
procedures and their purposes. 

7-6 Compute common 
financial ratios. 

7-7 Understand the purposes 
of audit documentation. 

7-8 Prepare organized audit 
documentation. 
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‘The foundation of any audit is the evidence obtained and evaluated by the auditor. The auditor must have the 
knowledge and skill to accumulate sufficient appropriate evidence on every audit to meet the standards of the 
profession. As described in this opening story, new technologies can improve the quality of audit evidence, 
but can also create new opportunities for evidence to be compromised. This chapter deals with the types of 
evidence decisions auditors make, the evidence available to auditors, and the use of that evidence in perform- 
ing audits and documenting the results. 


NATURE OF EVIDENCE 


Contrast audit evidence 
with evidence used by other 
professions. 


Audit Evidence 
Contrasted with Legal 
and Scientific Evidence 


Evidence was defined in Chapter 1 as any information used by the auditor to determine 
whether the information being audited is stated in accordance with the established 
criteria. The information varies greatly in the extent to which it persuades the 
auditor whether financial statements are fairly stated. Evidence includes informa- 
tion that is highly persuasive, such as the auditor’s count of marketable securi- 
ties, and less persuasive information, such as responses to questions of client 
employees. 


The use of evidence is not unique to auditors. Evidence is also used extensively by 
scientists, lawyers, and historians. For example, most people are familiar with legal 
dramas on television in which evidence is collected and used to argue for the guilt 
or innocence of a party charged with a crime. In legal cases, there are well-defined 
rules of evidence enforced by the judge for the protection of the innocent. In scien- 
tific experiments, researchers obtain evidence to test hypotheses using controlled 
experiments, such as a drug trial to test the effectiveness of a new medical treatment. 
Similarly, gathering evidence is a large part of what auditors do. Although these pro- 
fessionals rely on different types of evidence, and use evidence in different settings 
and in different ways, lawyers, scientists, and auditors all use evidence to help them 
draw conclusions. 

Table 7-1 illustrates six key characteristics of evidence from the perspectives of a 
scientist doing an experiment, an attorney prosecuting an accused thief, and an audi- 
tor of financial statements. There are six bases of comparison. Notice the similarities 
and differences among these three professions. 


TABLE 7-1 


Characteristics of Evidence for a Scientific Experiment, Legal Case, 


and Audit of Financial Statements 


Basis of Comparison 


Use of the evidence 


Scientific Experiment 
Involving Testing a 
Medicine 


Legal Case Involving an 


Accused Thief Audit of Financial Statements 


Determine whether statements are 
fairly presented 


Determine effects of using the 
medicine 


Decide guilt or innocence 
of accused 


Nature of evidence used 


Results of repeated 
experiments 


Direct evidence and testimony Various types of audit evidence 
by witnesses and parties generated by the auditor, third 
involved parties, and the client 


Party or parties evaluating 
evidence 


Scientist Jury and judge Auditor 


Certainty of conclusions from 
evidence 


Vary from uncertain to near 
certainty 


Requires guilt beyond 
a reasonable doubt 


High level of assurance 


Nature of conclusions 


Recommend or not recommend 
use of medicine 


Innocence or guilt of party Issue one of several alternative types 


of audit reports 


Typical consequences of incorrect 
conclusions from evidence 


Statement users make incorrect 
decisions and auditor may 
be sued 


Society uses ineffective 
or harmful medicine 


Guilty party is not penalized or 
innocent party is found guilty 
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AUDIT EVIDENCE DECISIONS 


A major decision facing every auditor is determining the appropriate types and amounts 
of evidence needed to be satisfied that the client’s financial statements are fairly stated. 
There are four decisions about what evidence to gather and how much of it to accumulate: 


1. Which audit procedures to use 

2. What sample size to select for a given procedure 
3. Which items to select from the population 

4. When to perform the procedures 


An audit procedure is the detailed instruction that explains the audit evidence to be 
obtained during the audit. It is common to spell out these procedures in sufficiently 
specific terms so an auditor may follow these instructions during the audit. For exam- 
ple, the following is an audit procedure for the verification of cash disbursements: 


¢ Examine the cash disbursements journal in the accounting system and compare 
the payee, name, amount, and date with online information provided by the 
bank about checks and electronic transfers processed for the account. 


Once an audit procedure is selected, auditors can vary the sample size from one to all the 
items in the population being tested. In an audit procedure to verify cash disbursements, 
suppose 6,600 checks and electronic transfers are recorded in the cash disbursements 
journal. The auditor might select a sample size of 50 disbursements for comparison with 
the cash disbursements journal. The decision of how many items to test must be made 
by the auditor for each audit procedure. The sample size for any given procedure is likely 
to vary from audit to audit, depending on client characteristics such as the extent of auto- 
mated controls and the required level of assurance from the procedure. 


After determining the sample size for an audit procedure, the auditor must decide 
which items in the population to test. If the auditor decides, for example, to select 50 
disbursements from a population of 6,600 for comparison with the cash disburse- 
ments journal, several different methods can be used to select the specific items to 
be examined. The auditor can (1) select a week and examine the first 50 transactions, 
(2) select the 50 disbursements with the largest amounts, (3) select the items randomly, 
or (4) select those transactions that the auditor thinks are most likely to be in error. Or, 
a combination of these methods can be used. 


An audit of financial statements usually covers a period such as a year. Normally, an 
audit is not completed until several weeks or months after the end of the period. The 
timing of audit procedures can therefore vary from early in the accounting period to 
long after it has ended. In part, the timing decision is affected by when the client needs 
the audit to be completed. In the audit of financial statements, the client normally 
wants the audit completed one to three months after year-end. The SEC currently 
requires that all public companies file audited financial statements with the SEC 
within 60 to 90 days of the company’s fiscal year-end, depending on the company’s 
size. However, timing is also influenced by when the auditor believes the audit evi- 
dence will be most effective and when audit staff is available. For example, auditors 
often prefer to do counts of inventory as close to the balance sheet date as possible. 

Audit procedures often incorporate sample size, items to select, and timing into 
the procedure. The following is a modification of the audit procedure previously used 
to include all four audit evidence decisions. (Italics identify the timing, items to select, 
and sample size decisions.) 


* Obtain the October cash disbursements journal and compare the payee name, 
amount, and date on the cancelled check or electronic transfer information with 
the cash disbursements journal for a randomly selected sample of 40 disbursements. 
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Identify the four audit evidence 
decisions that are needed to 
create an audit program. 


Audit Procedures 


Sample Size 


Items to Select 


Timing 


The list of audit procedures for an audit area or an entire audit is called an audit 
program. The audit program always includes a list of the audit procedures, and 
it usually includes sample sizes, items to select, and the timing of the tests. Audit 
engagement software assists the auditor in selecting the procedures to be performed 
and other evidence decisions, based on identified risks and other audit planning deci- 
sions. Normally, there is an audit program, including several audit procedures, for 
each component of the audit. Therefore, there will be an audit program for accounts 
receivable, one for sales, and so on. (To see an example of an audit program that 
includes audit procedures, sample size, items to select, and timing, turn to page 427 
and see Table 13-4. The right side of the audit program also includes the balance- 
related audit objectives for each procedure, which were discussed in Chapter 6.) 


Audit Program 


PERSUASIVENESS OF EVIDENCE 
‘OBJECTIVE 7-30 Audit standards require the auditor to accumulate sufficient appropriate evidence to support 


ae the opinion issued. Because of the nature of audit evidence and the cost considerations 
Specify the characteristics that f doi dit. iti ficelethae th di ‘it letel: : dtharth 
determine the persuasiveness of Of doing an audit, it is unlikely that the auditor will be completely convinced that the 
edence: opinion is correct. However, the auditor must be persuaded that the opinion is correct 
with a high level of assurance. By combining all evidence from the entire audit, the 
auditor is able to decide when he or she is persuaded to issue an audit report. The two 
determinants of the persuasiveness of evidence are appropriateness and sufficiency. 


Appropriateness of evidence is a measure of the quality of evidence, meaning 
its relevance and reliability in meeting audit objectives for classes of transactions, 
account balances, and related disclosures. If evidence is considered highly appropriate, 
it is a great help in persuading the auditor that financial statements are fairly stated. 

Note that appropriateness of evidence deals only with the audit procedures 
selected. Appropriateness cannot be improved by selecting a larger sample size or dif- 
ferent population items. It can be improved only by selecting audit procedures that are 
more relevant or provide more reliable evidence. 


Appropriateness 


Relevance of Evidence Evidence must pertain to or be relevant to the audit objective that the 
auditor is testing before it can be appropriate. For example, assume that the auditor is 
concerned that a client is failing to bill customers for shipments (completeness transac- 
tion objective). If the auditor selects a sample of duplicate sales invoices and traces each 
to related shipping documents, the evidence is not relevant for the completeness objec- 
tive and therefore is not appropriate evidence for that objective. A relevant procedure is 
to trace a sample of shipping documents to related duplicate sales invoices to determine 
whether each shipment was billed. The second audit procedure is relevant because the 
shipment of goods is the normal criterion used for determining whether a sale has 
occurred and should have been billed. By tracing from shipping documents to dupli- 
cate sales invoices, the auditor can determine whether shipments have been billed to 
customers. In the first procedure, when the auditor traces from duplicate sales invoices 
to shipping documents, it is impossible to find unbilled shipments. 

Relevance can be considered only in terms of specific audit objectives, because 
evidence may be relevant for one audit objective but not for a different one. In the pre- 
vious shipping example, when the auditor traced from the duplicate sales invoices to 
related shipping documents, the evidence was relevant for the occurrence transaction 
objective. Most evidence is relevant for more than one, but not all, audit objectives. 


Reliability of Evidence Reliability of evidence refers to the degree to which evi- 
dence can be believable or worthy of trust. Like relevance, if evidence is considered 
reliable it is a great help in persuading the auditor that financial statements are fairly 
stated. For example, if an auditor counts inventory, that evidence is more reliable than 
if management gives the auditor its own count amounts. 
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Reliability, and therefore appropriateness, depends on the following six character- 
istics of reliable evidence: 


1. Independence of provider. Evidence obtained from a source outside the entity is more 
reliable than that obtained from within. Communications from banks, attorneys, 
or customers is generally considered more reliable than answers obtained from 
inquiries of the client. Similarly, documents that originate from outside the cli- 
ent’s organization, such as an insurance policy, are considered more reliable than 
are those that originate within the company and have never left the client’s orga- 
nization, such as a purchase requisition. 

2. Effectiveness of client’s internal controls. When a client’s internal controls are effective, 
evidence obtained is more reliable than when they are not effective. For example, 
if internal controls over sales and billing are effective, the auditor can obtain more 
reliable evidence from sales invoices and shipping documents than if the controls 
were inadequate. 

3. Auditor's direct knowledge. Evidence obtained directly by the auditor through physi- 
cal examination, observation, recalculation, and inspection is more reliable than 
information obtained indirectly. For example, if the auditor calculates the gross 
margin as a percentage of sales and compares it with previous periods, the evi- 
dence is more reliable than if the auditor relies on the calculations of the controller. 

4. Qualifications of individuals providing the information. Although the source of infor- 
mation is independent, the evidence will not be reliable unless the individual 
providing it is qualified to do so. Therefore, communications from attorneys and 
bank confirmations are typically more highly regarded than accounts receivable 
confirmations from persons not familiar with the business world. Also, evi- 
dence obtained directly by the auditor may not be reliable if the auditor lacks the 
qualifications to evaluate the evidence. For example, examining an inventory of 
diamonds by an auditor not trained to distinguish between diamonds and cubic 
zirconia is not reliable evidence for the existence of diamonds. 

5. Degree of objectivity. Objective evidence is more reliable than evidence that requires 
considerable judgment to determine whether it is correct. Examples of objec- 
tive evidence include confirmation of accounts receivable and bank balances, 
the physical count of securities and cash, and adding (footing) a list of accounts 
payable to determine whether it agrees with the balance in the general ledger. 
Examples of subjective evidence include a letter written by a client’s attorney dis- 
cussing the likely outcome of outstanding lawsuits against the client, observation 
of obsolescence of inventory during physical examination, and inquiries of the 
credit manager about the collectibility of noncurrent accounts receivable. 

6. Timeliness. The timeliness of audit evidence can refer either to when it is accumu- 
lated or to the period covered by the audit. Evidence is usually more reliable for 
balance sheet accounts when it is obtained as close to the balance sheet date as 
possible. For example, the auditor’s count of marketable securities on the balance 
sheet date is more reliable than a count two months earlier. For income statement 
accounts, evidence is more reliable if there is a sample from the entire period under 
audit, such as a random sample of sales transactions for the entire year, rather than 
from only a part of the period, such as a sample limited to only the first six months. 


The quantity of evidence obtained determines its sufficiency. For some audit objec- 
tives, sufficiency of evidence is measured primarily by the sample size the auditor 
selects. For a given audit procedure, the evidence obtained from a sample of 100 is 
ordinarily more sufficient than from a sample of 50. For other objectives, sufficiency 
is determined primarily by the number and quality of procedures performed to meet 
the audit objective. 

Several factors determine the appropriate sample size in audits. The two most 
important ones are the auditor’s expectation of misstatements and the effectiveness of 


Sufficiency 
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Combined Effect 


Persuasiveness and Cost 
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the client’s internal controls. To illustrate, assume in the audit of Jones Computer Parts 
Co. that the auditor concludes that there is a high likelihood of obsolete inventory 
because of the nature of the client’s industry. The auditor will sample more inventory 
items for obsolescence in this audit than one where the likelihood of obsolescence is 
low. Similarly, if the auditor concludes that a client has effective rather than ineffec- 
tive internal controls over recording fixed assets, a smaller sample size in the audit of 
acquisitions of fixed assets may be warranted. 

In addition to sample size, the individual items tested affect the sufficiency of 

evidence. Samples containing population items with large dollar values, items with a 
high likelihood of misstatement, and items that are representative of the population 
are usually considered sufficient. In contrast, most auditors usually consider samples 
insufficient that contain only the largest dollar items from the population, unless 
these items make up a large portion of the total population amount. 
The persuasiveness of evidence can be evaluated only after considering the combina- 
tion of appropriateness and sufficiency, including the effects of the factors influencing 
appropriateness and sufficiency. A large sample of evidence provided by an indepen- 
dent party is not persuasive unless it is relevant to the audit objective being tested. 
A large sample of evidence that is relevant but not objective is also not persuasive. 
Similarly, a small sample of only one or two pieces of highly appropriate evidence also 
typically lacks persuasiveness. When determining the persuasiveness of evidence, 
the auditor must evaluate the degree to which both appropriateness and sufficiency, 
including all factors influencing them, have been met. 

Direct relationships among the four evidence decisions and the two qualities that 
determine the persuasiveness of evidence are shown in Table 7-2. To illustrate these 
relationships, assume an auditor is verifying inventory that is a major item in the 
financial statements. Auditing standards require that the auditor be reasonably per- 
suaded that inventory is not materially misstated. The auditor must therefore obtain 
a sufficient amount of relevant and reliable evidence about inventory. This means 
deciding which procedures to use for auditing inventory, as well as determining the 
sample size and items to select from the population to satisfy the sufficiency require- 
ment. The combination of these four evidence decisions must result in sufficiently 
persuasive evidence to satisfy the auditor that inventory is materially correct. 


In making decisions about evidence for a given audit, both persuasiveness and cost 
must be considered. It is rare when only one type of evidence is available for verify- 
ing information. The persuasiveness and cost of all alternatives should be considered 
before selecting the best type or types of evidence. The auditor’s goal is to obtain a 


i): 7a Relationships Among Evidence Decisions and Persuasiveness 


Audit Evidence Decisions Qualities Affecting Persuasiveness of Evidence 


Audit procedures and timing Appropriateness 
Relevance 
Reliability 
Independence of provider 
Effectiveness of internal controls 
Auditor’s direct knowledge 
Qualifications of provider 
Objectivity of evidence 
Timeliness 
When procedures are performed 
Portion of period being audited 


Sample size and items to select Sufficiency 
Adequate sample size 
Selection of proper population items 
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sufficient amount of appropriate evidence at the lowest possible total cost. However, 
cost is never an adequate justification for omitting a necessary procedure or not gath- 
ering an adequate sample size. 


TYPES OF AUDIT EVIDENCE 
In deciding which audit procedures to use, the auditor can choose from eight broad ‘OBJECTIVE 7-40 


categories of evidence, which are called types of evidence. Every audit procedure obtains 


. 2 Identify and apply the 
one or more of the following types of evidence: ee 


eight types of evidence 
1. Physical examination used in auditing. 
Confirmation 

Inspection 

Analytical procedures 

Inquiries of the client 

Recalculation 

Reperformance 

Observation 


eoNAMR WN 


Figure 7-1 shows the relationships among auditing standards, types of evidence, 
and the four evidence decisions. Auditing standards provide general guidance in 
three categories, including evidence accumulation. The types of evidence are broad 
categories of the evidence that can be accumulated. Audit procedures include the 
four evidence decisions and provide specific instructions for the accumulation of 
evidence. 


FIGURE 7-| Relationships Among Auditing Standards, Types of 
Evidence, and the Four Audit Evidence Decisions 


Broad guidelines 
concerning auditor 
Auditing qualifications and 
standards conduct, evidence 
accumulation, 
and reporting 


Qualifications Evidence 


Reporting 
and conduct accumulation 


Physical examination 
Confirmation 
Inspection Broad categories of 
Analytical procedures Types of evidence available for 
Inquiries of client evidence the auditor to obtain 
Recalculation sufficient appropriate 
Reperformance evidence 
Observation 


Aiidié Specific instructions 
for gathering types 
of evidence 


procedures 


FOUR 
AUDIT 
EVIDENCE 


DECISIONS Sample size 


and items 
to select 


Timing of 
tests 
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Physical examination is the inspection or count by the auditor of a tangible asset. 
This type of evidence is most often associated with inventory and cash, but it is also 
applicable to the verification of securities, notes receivable, and tangible fixed assets. 
There is a distinction in auditing between the inspection or physical examination of 
assets, such as marketable securities and cash, and the inspection of documents, such 
as cancelled checks and sales documents. If the object being examined, such as a sales 
invoice, has no inherent value, the evidence being inspected is called documentation. 
While AICPA auditing standards and PCAOB auditing standards refer to inspection 
of physical assets and inspection of documents as one type of evidence, we separate 
them into physical examination of assets and inspection of documents in this text to 
help auditors distinguish the nature of these types of evidence. 

Physical examination is a direct means of verifying that an asset actually exists 
(existence objective), and is considered one of the most reliable and useful types of 
audit evidence. Generally, physical examination is an objective means of ascertain- 
ing both the quantity and the description of the asset. In some cases, it is also a useful 
method for evaluating an asset’s condition or quality. However, physical examination 
is not sufficient evidence to verify that existing assets are owned by the client (rights 
and obligations objective), and proper valuation for financial statement purposes 
usually cannot be determined by physical examination (accuracy and realizable 
value objectives). 


Confirmation describes the receipt of a direct written response from a third party verify- 
ing the accuracy of information that was requested by the auditor. The response may be 
in paper form or electronic or other medium, such as the auditor’s direct access to 
information held by the third party. The request is made to the client, and the client 
asks the third party to respond directly to the auditor. Because confirmations come 
from third-party sources instead of the client, they are a highly regarded and often- 
used type of evidence. However, confirmations are relatively costly to obtain and may 
cause some inconvenience to those asked to supply them. Therefore, they are not used 
in every instance in which they are applicable. 

Auditors decide whether or not to use confirmations depending on the reliability 
needs of the situation as well as the alternative evidence available. For example, con- 
firmations are seldom used in the audit of fixed asset additions because these can be 
verified adequately by inspection and physical examination. Similarly, confirmations 
are ordinarily not used to verify individual transactions between organizations, 
such as sales transactions, because the auditor can use documents for that pur- 
pose. Naturally, there are exceptions. Assume the auditor determines that there are 
two extraordinarily large sales transactions recorded three days before year-end. 
Confirmation of these two transactions may be appropriate. 

When practical and reasonable, U.S. auditing standards require the confirmation 
of a sample of accounts receivable. This requirement exists because accounts receiv- 
able usually represent a significant balance on the financial statements, and confir- 
mations are a highly reliable type of evidence. Confirmation of accounts receivable 
is not required by international auditing standards, and is one example of differences 
between U.S. and international auditing standards. Confirmation of accounts receiv- 
able is discussed further in Chapter 16. 

Although confirmation is currently not required for any account other than 
accounts receivable, this type of evidence is useful in verifying many types of infor- 
mation. The major types of information that are often confirmed, along with the 
source of the confirmation, are indicated in Table 7-3. 


Inspection is the auditor's examination of the client’s documents and records to sub- 
stantiate the information that is, or should be, included in the financial statements. 
The documents examined by the auditor are the records used by the client to provide 


tei Information Often Confirmed 
Information Source 
Assets 
Cash in bank Bank 
Marketable securities Investment custodian 
Accounts receivable Customer 
Notes receivable Maker 
Owned inventory out on consignment Consignee 


Public warehouse 
Insurance company 


Inventory held in public warehouses 
Cash surrender value of life insurance 


Accounts payable Creditor 
Notes payable Lender 
Advances from customers Customer 
Mortgages payable Mortgagor 
Bonds payable Bondholder 


Owners’ Equity 


Shares outstanding Registrar and transfer agent 


Other Information 


Insurance company 

Bank, lender, and client’s legal counsel 
Bondholder 

Creditor 


Insurance coverage 
Contingent liabilities 

Bond indenture agreements 
Collateral held by creditors 


information for conducting its business in an organized manner, and may be in 
paper form, electronic form, or other media. Because each transaction in the client’s 
organization is normally supported by at least one document, a large volume of this 
type of evidence is usually available. For example, the client often retains a customer 
order, a shipping document, and a duplicate sales invoice for each sales transaction. 
These same documents are useful evidence for the auditor to verify the accuracy of 
the client’s records for sales transactions. Documentation is widely used as evidence in 
audits because it is usually readily available at a relatively low cost. Sometimes, it is the 
only reasonable type of evidence available. 

Documents can be conveniently classified as internal and external. An internal 
document has been prepared and used within the client’s organization and is 
retained without ever going to an outside party. Internal documents include dupli- 
cate sales invoices, employees’ time reports, and inventory receiving reports. 


FRAUD IN 
AN ASIAN 
MULTINATIONAL 
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Generally, auditors will review the contract document 
of large amounts compared to the total net profit of 
the company. However, there are times all contracts 
are reviewed regardless of how large or small they are. 
Sometimes, they might also review contract documents 
on an ad hoc basis. On one occasion, one of the big- 
gest instances of fraud occurred in an Asian multina- 
tional company. The fraud amounted to US$10 million. 
The deputy director and his subordinate had submitted 
false invoices through various shell companies set up by 
five accomplices for fictitious information technology 
and goods at the company. This went on for a decade. 

Usually, auditors do not look at every transaction 
performed by the company as it is time consuming. 
So they will set a limit, otherwise known as 


a materiality level. Any amount above that amount 
will be reviewed, and anything below will not be 
reviewed except when the auditor decides to per- 
form random testing. In this case, the invoices billed 
to this Asian multinational company were below 
the materiality level and largely went unchecked. 
However, the auditors changed their auditing 
method to randomly check this set of invoices and 
they uncovered services that had been paid but not 
performed. 

The deputy director and his subordinate had used 
the money to buy apartments and three luxury cars 
costing over a million dollars each. Approximately 
80 percent of the money stolen was recovered. The 
two criminals were sentenced to 10 years in jail. 


Analytical Procedures 
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An external document has been handled by someone outside the client’s organiza- 
tion who is a party to the transaction being documented, but that is either currently 
held by the client or readily accessible. In some cases, external documents originate 
outside the client’s organization and end up in the hands of the client. Examples of 
external documents include vendors’ invoices, cancelled notes payable, and insurance 
policies. Some documents, such as cancelled checks, originate with the client, go to an 
outsider, and are finally returned to the client. 

The primary determinant of the auditor’s willingness to accept a document as 
reliable evidence is whether it is internal or external and, when internal, whether it 
was created and processed under conditions of effective internal control. Internal 
documents created and processed under conditions of deficient internal control may 
not constitute reliable evidence. Documentary evidence in either paper or electronic 
form is more reliable than the same evidence obtained orally, and original documents 
are more reliable than photocopies or documents that have been digitized. Although 
auditors should consider the reliability of documentation, they rarely verify the 
authenticity of documentation. Auditors are not expected to be trained or be experts 
in document authentication. 

Because external documents have been in the hands of both the client and another 
party to the transaction, there is some indication that both members are in agreement 
about the information and the conditions stated on the document. Therefore, external 
documents are considered more reliable evidence than internal ones. Some external 
documents, such as title to land, insurance policies, indenture agreements, and con- 
tracts, have exceptional reliability because they are almost always prepared with con- 
siderable care and often have been reviewed by attorneys or other qualified experts. 

When auditors use documentation to support recorded transactions or amounts, 
the process is often called vouching. To vouch recorded acquisition transactions, the 
auditor might, for example, verify entries in the acquisitions journal by examining 
supporting vendors’ invoices and receiving reports and thereby satisfy the occurrence 
objective. If the auditor traces from receiving reports to the acquisitions journal to 
satisfy the completeness objective, this latter process is called tracing. 


Analytical procedures are defined by auditing standards as evaluations of financial 
information through analysis of plausible relationships among financial and nonfinancial data. 
For example, an auditor may compare the gross margin percent in the current year 
with the preceding year’s gross margin. Analytical procedures are used extensively 
in practice, and are required during the planning and completion phases on all audits. We first 
introduce the purposes of analytical procedures and then discuss the different types 
of analytical procedures more extensively. 


Understand the Client’s Industry and Business Auditors must obtain knowledge 
about a client’s industry and business as a part of planning an audit. By conducting 
analytical procedures in which the current year’s unaudited information is compared 
with prior years’ audited information or industry data, changes are highlighted. These 
changes can represent important trends or specific events, all of which will influence 
audit planning. For example, a decline in gross margin percentages over time may 
indicate increasing competition in the company’s market area and the need to con- 
sider inventory pricing more carefully during the audit. Similarly, an increase in the 
balance in fixed assets may indicate a significant acquisition that must be reviewed. 


Assess the Entity’s Ability to Continue as a Going Concern Analytical procedures 
are often a useful indicator for determining whether the client company has financial 
problems. Certain analytical procedures can help the auditor assess the likelihood of 
failure. For example, if a higher-than-normal ratio of long-term debt to net worth is 
combined with a lower-than-average ratio of profits to total assets, a relatively high 
risk of financial failure may be indicated. Not only will such conditions affect the 
audit plan, they may indicate that substantial doubt exists about the entity’s ability to 
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continue as a going concern, which, as discussed in Chapter 3, requires an emphasis- 
of-matter explanatory paragraph in the audit report. 


Indicate the Presence of Possible Misstatements in the Financial Statements 
Significant unexpected differences between the current year’s unaudited financial 
data and other data used in comparisons are commonly called unusual fluctua- 
tions. Unusual fluctuations occur when significant differences are not expected but 
do exist, or when significant differences are expected but do not exist. In either case, 
the presence of an accounting misstatement is one possible reason for the unusual 
fluctuation. If the unusual fluctuation is large, the auditor must determine the reason 
and be satisfied that the cause is a valid economic event and not a misstatement. For 
example, in comparing the ratio of the allowance for uncollectible accounts receivable 
to gross accounts receivable with that of the previous year, suppose that the ratio has 
decreased while, at the same time, accounts receivable turnover also decreased. The 
combination of these two pieces of information indicates a possible understatement 
of the allowance. This aspect of analytical procedures is often called “attention direct- 
ing” because it results in more detailed procedures in the specific audit areas where 
misstatements might be found. 


Provide Evidence Supporting an Account Balance In many cases, an analytical 
procedure can be used to provide evidence supporting recorded account balances. 
When a predictable relationship exists and the analytical procedure is based on reli- 
able inputs, substantive analytical procedures may be performed, although they 
are not required. In such cases, the analytical procedure constitutes substantive evi- 
dence in support of the related account balances. Depending on the significance of 
the account, the predictability of the relationship, and the reliability of the underlying 
data, the substantive analytical procedure may eliminate the need to perform detailed 
tests of the account balance. In other cases, detailed tests will still be performed, but 
sample sizes can be reduced, or the timing of the procedures can be moved farther 
away from the balance sheet date. 


Inquiry is the obtaining of written or oral information from the client in response to 
questions from the auditor. Although considerable evidence is obtained from the cli- 
ent through inquiry, it usually cannot be regarded as conclusive because it is not from 
an independent source and may be biased in the client’s favor. Therefore, when the 
auditor obtains evidence through inquiry, it is normally necessary to obtain corrobo- 
rating evidence through other procedures. (Corroborating evidence is additional evi- 
dence to support the original evidence.) As an illustration, when the auditor wants to 
obtain information about the client’s method of recording and controlling accounting 
transactions, the auditor usually begins by asking the client how the internal controls 
operate. Later, the auditor performs audit tests using inspection and observation to 
determine whether the transactions are recorded (completeness objective) and autho- 
rized (occurrence objective) in the manner stated. 


Recalculation involves rechecking a sample of calculations made by the client. 
Rechecking client calculations consists of testing the client’s arithmetical accuracy 
and includes such procedures as extending sales invoices and inventory, adding jour- 
nals and subsidiary records, and checking the calculation of depreciation expense 
and prepaid expenses. A considerable portion of auditors’ recalculation is done using 
spreadsheet or audit software. 


Reperformance is the auditor’s independent tests of client accounting procedures 
or controls that were originally done as part of the entity’s accounting and internal 
control system. Whereas recalculation involves rechecking a computation, reperfor- 
mance involves checking other procedures. For example, the auditor may compare the 
price on an invoice to an approved price list, or may reperform the aging of accounts 
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Inquiries of the Client 


Recalculation 


Reperformance 


receivable. Another type of reperformance is for the auditor to recheck transfers of 
information by tracing information included in more than one place to verify that it 
is recorded at the same amount each time. For example, the auditor normally makes 
limited tests to ascertain that the information in the sales journal has been included 
for the proper customer and at the correct amount in the subsidiary accounts receiv- 
able records and is accurately summarized in the general ledger. 


Observation consists of looking at a process or procedure being performed by 
others. The auditor may tour the plant to obtain a general impression of the client’s 
facilities, or watch individuals perform accounting tasks to determine whether the 
person assigned a responsibility is performing it properly. Observation provides 
evidence about the performance of a process or procedure but is limited to the point 
in time at which the observation takes place. Observation is rarely sufficient by itself 
because of the risk of client personnel changing their behavior because of the audi- 
tor’s presence. They may perform their responsibilities in accordance with company 
policy but resume normal activities once the auditor is not in sight. Therefore, it is 
necessary to follow up initial impressions with other kinds of corroborative evidence. 
Observation is particularly useful in evaluating the effectiveness of client procedures 
in counting inventory, as well as in many other parts of the audit. 


Observation 


As discussed earlier in this chapter, the characteristics for determining the appropri- 
ateness of evidence are relevance and reliability. Table 7-4 includes the eight types of 
evidence related to five of the six criteria that determine the reliability of evidence. 
Note that two of the characteristics that determine the appropriateness of evidence— 
relevance and timeliness—are not included in Table 7-4. Each of the eight types of evi- 
dence included in the table has the potential to be both relevant and timely, depending 
on its source and when the evidence is obtained. Several other observations are appar- 
ent from studying Table 7-4. 


Appropriateness of 
Types of Evidence 


¢ First, the effectiveness of a client’s internal controls has significant influence 
on the reliability of most types of evidence. Obviously, internal documentation 
from a company with effective internal control is more reliable because the 


TABLE 7-4 


Appropriateness of Types of Evidence 


Criteria to Determine Appropriateness 


Effectiveness of Auditor’s 
Client’s Internal Direct 
Controls Knowledge 


Type of 
Evidence 


Independence 
of Provider 


Qualifications 
of Provider 


Objectivity 
of Evidence 
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Physical High (auditor does) Varies High Normally high High 
examination (auditor does) 
Confirmation High Not applicable Low Varies—usually high High 
Inspection Varies—external documents Varies Low Varies High 
more independent than 
internal documents 
Analytical High/low (auditor does/client Varies Low Normally high (auditor Varies—depends on 
procedures responds) does/client responds) reliability of data 
Inquiries of client Low (client provides) Not applicable Low Varies Varies—low to high 
Recalculation High (auditor does) Varies High High (auditor does) High 
Reperformance High (auditor does) Varies High High (auditor does) High 
Observation High (auditor does) Varies High Normally high Medium 
(auditor does) 
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documents are more likely to be accurate. Conversely, analytical procedures 
will not be reliable evidence if the controls that produced the data provide inac- 
curate information. 

* Second, both physical examination and recalculation are likely to be highly 
reliable if the internal controls are effective, but their use differs considerably. 
This effectively illustrates that two completely different types of evidence can be 
equally reliable. 

¢ Third, inquiry alone is usually not sufficient to provide appropriate evidence to 
satisfy any audit objective. 


The two most expensive types of evidence are physical examination and confirma- 
tion. Physical examination (auditing standards refer to this as “inspection of tangible 
assets”) is costly because it normally requires the auditor’s presence when the client 
is counting the asset, often on the balance sheet date. For example, physical exami- 
nation of inventory can result in several auditors traveling to scattered geographical 
locations. Confirmation is costly because the auditor must follow careful procedures 
in the confirmation preparation, transmittal, receipt, and in the follow-up of nonre- 
sponses and exceptions. 

Inspection, analytical procedures, and reperformance are moderately costly. If 
client personnel provide documents and electronic files for the auditor and organize 
them for convenient use, inspection usually has a fairly low cost. When auditors 
must find those documents themselves, however, inspection can be extremely costly. 
Even under ideal circumstances, information and data on documents are sometimes 
complex and require interpretation and analysis. It is usually time-consuming for 
an auditor to read and evaluate a client’s contracts, lease agreements, and minutes 
of the board of directors meetings. Because analytical procedures are considerably 
less expensive than confirmations and physical examination, most auditors prefer to 
replace tests of details with analytical procedures when possible. For example, it may 
be far less expensive to calculate and review sales and accounts receivable ratios than 
to confirm accounts receivable. If it is possible to reduce the use of confirmations 
by performing analytical procedures, considerable cost savings can be achieved. But 
analytical procedures require the auditor to decide which analytical procedures to 
use, make the calculations, and evaluate the results. Doing so often takes considerable 
time. The cost of reperformance tests depends on the nature of the procedure being 
tested. Comparatively simple tests such as reperforming the comparison of invoices to 
price lists are likely to take minimal time. However, reperforming procedures such as 
the client’s bank reconciliation are likely to take considerable time. 

The three least-expensive types of evidence are observation, inquiries of the cli- 
ent, and recalculation. Observation is normally done concurrently with other audit 
procedures. Auditors can easily observe whether client personnel are following 
appropriate inventory counting procedures at the same time they count a sample of 
inventory (physical examination). Inquiries of clients are done extensively on every 
audit and normally have a low cost, although certain inquiries may be costly, such as 
obtaining written statements from the client documenting discussions throughout 
the audit. Recalculation is usually low cost because it involves simple calculations and 
tracing that can be done at the auditor’s convenience. Often, computer software is 
used to perform many of these tests. 


As stated earlier, audit procedures are the detailed steps, usually written in the form of 
instructions, for the accumulation of the eight types of audit evidence. They should be suf- 
ficiently clear to enable all members of the audit team to understand what is to be done. 

Several terms commonly used to describe audit procedures are defined in 
Table 7-5. To illustrate each term, an audit procedure and associated type of evi- 
dence are also shown. 
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Cost of Types 
of Evidence 


Terms Used in 
Audit Procedures 


i/\: 8a Terms, Audit Procedures, and Types of Evidence 


Term and Definition Illustrative Audit Procedure Type of Evidence 


Examine—A reasonably detailed study of a document Examine a sample of vendors’ invoices to determine Inspection 
or record to determine specific facts about it. whether the goods or services received are reasonable 
and of the type normally used by the client’s business. 


Scan—A less-detailed examination of a document or record Scan the sales journal, looking for large and unusual Analytical procedures 
to determine whether there is something unusual transactions. 
warranting further investigation. 


Read—An examination of written information to determine Read the minutes of a board of directors meeting and Inspection 
facts pertinent to the audit. summarize all information that is pertinent to the finan- 
cial statements in an audit file. 


Compute—A calculation done by the auditor independent Compute inventory turnover ratios and compare with Analytical procedures 
of the client. those of previous years as a test of inventory 
obsolescence. 


Recompute—A calculation done to determine whether Recompute the unit sales price times the number Recalculation 
a client’s calculation is correct. of units for a sample of duplicate sales invoices 
and compare the totals with the calculations. 


Foot—Addition of a column of numbers to determine Foot the sales journal for a one-month period and Recalculation 
whether the total is the same as the client’s. compare all totals with the general ledger. 

Trace—An instruction normally associated with inspection Trace a sample of sales transactions from sales Inspection 
or reperformance. The instruction should state what the invoices to the sales journal, and compare Reperformance 
auditor is tracing and where it is being traced from and to. customer name, date, and the total dollar 
Often, an audit procedure that includes the term trace will value of the sale. 


also include a second instruction, such as compare 


Trace postings from the sales journal to the general 
or recalculate. 


ledger accounts. 


Compare—A comparison of information in two different Select a sample of sales invoices and compare the unit Inspection 
locations. The instruction should state which information selling price as stated on the invoice to the list 
is being compared in as much detail as practical. of unit selling prices authorized by management. 

Count—A determination of assets on hand at a given time. Count a sample of 100 inventory items and compare Physical examination 
This term should be associated only with the type quantity and description to client's counts. 


of evidence defined as physical examination. 


Observe—The act of observation should be associated Observe whether the two inventory count teams Observation 
with the type of evidence defined as observation. independently count and record inventory counts. 

Inquire—The act of inquiry should be associated with Inquire of management whether there is any obsolete Inquiries of client 
the type of evidence defined as inquiry. inventory on hand at the balance sheet date. 

Vouch—The use of documents to verify recorded transactions Vouch a sample of recorded acquisition transactions Inspection 
or amounts. to vendors’ invoices and receiving reports. 


CONCEPT CHECK 
|. Identify the six characteristics that determine the reliability of evidence. For each 
characteristic, provide one example of a type of evidence that is likely to be reliable. 


2. List the eight types of audit evidence included in this chapter and give two examples 
of each. 


ANALYTICAL PROCEDURES 
‘OBJECTIVE 7-5 Analytical procedures are one of the eight types of evidence introduced earlier in 


the chapter. Because of the increased emphasis on the use of analytical procedures 
throughout the audit, this section provides additional discussion of the uses of 
analytical procedures, including examples of each type. 

Analytical procedures may be performed at any of three times during an 
engagement: 


Know the types of analytical 
procedures and their purposes. 
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1. Analytical procedures are required in the planning phase as part of risk assessment 
procedures to understand the client’s business and industry and to assist in 
determining the nature, extent, and timing of audit procedures. This helps the 
auditor identify significant matters requiring special consideration later in the 
engagement. For example, the calculation of inventory turnover before inven- 
tory price tests are done may indicate the need for special care during those tests. 
The sophistication, extent, and timing of the analytical procedures vary among 
clients, and analytical procedures done in the planning phase typically use data 
aggregated at a high level, such as using overall financial statement balances. For 
some clients, the comparison of prior-year and current-year account balances 
using the unaudited trial balance may be sufficient. 

2. Analytical procedures are often done during the testing phase of the audit as a sub- 
stantive test in support of account balances. These substantive analytical proce- 
dures are often done in conjunction with other audit procedures. For example, 
the prepaid portion of each insurance policy might be compared with the same 
policy for the previous year as a part of doing tests of prepaid insurance. The 
assurance provided by analytical procedures depends on the predictability of the 
relationship, as well as the precision of the auditor’s expectation of the account 
balance and the reliability of the data used to develop the expectation. When 
substantive analytical procedures are used during the testing phase of the audit, 
auditing standards require the auditor to document in the working papers the 
auditor’s expectation and factors considered in its development. The auditor is 
also required to evaluate the reliability of the data used to develop the expecta- 
tion, including the source of the data and controls over the data’s preparation. 

3. Analytical procedures are also required during the completion phase of the audit. Such 
tests serve as a final review for material misstatements or financial problems and 
help the auditor take a final “objective look” at the audited financial statements. 
Typically, a senior partner with extensive knowledge of the client’s business 
conducts the analytical procedures during the final review of the audit files and 
financial statements to identify possible oversights in the audit. 


Purposes of Analytical 
Procedures During the 
Audit Engagement 


As this discussion illustrates, the purposes of analytical procedures and their 
nature depend on when they are used during the audit. Analytical procedures per- 
formed during audit planning generally use aggregate data to help understand the 
client’s business and identify areas where misstatements are more likely. In contrast, 
substantive analytical procedures used to provide audit evidence require more reliable 
evidence, often using disaggregated data for the auditor to develop an expectation of 
the account balance being tested. 


The usefulness of analytical procedures as audit evidence depends significantly on 
appropriate comparison data. The auditor typically compares the client’s balances 
and ratios with expected balances and ratios using one or more of the following types 
of analytical procedures. In each case, auditors compare client data with: 


Types of Analytical 
Procedures 


1. Industry data 

2. Similar prior-period data 

3. Client-determined expected results 
4. Auditor-determined expected results 


Suppose that you are doing an audit and obtain the following information about the 


: : : é Compare Client and 
client and the average company in the client’s industry: 


Industry Data 
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Client Industry 
2016 2015 2016 2015 
Inventory turnover 3.4 3.5 3.9 3.4 
Gross margin percent 26.3% 26.4% 27.3% 26.2% 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education Limited, 2016. ProQuest Ebook Central, http://ebookce@iaaproquedt. domUMDITGIB HOGS G bail. action ?docID 53606. 
Created from undip-ebooks on 2020-12-13 20:09:40. 


Compare Client Data 
with Similar Prior- 
Period Data 
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If we look only at client information for the two ratios shown, the company appears to 
be stable with no apparent indication of difficulties. However, if we use industry data 
to develop expectations about the two ratios for 2016, we should expect both ratios 
for the client to increase. Although these two ratios by themselves may not indicate 
significant problems, these data illustrate how using industry data may provide useful 
information about the client’s performance and potential misstatements. Perhaps the 
company has lost market share, its pricing has not been competitive, it has incurred 
abnormal costs, or perhaps it has obsolete items in inventory or made errors in 
recording purchases. The auditor needs to determine if either of the last two occurred 
to have reasonable assurance that the financial statements are not misstated. 

Dun & Bradstreet, Standard and Poor’s, and other analysts accumulate financial 
information for thousands of companies and compile the data for different lines of 
business. Many CPA firms purchase this industry information for use as a basis for 
developing expectations about financial ratios in their audits. The most important 
benefits of industry comparisons are to aid in understanding the client’s business 
and as an indication of the likelihood of financial failure. They can also be helpful in 
identifying potential misstatements. However, a major weakness in using industry 
ratios for auditing is the difference between the nature of the client’s financial infor- 
mation and that of the firms making up the industry totals. Because the industry data 
are broad averages, the comparisons may not be meaningful. Often, the client’s line 
of business is not the same as the industry standards. In addition, different compa- 
nies follow different accounting methods, and this affects the comparability of data. 
For example, if most companies in the industry use FIFO inventory valuation and 
straight-line depreciation and the audit client uses LIFO and double-declining-balance 
depreciation, comparisons may not be meaningful. This does not mean that industry 
comparisons should be avoided. Rather, it is an indication of the need for care in using 
industry data to develop expectations about financial relationships and in interpret- 
ing the results. One approach to overcome the limitations of industry averages is to 
compare the client to one or more benchmark firms in the industry. 


Suppose that the gross margin percentage for a company has been between 26 and 
27 percent for each of the past four years but has dropped to 23 percent in the current 
year. This decline in gross margin should be a concern to the auditor if a decline is not 
expected. The cause of the decline could be a change in economic conditions. But, it 
could also be caused by misstatements in the financial statements, such as sales or pur- 
chase cutoff errors, unrecorded sales, overstated accounts payable, or inventory costing 
errors. The decline in gross margin is likely to result in an increase in evidence in one or 
more of the accounts that affect gross margin. The auditor needs to determine the cause 
of the decline to be confident that the financial statements are not materially misstated. 
A wide variety of analytical procedures allow auditors to compare client data with 
similar data from one or more prior periods. Here are some common examples: 


Compare the Current Year’s Balance with that of the Preceding Year One of the 
easiest ways to perform this test is to include the preceding year’s adjusted trial bal- 
ance results in a separate column of the current year’s trial balance spreadsheet. The 
auditor can easily compare the current year’s balance and the previous year’s balance 
to decide, early in the audit, whether an account should receive more than the normal 
amount of attention because of a significant change in the balance. For example, ifthe 
auditor observes a substantial increase in supplies expense, the auditor should deter- 
mine whether the cause was an increased use of supplies, an error in the account due 
to a misclassification, or a misstatement of supplies inventory. 


Compare the Detail of a Total Balance with Similar Detail for the Preceding 
Year If there have been no significant changes in the client’s operations in the current 
year, much of the detail making up the totals in the financial statements should also 
remain unchanged. By briefly comparing the detail of the current period with similar 
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jhe Internal Comparisons and Relationships 


Ratio or Comparison Possible Misstatement 


Raw material turnover for a manufacturing company Misstatement of inventory or cost of goods sold or 
obsolescence of raw material inventory 


Sales commissions divided by net sales Misstatement of sales commissions 


Sales returns and allowances divided by gross sales Misclassified sales returns and allowances or unrecorded 
returns or allowances subsequent to year-end 


Bad debt expense divided by net sales Misstatement in the allowance for bad debts 
Each of the individual manufacturing expenses as a Significant misstatement of individual expenses within 
percent of total manufacturing expense a total 


detail of the preceding period, auditors often isolate information that needs further 
examination. Comparison of details may take the form of details over time, such as 
comparing the monthly totals for the current year and preceding year for sales, repairs, 
and other accounts, or details at a point in time, such as comparing the details of loans 
payable at the end of the current year with the detail at the end of the preceding year. 


Compute Ratios and Percent Relationships for Comparison with Previous Years 
Comparing totals or details with previous years has two shortcomings. First, it fails to 
consider growth or decline in business activity. Second, relationships of data to other 
data, such as sales to cost of goods sold, are ignored. Ratio and percent relationships 
overcome both shortcomings. For example, the gross margin is a common percent 
relationship used by auditors. 

Table 7-6 includes a few ratios and internal comparisons to show the widespread 
use of ratio analysis. In all these cases, the comparisons should be made with calcu- 
lations made in previous years for the same client. Many of the ratios and percents 
used for comparison with previous years are the same ones used for comparison with 
industry data. For example, auditors often compare current year gross margin with 
industry averages, as well as margins for previous years. 


Most companies prepare budgets for various aspects of their operations and financial 
results. Because budgets represent the client’s expectations for the period, auditors 
should investigate the most significant differences between budgeted and actual 
results, as these areas may contain potential misstatements. The absence of differ- 
ences may indicate that misstatements are unlikely. For example, audits of local, state, 
and federal governmental units commonly use this type of analytical procedure. 

When client data are compared with budgets, there are two special concerns. First, 
the auditor must evaluate whether the budgets were realistic plans. In some organiza- 
tions, budgets are prepared with little thought or care and therefore are not helpful in 
developing auditor expectations. A discussion of budget procedures with client per- 
sonnel can provide insights about this concern. The second concern is the possibility 
that current financial information was changed by client personnel to conform to the 
budget. If that has occurred, the auditor will find no differences in comparing actual 
data with budgeted data, even if there are misstatements in the financial statements. 
Assessing control risk and performing detailed audit tests of actual data are usually 
done to minimize this concern. 


Another common comparison of client data with expected results occurs when the 
auditor calculates the expected balance for comparison with the actual balance. In this type of 
substantive analytical procedure, the auditor develops an expectation of what an 
account balance should be by relating it to some other balance sheet or income state- 
ment account or accounts or by making a projection based on nonfinancial data or 
some historical trend. 
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Compare Client Data 
with Client-Determined 
Expected Results 


Compare Client 
Data with Auditor- 
Determined 
Expected Results 


Suppose that you are auditing a hotel. You may develop an expectation for total 
revenue from rooms by multiplying the number of rooms, the average daily rate for 
each room, and the average occupancy rate. You can then compare your estimate with 
recorded revenue as a test of the reasonableness of recorded revenue. The same approach 
can be applied to create estimates in other situations, such as tuition revenue at universi- 
ties (average tuition multiplied by enrollment), factory payroll (total hours worked times 
the wage rate), and cost of materials sold (units sold times materials cost per unit). 

Figure 7-2 illustrates how the auditor may make an independent calculation of 
interest expense on notes payable by multiplying the average ending balances and inter- 
est rates for both short-term and long-term notes payable as a substantive test of the 
reasonableness of recorded interest expense. Notice how the auditor's substantive ana- 
lytical procedure begins with the development of the auditor’s expectation of interest 
expense for short-term notes payable and combines that with the auditor’s calculation 
of an estimated interest expense for long-term notes payable to arrive at the expected 
amount of total interest expense of $2,399,315. Because of the fluctuating nature of the 
short-term notes payable balance from month to month, the auditor's calculation of a 
twelve-month average balance and average interest rate generates a more precise esti- 
mate of expected interest expense. Less precision is needed for long-term notes payable 
given the constant rate of interest across the year and the stable nature of the balance 
outstanding. This working paper also effectively documents the auditor’s expectation 
that is required by auditing standards for substantive analytical procedures. 


COMMON FINANCIAL RATIOS 


Compute common financial 


ratios. 
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Auditors’ analytical procedures often include the use of general financial ratios dur- 
ing planning and final review of the audited financial statements. These are useful for 
understanding recent events and the financial status of the business and for viewing 
the statements from the perspective of a user. The general financial analysis may be 
effective for identifying possible problem areas, where the auditor may do additional 
analysis and audit testing, as well as business problem areas in which the auditor can 
provide other assistance. When using these ratios, auditors must be sure to make 
appropriate comparisons. The most important comparisons are to those of previous 
years for the company and to industry averages or similar companies for the same year. 

Ratios and other analytical procedures are normally calculated using spread- 
sheets and other types of audit software, in which several years of client and industry 
data can be maintained for comparative purposes. Ratios can be linked to the trial 
balance so that calculations are automatically updated as adjusting entries are made 
to the client’s statements. For example, an adjustment to inventory and cost of goods 
sold affects a large number of ratios, including inventory turnover, the current ratio, 
gross margin, and other profitability measures. 

We next examine some widely used financial ratios. The following computations 
are based on the 2016 financial statements of Hillsburg Hardware Co., which appear 
in the glossy insert to the textbook. These ratios were prepared from the trial balance 


in Figure 6-5 on page 178. 


Hillsburg Hardware Overall Test of Interest Expense 


FIGURE 7-2 , 2016 
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Hillsburg Hardware Co. Schedule_N-3 Date 
Overall Test of Interest Expense Prepared by_ TM _3/06/17 
12/31/16 
nM Approved by JW _3/12/17 


Expectation of recorded interest expense: 


Short-term loans: 


Month Month end Balance Rate® 


Jan. $ 5,900,000 5.50% 
Feb. 6,368,000 5.50% 
Mar. 6,824,000 5.75% 
Apr. 7,536,000 5.75% 
May 5,208,000 5.25% 
June 3,748,000 5.50% 
July 2,800,000 5.25% 
Aug. 2,490,000 5.50% 
Sept. 2,092,000 5.25% 
Oct. 1,708,000 5.50% 
Nov. 5,062,000 5.75% 
Dec. 4,180,000 5.50% 


Total $53,916,000 66.00% 


Average Monthly Balance 
and Interest Rate 


(total + 12) $ 4,493,000 $ 247,115 
Long-term loans: 


Beginning balance $26,520,000 © 
Ending balance 24,120,000 


$50,640,000 8.50% © 
Average $25,320,000 8.50% 2,152,200 


Auditor expectation of interest expense 2,399,315 


Recorded interest expense per general ledger 2,408,642 @ 


Difference — over (under) expectation 9,327 


Conclusion: Interest expense appears fairly stated as recorded 
amount is within 9,327 (.4%) of expected amount. 


Tickmark Legend 


@® Monthly balances obtained from general ledger for each month. 

@ Estimated based on examination of several notes outstanding each month. 
@ Agreed to prior year audit workpapers. 

@ Agrees with December 31, 2016, general ledger and working trial balance. 
© Agrees with permanent file schedule of long-term debt. 
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Companies need a reasonable level of liquidity to pay their debts as they come due, 
and these three ratios measure liquidity. It is apparent by examining the three ratios 
that the cash ratio may be useful to evaluate the ability to pay debts immediately, 
whereas the current ratio requires the conversion of assets such as inventory and 
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Liquidity Activity Ratios 


Ability to Meet 
Long-term Debt 
Obligations 


Profitability Ratios 
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accounts receivable to cash before debts can be paid. The most important difference 
between the quick and current ratios is the inclusion of inventory in current assets for 
the current ratio. 


Ifa company does not have sufficient cash and cash-like items to meet its obligations, 
the key to its debt-paying ability is the time it takes the company to convert less-liquid 
current assets into cash. This is measured by the liquidity activity ratios. 

The activity ratios for accounts receivable and inventory are especially useful to 
auditors, who often use trends in the accounts receivable turnover ratio to assess the 
reasonableness of the allowance for uncollectible accounts. Auditors use trends in the 
inventory turnover ratio to identify potential inventory obsolescence. Average days to 
collect is a different way of looking at the average accounts receivable turnover data. 
The same is true of average days to sell compared to average inventory turnover. 


A company’s long-run solvency depends on the success of its operations and on its 
ability to raise capital for expansion, as well as its ability to make principal and interest 
payments. Two ratios are key measures creditors and investors use to assess a com- 
pany’s ability to pay its debts. 

The debt-to-equity ratio shows the extent of the use of debt in financing a com- 
pany. If the debt-to-equity ratio is too high, it may indicate that the company has used 
up its borrowing capacity and has no cushion for additional debt. If it is too low, it 
may mean that available leverage is not being used to the owners’ benefit. 

The ability to make interest payments depends on the company’s ability to gener- 
ate positive cash flow from operations. The times interest earned ratio shows whether 
the company can comfortably make its interest payments, assuming that earnings 
trends are stable. 


A company’s ability to generate cash for payment of obligations, expansion, and divi- 
dends is heavily dependent on profitability. The most widely used profitability ratio is 
earnings per share. Auditors calculate additional ratios to provide further insights into 
operations. 

Gross profit percent shows the portion of sales available to cover all expenses and 
profit after deducting the cost of the product. Auditors find this ratio especially use- 
ful for assessing misstatements in sales, cost of goods sold, accounts receivable, and 
inventory. 


Profit margin is similar to gross profit margin but subtracts both cost of goods sold 
and operating expenses in making the calculations. This ratio enables auditors to assess 
potential misstatements in operating expenses and related balance sheet accounts. 


Return on assets and return on common equity are measures of overall profit- 
ability of a company. These ratios show a company’s ability to generate profit for each 
dollar of assets and equity. 


CONCEPT CHECK 

I. When are analytical procedures required on an audit? What is the primary purpose of 
analytical procedures during each phase of the audit? 

2. Name the four categories of financial ratios and give an example of a ratio in each 
category. What is the primary information provided by each financial ratio category? 


AUDIT DOCUMENTATION 
Auditing standards state that audit documentation is the record of the audit procedures ‘OBJECTIVE 7-7 


performed, relevant audit evidence, and conclusions the auditor reached. Audit documentation 
should include all the information the auditor considers necessary to adequately con- 
duct the audit and to provide support for the audit report. Audit documentation may 
also be referred to as working papers or workpapers, although audit documentation is 
usually maintained in computerized files. 


Understand the purposes of 
audit documentation. 


The overall objective of audit documentation is to aid the auditor in providing rea- 
sonable assurance that an adequate audit was conducted in accordance with auditing 
standards. More specifically, audit documentation provides: 


Purposes of Audit 
Documentation 


A Basis for Planning the Audit If the auditor is to plan an audit adequately, the neces- 
sary reference information must be available in the audit files. The files may include 
such diverse planning information as descriptive information about internal control, 
a time budget for individual audit areas, the audit program, and the results of the pre- 
ceding year’s audit. 


A Record of the Evidence Accumulated and the Results of the Tests Audit docu- 
mentation is the primary means of documenting that an adequate audit was con- 
ducted in accordance with auditing standards. If the need arises, the auditor must be 
able to demonstrate to regulatory agencies and courts that the audit was well planned 
and adequately supervised; the evidence accumulated was appropriate and sufficient; 
and the audit report was proper, considering the results of the audit. 

Audit documentation should identify the items tested, any significant audit 
findings or issues, actions taken to address them, and the basis for the conclusions 
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Ownership of Audit Files 


Confidentiality of 
Audit Files 


Requirements for 
Retention of Audit 
Documentation 
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reached. For example, the auditor should document specific transactions at year-end 
to determine whether transactions were recorded in the proper period. If misstate- 
ments are detected during these cutoff tests, the auditor should document the addi- 
tional procedures performed to determine the extent of cutoff misstatements, the 
conclusion as to whether the account balances affected are fairly stated, and whether 
any audit adjustments should be proposed. 


Data for Determining the Proper Type of Audit Report Audit documentation 
provides an important source of information to assist the auditor in deciding whether 
sufficient appropriate evidence was accumulated to justify the audit report in a given 
set of circumstances. The data in the files are equally useful for evaluating whether the 
financial statements are fairly stated, given the audit evidence. 


A Basis for Review by Supervisors and Partners The audit files are the primary 
frame of reference used by supervisory personnel to review the work of assistants. 
The careful review by supervisors also provides evidence that the audit was properly 
supervised. Audit documentation should indicate who performed the audit work, the 
date the work was performed, who reviewed the work, and the date of that review. 

In addition to the purposes directly related to the audit report, the audit files often 
serve as the basis for preparing tax returns, filings with the SEC, and other reports. 
They are also a source of information for issuing communications to management 
and those charged with governance, such as the audit committee, concerning various 
matters such as internal control deficiencies or operational recommendations. Audit 
files are also a useful frame of reference for training personnel and as an aid in plan- 
ning and coordinating subsequent audits. 


Audit documentation prepared during the engagement, including schedules prepared 
by the client for the auditor, is the property of the auditor. The only time anyone else, 
including the client, has a legal right to examine the files is when they are subpoenaed 
by a court as legal evidence or when they are examined by approved peer reviewers or 
regulatory inspectors. At the completion of the engagement, audit files are retained 
on the CPA’s premises for future reference and to comply with auditing standards 
related to document retention. 


The need to maintain a confidential relationship with the client is expressed in the 
AICPA Code of Professional Conduct, which states 


¢ A member in public practice shall not disclose any confidential client informa- 
tion without the specific consent of the client.! 


During the course of the audit, auditors obtain a considerable amount of informa- 
tion of a confidential nature, including officers’ salaries, product pricing and advertis- 
ing plans, and product cost data. If auditors divulged this information to outsiders or 
to client employees who have been denied access, their relationship with management 
would be seriously strained. Furthermore, having access to the audit files would give 
employees an opportunity to alter the files. For these reasons, care must be taken to 
safeguard the audit files at all times. 


Auditing standards require that records for audits of private companies be retained for 
a minimum of five years. The Sarbanes—Oxley Act requires auditors of public com- 
panies to prepare and maintain audit files and other information related to any audit 
report in sufficient detail to support the auditor’s conclusions, for a period of not less 
than seven years. The law makes the knowing and willful destruction of audit docu- 
mentation within the seven-year period a criminal offense subject to financial fines 
and imprisonment up to ten years. 


‘Source: Copyright American Institute of CPAs. All rights reserved. Used with permission. 
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FIGURE 7-3 Audit File Contents and Organization 


Financial Statements 
~ and Audit Report 
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_ Audit Programs 
Robinson Associates 
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Audit Planning and Risk 
Cash $165,237 Assessment Procedures 
Accounts Receivable 275,050 
Prepaid Insurance 37,795 


Interest Receivable 20,493 Understanding of 


~ Internal Control 


Tests of Controls 
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~ and Equity 


Contingent Liabilities and 
~ Audit Completion 


Permanent Files 


SEC rules require public company auditors to maintain the following documentation: 


* Working papers or other documents that form the basis for the audit of the 
company’s annual financial statements or review of the company’s quarterly 
financial statements 

* Memos, correspondence, communications, other documents and records, 
including electronic records, related to the audit or review 


These rules significantly increase the audit documentation that must be retained 
for audits of public companies. For example, auditors of public companies are 
required to retain e-mail correspondence that contains information meeting the pre- 
ceding criteria. 


Each CPA firm establishes its own approach to preparing and organizing audit files, 
and the beginning auditor must adopt the firm’s approach. This text emphasizes gen- 
eral concepts common to all audit documentation. 

Figure 7-3 illustrates the contents and organization of a typical set of audit files. 
They contain virtually everything involved in the audit. There is logic to the type of 
audit documentation prepared for an audit and the way it is arranged in the files, 
though different firms may follow somewhat different approaches. In the figure, 
the audit files include general information, such as corporate data in the permanent 
files, in addition to current files that contain documentation of the auditor’s tests, the 
financial statements, and audit report. 


Permanent files contain data of a historical or continuing nature pertinent to the current 
audit. These files provide a convenient source of information about the audit that is 
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of continuing interest from year to year. The permanent files typically include the 
following: 


° Extracts or copies of such company documents of continuing importance as the articles of 
incorporation, bylaws, bond indentures, and contracts. The contracts may include pen- 
sion plans, leases, stock options, and so on. Each of these documents is signifi- 
cant to the auditor for as many years as it is in effect. 

¢ Analyses from previous years of accounts that have continuing importance to the auditor. 
These include accounts such as long-term debt, stockholders’ equity accounts, 
goodwill, and fixed assets. Having this information in the permanent files 
enables the auditor to concentrate on analyzing only the changes in the cur- 
rent year’s balance while retaining the results of previous years’ audits in a form 
accessible for review. 

¢ Information related to understanding internal control and assessing control risk. This 
includes organization charts, flowcharts, questionnaires, and other internal 
control information, including identification of controls and deficiencies in the 
system. These records are used as a starting point for documenting the audi- 
tor’s understanding of the control system, since aspects of the system are often 
unchanged from year to year. 

° The results of analytical procedures from previous years’ audits. Among these data are 
ratios and percentages computed by the auditor and the total balance or the bal- 
ance by month for selected accounts. This information is useful in helping the 
auditor decide whether there are unusual changes in the current year’s account 
balances that should be investigated more extensively. 


Documenting analytical procedures, understanding of internal control, and 
assessing control risk are included in the current period audit files rather than in the 
permanent file by many CPA firms. 


The current files include all audit documentation applicable to the year under audit. 
There is one set of permanent files for the client and a set of current files for each 
year’s audit. The following are types of information often included in the current file: 


Audit Program Auditing standards require a written audit program for every audit. 
The audit program is often maintained in a separate file to improve the coordination 
and integration of all parts of the audit, although some firms also include a copy of the 
audit program with each audit section’s audit documentation. As the audit progresses, 
each auditor initials or electronically signs the program for the audit procedures 
performed and indicates the date of completion. The inclusion in the audit files of a 
well-designed audit program completed in a conscientious manner is evidence of a 
high-quality audit. 

Working Trial Balance Because the basis for preparing the financial statements is the 
general ledger, the amounts included in that record are the focal point of the audit. As 
early as possible after the balance sheet date, the auditor obtains or prepares a listing 
of the general ledger accounts and their year-end balances. This schedule is the work- 
ing trial balance. Software programs enable the auditor to download the client’s end- 
ing general ledger balances into a working trial balance file. 

The technique used by many firms is to have the auditor’s working trial balance in the 
same format as the financial statements. Each line item on the trial balance is supported 
by a lead schedule, containing the detailed accounts from the general ledger making 
up the line item total. Each detailed account on the lead schedule is, in turn, supported 
by proper schedules supporting the audit work performed and the conclusions reached. 
For example, the relationship between cash as it is stated on the financial statements, the 
working trial balance, the lead schedule for cash, and the supporting audit documentation 
is presented in Figure 7-4. As indicated, cash on the financial statements is the same as 
on the working trial balance and the total of the detail on the cash lead schedule. Initially, 
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FIGURE 7-4 Relationship of Audit Documentation to Financial Statements 
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amounts for the lead schedule were taken from the general ledger. The audit work per- 
formed resulted in an adjustment to cash that will be shown in the detail schedules and 
is reflected on the lead schedule, the working trial balance, and the financial statements. 


Adjusting Entries When the auditor discovers material misstatements in the 
accounting records, the financial statements must be corrected. For example, if the 
client failed to properly reduce inventory for obsolete raw materials, the auditor 
can propose an adjusting entry to reflect the realizable value of the inventory. Even 
though adjusting entries discovered in the audit are often prepared by the auditor, 
they must be approved by the client because management has primary responsibility 
for the fair presentation of the statements. Figure 7-4 illustrates an adjustment of the 
general cash account for $90 (thousand). 

Only those adjusting entries that significantly affect the fair presentation of financial 
statements must be recorded. Auditors decide when a misstatement should be adjusted 
based on materiality. At the same time, auditors must keep in mind that several immate- 
rial misstatements that are not adjusted could, when combined, result in a material over- 
all misstatement. It is common for auditors to summarize all entries that have not been 
recorded in a separate audit schedule as a means of assessing their cumulative effect. 


Supporting Schedules The largest portion of audit documentation includes the 
detailed supporting schedules prepared by the client or the auditors in support of 
specific amounts on the financial statements. Auditors must choose the proper type 
of schedule for a given aspect of the audit in order to document the adequacy of the 
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audit and to fulfill the other objectives of audit documentation. Here are the major 
types of supporting schedules: 


¢ Analysis. An analysis is designed to show the activity in a general ledger account dur- 
ing the entire period under audit, tying together the beginning and ending bal- 
ances. This type of schedule is normally used for accounts such as marketable 
securities; notes receivable; allowance for doubtful accounts; property, plant, 
and equipment; long-term debt; and all equity accounts. The common charac- 
teristic of these accounts is the significance of the activity in the account during 
the year. In most cases, the analysis has cross-references to other audit files. 


Trial balance or list. This type of schedule consists of the details that make up a 
year-end balance of a general ledger account. It differs from an analysis in that it 
includes only those items making up the end-of-the-period balance. Common 
examples include trial balances or lists in support of trade accounts receivable, 
trade accounts payable, repair and maintenance expense, legal expense, and 
miscellaneous income. An example is included in Figure 7-5. 


Reconciliation of amounts. A reconciliation supports a specific amount and is 
normally expected to tie the amount recorded in the client’s records to 
another source of information. Examples include the reconciliation of cash 
balances with bank statements, the reconciliation of subsidiary accounts 


FIGURE 7-5 Common Characteristics of Proper Audit Documentation 
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issue and maturity dates, interest rate, and accrued interest (w/p C-2). audit procedures 


Recalculated accrued interest. No exceptions noted. performed 


Footed. 


Traced and agreed to trial balance. 
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Conclusion: Notes receivable balance at | 1/30/16 appears fairly stated. 
The collectibility of all notes was discussed with the controller. ~ Auditor's conclusion 
Per our conversation, all appear to be collectible. In my opinion, 
no loss provision is necessary. J.B. 
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Rhonda McMillan had been the in-charge auditor on 
the audit of Blaine Construction Company in 2011. 
Now she is sitting here, in 2017, in a room full of 
attorneys who are asking her questions about the 
2011 audit. Blaine was sold to another company in 
2012 at a purchase price that was based primarily on 
the 2011 audited financial statements. Several of the 
large construction contracts showed a profit in 201 | 
using the percentage of completion method, but 
they ultimately resulted in large losses for the buyer. 
Because Rhonda's firm audited the 2011 financial 
statements, the buyer is trying to make the case that 
Rhonda's firm failed in their audit of contract costs 
and revenues. 

The buyer's attorney is taking Rhonda's 
deposition and is asking her about the audit work 
she did on contracts. Referring to the audit files, his 
examination goes something like this: 


WILL IT STAND 
UP IN COURT? 
ATTORNEY 


RHONDA 
ATTORNEY 


RHONDA 


ATTORNEY _ Do you recognize this exhibit, and if 
you do, would you please identify it 
for us? 

RHONDA __ Yes, this is the summary of contracts 
in progress at the end of 2011. 
ATTORNEY __ Did you prepare this schedule? 
RHONDA | believe the client prepared it, but | 
audited it. My initials are right here 
in the upper right-hand corner. 
ATTORNEY When did you do this audit work? 
RHONDA _ I’m not sure, | forgot to date this 


required to pay 
to the buyer. 


receivable balances with confirmations from customers, and the reconcili- 
ation of accounts payable balances with vendors’ statements. See the bank 
reconciliation example on page 743. 

¢ Substantive analytical procedures. Substantive analytical procedures, discussed 
earlier in the chapter, include evidence documenting the auditor’s expecta- 
tion of the balance in an account, as illustrated in Figure 7-2 on page 221. 

¢ Summary of procedures. Another type of schedule summarizes the results of a specific 
audit procedure. A summary schedule documents the extent of testing, the mis- 
statements found, and the auditor’s conclusion based on the testing. Examples 
are the summary of the results of accounts receivable confirmations and the 
summary of inventory observations. 

¢ Examination of supporting documents. A number of special-purpose schedules are 
designed to show detailed tests performed, such as documents examined during 
tests of controls and substantive tests of transactions. These schedules show no 
totals, and they do not tie in to the general ledger because their purpose is to 
document the tests performed and the results found. However, the schedules 
must state a positive or negative conclusion about the objective of the test. 

* Informational. This type of schedule contains information as opposed to audit 
evidence. These schedules include information for tax returns and SEC Form 
10-K and data such as time budgets and the client’s working hours, which are 
helpful in administration of the engagement. 

* Outside documentation. Some of the content of the audit files consists of outside 
documentation gathered by auditors, such as confirmation replies and copies of 
client agreements. Although not “schedules” in the usual sense, they are indexed 
and filed. Audit procedures are indicated on them in the same manner as on 
other schedules. 
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one. But it must have been about 
the second week in March, because 
that’s when we did the audit testing. 
Now I'd like to turn your attention 
to this tick mark next to the Baldwin 
contract. You see where it shows 
Baldwin, and then the red sort of 
cross-like mark? 

Yes. 

In the explanation for that tick mark 
it says: “Discussed status of job with 
Elton Burgess. Job is going according 
to schedule, and he believes that the 
expected profit will be earned.” Now 
my question is, Ms. McMillan, what 
exactly was the nature and content 
of your discussion with Mr. Burgess? 
Other than what is in the 
explanation to this tick mark, | have 
no idea. | mean, this all took place 
over five years ago. | only worked on 
the engagement that one year, and | 
can hardly even remember that. 


Rhonda’s work was not adequately documented, 
and what was there indicated that her testing relied 
almost exclusively on management inquiry without 
any required corroboration. Her audit firm was 


a significant settlement for damages 


Preparation of Audit 
Documentation 
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Read the story on the preceding page about Rhonda McMillan and imagine yourself 
in her position several years after completing an audit. The proper preparation of 
schedules to document the audit evidence accumulated, the results found, and the 
conclusions reached is an important part of the audit. The documentation should be 
prepared in sufficient detail to provide an experienced auditor with no connection 
to the audit a clear understanding of the work performed, the evidence obtained and 
its source, and the conclusions reached. Although the design depends on the objec- 
tives involved, audit documentation should possess certain characteristics: 


¢ Each audit file should be properly identified with such information as the cli- 
ent’s name, the period covered, a description of the contents, the initials of the 
preparer, the date of preparation, and an index code. 

¢ Audit documentation should be indexed and cross-referenced to aid in orga- 
nizing and filing. One type of indexing is illustrated in Figure 7-4 (p. 227). The 
lead schedule for cash has been indexed as A-1, and the individual general 
ledger accounts making up the total cash on the financial statements are 
indexed as A-2 through A-4. The final indexing is for the schedules supporting 
A-3 and A-4. 

* Completed audit documentation must clearly indicate the audit work per- 
formed. This is accomplished in three ways: by a written statement in the form 
of a memorandum, by initialing the audit procedures in the audit program, 
and by notations directly on the schedules. Notations on schedules are accom- 
plished by the use of tick marks, which are symbols adjacent to the detail on 
the body of the schedule. These notations must be clearly explained at the 
bottom of the schedule. 

¢ Audit documentation should include sufficient information to fulfill the objec- 
tives for which it was designed. To properly prepare audit documentation, the 
auditor must know his or her goals. For example, if a schedule is designed to list 
the detail and show the verification of support of a balance sheet account, such 
as prepaid insurance, it is essential that the detail on the schedule reconciles 
with the trial balance. 

¢ The conclusions that were reached about the segment of the audit under 
consideration should be plainly stated. 


The common characteristics of proper audit documentation preparation are 
indicated in Figure 7-5 (p. 228). 

Auditors often use audit engagement management software to organize and ana- 
lyze audit documentation. Using audit management software, an auditor can prepare 
a trial balance, lead schedules, supporting audit documentation, and financial state- 
ments, as well as perform ratio analysis. The software also facilitates tracking audit 
progress by indicating the performance and review status of each audit area. Tick 
marks and other explanations, such as reviewer notes, can be entered directly into 
computerized files. In addition, data can be imported and exported to other applica- 
tions, so auditors may download a client’s general ledger or export tax information 
to a commercial tax preparation package. Auditors also use local area networks and 
groupshare software programs to access audit documentation simultaneously from 
remote locations. 


CONCEPT CHECK 


I. List the purposes of audit documentation and explain why each purpose is important. 


2. Explain why it is important for audit documentation to include each of the following: 
identification of the name of the client, period covered, description of the contents, 
initials of the preparer and the reviewer, dates of the preparation and review, and an 
index code. 


SUMMARY 


An important part of every audit is determining the proper types and amounts of audit 
evidence to gather. Auditors use eight types of evidence in an audit. The persuasiveness of 
the evidence depends on both its appropriateness and sufficiency. The appropriateness of 
audit evidence is determined by its relevance in meeting audit objectives and its reliability. 
Analytical procedures are the evaluation of recorded accounting information by com- 
puting ratios and developing other plausible relationships for comparison to expectations 
developed by the auditor. These analytical procedures are used in planning to understand 
the client’s business and industry and also used throughout the audit to identify possible 
misstatements, reduce detailed tests, and assess going-concern issues. The use of analytical 
procedures has increased because of their effectiveness at identifying possible misstatements 
at a low cost, and they are required in the planning and completion phases of the audit. 
Audit documentation is an essential part of every audit for effectively planning the au- 
dit, providing a record of the evidence accumulated and the results of the tests, deciding the 
proper type of audit report, and reviewing the work of assistants. CPA firms establish their 
own policies and approaches to audit documentation to make sure that these objectives 
are met. High-quality CPA firms make sure that audit documentation is properly prepared 
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and is sufficient for the circumstances in the audit. 


Analytical procedures—evaluations of 
financial information through analysis of 
plausible relationships among financial 
and nonfinancial data 


Appropriateness of evidence—a measure 
of the quality of evidence; appropriate evi- 
dence is relevant and reliable in meeting 
audit objectives for classes of transactions, 
account balances, and related disclosures 


Audit documentation—record of the 
audit procedures performed, relevant audit 
evidence, and conclusions the auditor 
reached 


Audit procedure—detailed instruction 
for the collection of a type of audit evidence 


Audit program—list of audit procedures 
for an audit area or an entire audit; the audit 
program always includes audit procedures 
and may also include sample sizes, items to 
select, and timing of the tests 


Budgets—written records of the client's 
expectations for the period; a comparison 
of budgets with actual results may indicate 
whether or not misstatements are likely 


Confirmation—the auditor's receipt of a 
direct written or electronic response from 
a third party verifying the accuracy of 
information requested 


Current files—all audit files applicable to 
the year under audit 

External document—a document, such 
as a vendor’s invoice, that has been used by 
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ESSENTIAL TERMS 


an outside party to the transaction being 
documented and that the client now has or 
can easily obtain 


Inquiry—the obtaining of written or oral 
information from the client in response to 
specific questions during the audit 


Inspection—the auditor’s examination 
of the client’s documents and records 
to substantiate the information that is 
or should be included in the financial 
statements 


Internal document—a document, such 
as an employee time report, that is pre- 
pared and used within the client’s organi- 
zation 


Lead schedule—an audit schedule that 
contains the detailed accounts from the 
general ledger making up a line item total 
in the working trial balance 


Observation—looking at a process or 
procedure being performed by others 


Permanent files—auditors’ files that con- 
tain data of a historical or continuing nature 
pertinent to the current audit such as cop- 
ies of articles of incorporation, bylaws, 
bond indentures, and contracts 


Persuasiveness of evidence—the degree 
to which the auditor is convinced that the 
evidence supports the audit opinion; the 
two determinants of persuasiveness are 
the appropriateness and sufficiency of the 
evidence 


Physical examination—the auditor's 
inspection or count of a tangible asset 


Recalculation—the rechecking of a 
sample of the computations made by the 
client, including mathematical accuracy 
of individual transactions and amounts 
and the adding of journals and subsidiary 
records 


Reliability of evidence—the extent to 
which evidence is believable or worthy of 
trust; evidence is reliable when it is obtained 
(1) from an independent provider, (2) from 
a client with effective internal controls, 
(3) from the auditor’s direct knowledge, 
(4) from qualified providers such as law 
firms and banks, (5) from objective sources, 
and (6) in a timely manner 


Reperformance—the auditor's indepen- 
dent tests of client accounting procedures 
or controls that were originally done as 
part of the entity’s accounting and internal 
control system 


Substantive analytical procedure—an 
analytical procedure in which the auditor 
develops an expectation of recorded 


amounts or ratios to provide evidence sup- 
porting an account balance 


Sufficiency of evidence—the quantity of 
evidence; proper sample size 


Supporting schedules—detailed sched- 
ules prepared by the client or the auditor in 
support of specific amounts on the finan- 
cial statements 


Tick marks—symbols used on an audit 
schedule that provide additional infor- 
mation or details of audit procedures 
performed 


Tracing—the use of documentation to 
determine if transactions or amounts are 
included in the accounting records 


Unusual fluctuations—significant unex- 
pected differences indicated by analyti- 
cal procedures between the current year’s 
unaudited financial data and other data 
used in comparisons 

Vouching—the use of documentation to 
support recorded transactions or amounts 
Working trial balance—a listing of the 
general ledger accounts and their year-end 
balances 


REVIEW QUESTIONS 


7-1 (OBJECTIVE 7-1) Discuss the similarities and differences between evidence in a legal case 
and evidence in an audit of financial statements. 

7-2 (OBJECTIVE 7-2) List the four major evidence decisions that must be made on every 
audit. 

7-3 (OBJECTIVE 7-2) Describe what is meant by an audit procedure. Why is it important for 
audit procedures to be carefully worded? 

7-4 (OBJECTIVE 7-2) Describe what is meant by an audit procedure for cash disbursement. 
What things should be included in an audit procedure? 

7-5 (OBJECTIVE 7-3) Explain why the auditor can be persuaded only with a reasonable level 
of assurance, rather than convinced, that the financial statements are correct. 

7-6 (OBJECTIVE 7-3) Identify the two factors that determine the persuasiveness of evidence. 
How are these two factors related to audit procedures, sample size, items to select, and 
timing? 

7-7 (OBJECTIVE 7-4) What are the characteristics of a confirmation? Distinguish between a 
confirmation and external documentation. 

7-8 (OBJECTIVE 7-4) Distinguish between physical examination and inspection and give 
examples. 

7-9 (OBJECTIVE 7-4) Identify the main terms used in audit procedures. 

7-10 (OBJECTIVE 7-5) What is the primary purpose of analytical procedures performed dur- 
ing the completion phase of the audit? 

7-11 (OBJECTIVE 7-5) Distinguish between attention-directing analytical procedures and 
those intended to eliminate or reduce detailed substantive procedures. 
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7-12 (OBJECTIVE 7-5) At the completion of every audit, Roger Morris, CPA, calculates a 
large number of ratios and trends for comparison with industry averages and prior-year 
calculations. He believes the calculations are worth the relatively small cost of doing 
them because they provide him with an excellent overview of the client’s operations. If 
the ratios are out of line, Morris discusses the reasons with the client and often makes 
suggestions on how to bring the ratio back in line in the future. In some cases, these 
discussions with management have been the basis for management consulting engage- 
ments. Discuss the major strengths and shortcomings in Morris’s use of ratio and trend 
analysis. 


7-13 (OBJECTIVE 7-6) Describe the liquidity activity ratios and explain why these ratios are 
useful to auditors. 


7-14 (OBJECTIVE 7-7) Who owns the audit files? Under what circumstances can they be used 
by other people? 
7-15 (OBJECTIVE 7-7) discuss the ownership of audit files. 


7-16 (OBJECTIVE 7-8) Define what is meant by a permanent file, and list several types of 
information typically included. Why does the auditor not include the contents of the 
permanent file with the current year’s audit file? 


7-17 (OBJECTIVE 7-8) Identify the types of information included in the current file. 


7-18 (OBJECTIVE 7-8) Why is it essential that the auditor not leave questions or exceptions in 
the audit documentation without an adequate explanation? 


7-19 (OBJECTIVE 7-8) Define what is meant by a tick mark. What is its purpose? 


7-20 (OBJECTIVE 7-8) Explain the purposes and benefits of audit engagement management 
software. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


7-21 (OBJECTIVES 7-3, 7-4) The following questions concern persuasiveness of evidence. 
Choose the best response. 


a. Which of the following types of documentary evidence should the auditor consider 

to be the most reliable? 

(1) A sales invoice issued by the client and supported by a delivery receipt from an 
outside trucker 

(2) Confirmation of an account payable balance mailed by and returned directly to 
the auditor 

(3) A check, issued by the company and bearing the payee’s endorsement, that is 
included with the bank statements mailed directly to the auditor 

(4) An audit schedule prepared by the client’s controller and reviewed by the client’s 
treasurer 


b. Audit evidence can come in different forms with different degrees of persuasiveness. 
Which of the following is the least persuasive type of evidence? 
(1) Vendor's invoice 
(2) Bank statement obtained from the client 
(3) Computations made by the auditor 
(4) Prenumbered sales invoices 


c. Which of the following presumptions is correct about the reliability of audit evidence? 

(1) Information obtained indirectly from outside sources is the most reliable audit 
evidence. 

(2) Tobe reliable, audit evidence should be convincing rather than merely persuasive. 

(3) Reliability of audit evidence refers to the amount of corroborative evidence obtained. 

(4) Effective internal control provides more assurance about the reliability of audit 
evidence. 
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7-22 (OBJECTIVES 7-5, 7-6) The following questions concern the use of analytical procedures 
during an audit. Select the best response. 


a. For all audits of financial statements made in accordance with auditing standards, the 
use of analytical procedures is required to some extent 


In the Planning Stage As a Substantive Test In the Completion Stage 
(1) Yes No Yes 
(2) No Yes No 
(3) No Yes Yes 
(4) Yes No No 


b. Which of the following situations has the best chance of being detected when a CPA 
compares 2016 revenues and expenses with the prior year and investigates all changes 
exceeding a fixed percent? 

(1) An increase in property tax rates has not been recognized in the company’s 2016 
accrual. 

(2) The cashier began lapping accounts receivable in 2016. 

(3) Because of worsening economic conditions, the 2016 provision for uncollectible 
accounts was inadequate. 

(4) The company changed its capitalization policy for small tools in 2016. 


c. Which of the following would not be considered to be an analytical procedure? 

(1) Estimating payroll expense by multiplying the number of employees by the aver- 
age hourly wage rate and the total hours worked. 

(2) Projecting the error rate by comparing the results of a statistical sample with the 
actual population characteristics. 

(3) Computing accounts receivable turnover by dividing credit sales by the average 
net receivables. 

(4) Developing the expected current year sales based on the sales trend of the prior 
five years. 


7-23 (OBJECTIVES 7-7, 7-8) The following questions concern audit documentation. Choose 
the best response. 


a. Which of the following is not a primary purpose of audit documentation? 
(1) To coordinate the audit 
(2) To assist in preparation of the audit report 
(3) To support the financial statements 
(4) To provide evidence of the audit work performed 


b. During an audit engagement, pertinent data are compiled and included in the audit 

files. The audit files primarily are considered to be 

(1) aclient-owned record of conclusions reached by the auditors who performed the 
engagement. 

(2) evidence supporting financial statements. 

(3) support for the auditor’s representations as to compliance with auditing 
standards. 

(4) arecord to be used as a basis for the following year’s engagement. 


c. Although the quantity, type, and content of audit documentation will vary with the 

circumstances, audit documentation generally will include the 

(1) copies of those client records examined by the auditor during the course of the 
engagement. 

(2) evaluation of the efficiency and competence of the audit staff assistants by the 
partner responsible for the audit. 

(3) auditor’s comments concerning the efficiency and competence of client manage- 
ment personnel. 

(4) auditing procedures followed and the testing performed in obtaining audit 
evidence. 
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DISCUSSION QUESTIONS AND PROBLEMS 


7-24 (OBJECTIVE 7-4) The following are examples of documentation typically obtained by 
auditors: 

. Duplicate sales invoices 

. Employees’ time reports 

. Vendors’ invoices 

. Inventory receiving reports 

. Title insurance policies for real estate 

. Notes receivable 

. Bank statements 

. Cancelled payroll checks 

. Cancelled notes payable 

10. Payroll time cards 

11. Purchase requisitions 

12. Insurance policies 

13. Receiving reports (documents prepared when merchandise is received) 
14. Minutes of the board of directors 

15. Signed W-4s (Employee’s Withholding Exemption Certificates) 

16. Remittance advices 

17. Signed lease agreements 

18. Duplicate copies of bills of lading 


SO CON AU BWNH KF 


a. Classify each of the preceding items according to type of documentation: Required 
(1) Internal or (2) External. 
b. Explain why external evidence is more reliable than internal evidence. 


7-25 (OBJECTIVE 7-4) The following are examples of audit procedures: 
1. Inquire of management whether there is any obsolete inventory on hand at the 
balance sheet date. 
2. Examine a sample of vendors’ invoices to determine whether the goods or services 
received are reasonable and of the type normally used by the client’s business. 
3. Re-compute the unit sales price times the number of units for a sample of duplicate 
sales invoices and compare the totals with the calculations. 
4. Count a sample of 100 inventory items and compare quantity and description to 
client’s counts. 
5. Add the sales journal entries to determine whether they were correctly totaled. 
6. Foot the sales journal for a one-month period and compare all totals with the general 
ledger 
7. Obtain a letter from the client’s attorney addressed to the CPA firm stating that the 
attorney is not aware of any existing lawsuits. 
8. Read the minutes of a board of directors meeting and summarize all information that 
is pertinent to the financial statements in an audit file. 
9. Compute inventory turnover ratios and compare with hose of previous years as a test 
of inventory obsolescence. 
10. Examine an insurance policy stating the amount of the fire insurance coverage on 
buildings and equipment. 
. Calculate the ratio of cost of goods sold to sales as a test of overall reasonableness of 
gross margin relative to the preceding year. 
12. Observe whether the two inventory count teams independently count and record 
inventory counts. 
13. Trace the total in the cash disbursements journal to the general ledger. 
14. Scan the sales journal, looking for large and unusual transactions. 
15. Vouch a sample of recorded acquisition transactions to vendors’ invoices and receiv- 
ing reports. 
16. Examine corporate minutes to determine the authorization of the issue of bonds. 
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17. Obtain a letter from management stating that there are no unrecorded liabilities. 
18. Review the total of repairs and maintenance for each month to determine whether 
any month’s total was unusually large. 


Required Classify each of the preceding items according to the eight types of audit evidence: (1) 
physical examination, (2) confirmation, (3) inspection, (4) analytical procedures, (5) inqui- 
ries of the client, (6) recalculation, (7) re-performance, and (8) observation. 


7-26 (OBJECTIVE 7-4) As auditor of the Star Manufacturing Company, you have obtained a 
trial balance taken from the books of Star one month before year-end: 


Dr. (Cr.) Dr. (Cr.) 

Cash in bank $ 87,000 Mortgages payable (400,000) 
Trade accounts 345,000 Capital stock (300,000) 

receivable Retained earnings (510,000) 
Notes receivable 125,000 Sales (3,130,000) 
Inventories 317,000 Cost of sales 2,300,000 
Land 66,000 General and administrative 622,000 
Buildings, net 350,000 expenses 
Furniture, fixtures, and 325,000 Legal and professional fees 3,000 

equipment, net Interest expense 35,000 
Trade accounts payable (235,000) 


There are no inventories consigned either in or out. 
All notes receivable are due from outsiders and held by Star. 


Required Which accounts should be confirmed with outside sources? Briefly describe from whom 
they should be confirmed and the information that should be confirmed. Organize your 
answer in the following format*: 


From Whom Information to Be 
Account Name Confirmed Confirmed 


7-27 (OBJECTIVE 7-4) The following are various audit procedures performed to satisfy 
specific transaction-related audit objectives as discussed in Chapter 6. The general trans- 
action-related audit objectives from Chapter 6 are also included. 


Audit Procedures 

1. Trace from receiving reports to vendors’ invoices and entries in the acquisitions 
journal. 

2. Add the sales journal for the month of July and trace amounts to the general ledger. 

3. Examine expense voucher packages and related vendors’ invoices for approval of 
expense account classification. 

4. Observe opening of cash receipts to determine that cash receipts are promptly de- 
posited and recorded. 

5. Ask the accounts payable clerk about procedures for verifying prices, quantities, 
and extensions on vendors’ invoices. 

6. Vouch entries in sales journal to sales invoices and related shipping documents. 


General Transaction-Related Audit Objectives 


Occurrence Posting and summarization 
Completeness Classification 
Accuracy Timing 
Required a. Identify the type of audit evidence used for each audit procedure. 
b. Identify the general transaction-related audit objective or objectives satisfied by each 
audit procedure. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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7-28 (OBJECTIVE 7-4) The following audit procedures were performed in the audit of inven- 
tory to satisfy specific balance-related audit objectives as discussed in Chapter 6. The audit 
procedures assume that the auditor has obtained the inventory count sheets that list the 
client’s inventory. The general balance-related audit objectives from Chapter 6 are also 
included. 


Audit Procedures 

1. Select a sample of inventory items in the factory warehouse and trace each item to 
the inventory count sheets to determine if it has been included and if the quantity 
and description are correct. 

2. Trace selected quantities from the inventory list to the physical inventory to make 
sure that it exists and the quantities are the same. 

3. Compare the quantities on hand and unit prices on this year’s inventory count 
sheets with those in the preceding year as a test for large differences. 

4. Test the extension of unit prices times quantity on the inventory list for a sam- 
ple of inventory items, test foot the list, and compare the total to the general 
ledger. 

5. Send letters directly to third parties who hold the client’s inventory, and request 
that they respond directly to the auditors. 

6. Examine sales invoices and contracts with customers to determine whether any 
goods are out on consignment with customers. Similarly, examine vendors’ in- 
voices and contracts with vendors to determine whether any goods on the inven- 
tory listing are owned by vendors. 

7. Question operating personnel about the possibility of obsolete or slow-moving 
inventory. 


General Balance-Related Audit Objectives 


Existence Cutoff 

Completeness Detail tie-in 

Accuracy Realizable value 
Classification Rights and obligations 


a. Identify the type of audit evidence used for each audit procedure. 
b. Identify the general balance-related audit objective or objectives satisfied by each au- 
dit procedure. 


7-29 (OBJECTIVES 7-3, 7-4) Nefret Stores is a large discount cosmetic department store chain. 
The company has recently expanded from 5 to 15 stores by borrowing from several large 
financial institutions and from a public offering of common stock. A recent investigation 
has disclosed that Nefret materially overstated net income. The company understated 
their accounts payable and recorded fictitious supplier credits that further reduced 
accounts payable. As a result, an Income & Sales Tax Department investigation was criti- 
cal of the evidence gathered by Nefret’s audit firm, Abdul & El-Emir, in testing accounts 
payable and the supplier credits. 


1. Kashir Advertising Credits—Nefret had arrangements with some vendors to share the cost of ad- 
vertising the vendor’s product. The arrangements were usually agreed to in advance by the vendor 
and supported by evidence of the placing of the ad. Nefret created a 250-page list of approximately 
1,000 vendors, supporting advertising credits of $500,000. Nefret’s auditors selected a sample of 
8 of the 2,500 items for direct confirmation. One item was confirmed by telephone, one traced to 
cash receipts, one to a vendor’s credit memo for part of the amount and cash receipts for the rest, 
and one to a vendor’s credit memo. Two of the amounts confirmed differed from the amount on 
the list, but the auditors did not seek an explanation for the differences because the amounts were 
not material. 

The rest of the credits were tested by selecting 30 items (several from each page of the list). 
Fourteen of the items were supported by examining the ads placed, and sixteen were supported by 
Nefret debit memos charging the vendors for the promotional allowances. 


2. Nashwa Credits—Nefret created 28 fictitious credit memos totaling $363,000 from 
Nashwa Distributions, the main supplier of health and beauty aids to Nefret. Nefret’s 
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Required 


controller initially told the auditor that the credits were for returned goods, then said they were a 
volume discount, and finally stated that they were a payment so that Nefret would continue to use 
Nashwa as a supplier. However, an Abdul & El-Emir staff auditor noticed the amount and concluded 
that a $257,000 payment to retain Nefret’s business was too large to make economic sense. 

The credit memos indicated that the credits were for damaged merchandise, volume rebates, and 
advertising allowances. The audit firm requested a confirmation of the credits. In response, Ramses 
Abdullah, the president of Nefret Stores, placed a call to Saria Wasir, the president of Nashwa, and 
handed the phone to the staff auditor. In fact, the call had been placed to an officer of Nefret. The Ne- 
fret officer, posing as Wasir, orally confirmed the credits. Nefret refused to allow Abdul & El-Emir to 
obtain written confirmation supporting the credits. Although the staff auditor doubted the validity 
of the credits, the audit partner, Mufti Hussein, accepted the credits based on the credit memoranda, 
telephone confirmation of the credits, and oral representation of Nefret officers. 


3. Zaki Credits-$130,000 in credits based on 35 credit memoranda from Zaki, Inc., were purportedly 
for the return of overstocked goods from several Nefret stores. An Abdul & El-Emir staff auditor 
noted the size of the credit and that the credit memos were dated subsequent to year-end. He further 
noticed that a sentence on the credit memos from Zaki had been obliterated by a felt-tip marker. 
When held to the light, the accountant could read that the marked-out sentence read, “Do not post 
until merchandise received.” The staff auditor thereafter called Omar Zaki, treasurer of Zaki, Inc., 
and was informed that the $130,000 in goods had not been returned and the money was not owed 
to Nefret by Zaki. Abdullah, president of Nefret, advised Hussein, audit partner, not to have anyone 
call Zaki to verify the amount because of pending litigation between Nefret and Zaki, Inc. 


4. Accounts Payable Accrual—Abdul & El-Emir assigned a senior with experience in the retail area to 
audit accounts payable. Although Nefret had poor internal controls, Abdul & El-Emir selected a sample 
of 50 for confirmation of the several thousand vendors who did business with Nefret. Twenty-seven re- 
sponses were received, and 21 were reconciled to Nefret’s records. These tests indicated an unrecorded 
liability of approximately $290,000 when projected to the population of accounts payable. However, 
the investigation disclosed that Nefret’s president made telephone calls to some suppliers who had re- 
ceived confirmation requests from Abdul & El-Emir and told them how to respond to the request. 

Abdul & El-Emir also performed a purchase cutoff test by vouching accounts payable invoices 
received for nine weeks after year-end. The purpose of this test was to identify invoices received 
after year-end that should have been recorded in accounts payable. Thirty percent of the sample 
($150,000) was found to relate to the prior year, indicating a potential unrecorded liability of ap- 
proximately $500,000. The audit firm and Nefret eventually agreed on adjustment to increase ac- 
counts payable by $260,000. 


Required — Identify deficiencies in the sufficiency and appropriateness of the evidence gathered in the audit of ac- 
counts payable of Nefret Stores. 


Ce.. 7-30 (OBJECTIVE 7-4) Following are 10 audit procedures with words missing and a list of several terms 
oo © commonly used in audit procedures. 


Audit Procedures 
1. ___ the unit selling price times quantity on the duplicate sales invoice and compare the total to the 
amount on the duplicate sales invoice. 
whether the accounts receivable bookkeeper is prohibited from handling cash. 
the ratio of cost of goods sold to sales and compare the ratio to previous years. 
the sales journal and the total to the general ledger. 
the sales journal, looking for large and unusual transactions requiring investigation. 
of management whether all accounting employees are required to take annual vacations. 
all marketable securities as of the balance sheet date to determine whether they equal the total on 
the client’s list. 
8. ____ the balance in the bank account directly with the East State Bank. 
9. _____a sample of duplicate sales invoices to determine if the controller’s approval is included and 
each duplicate sales invoice to the sales journal for agreement of name and amount. 
10. the agreement between Johnson Wholesale Company and the client to determine whether the ship- 
ment is a sale or a consignment. 


SON Es 


Terms 

a. Examine d. Compute g. Trace j. Observe 

b. Scan e. Recompute h. Compare k. Inquire 

c. Read f. Foot i. Count 1. Confirm 
Required a. For each of the 12 blanks in procedures 1 through 10, identify the most appropriate term. No term 


can be used more than once. 
b. For each of the procedures 1 through 10, identify the type of evidence that is being used. 
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7-31 (OBJECTIVES 7-4, 7-5) Analytical procedures consist of evaluations of financial 
information made by a study of plausible relationships among both financial and 
nonfinancial data. They range from simple comparisons to the use of complex mod- 
els involving many relationships and elements of data. They involve comparisons of 
recorded amounts, or ratios developed from recorded amounts, to expectations devel- 
oped by the auditors. 


a. Describe the broad purposes of analytical procedures. Required 
b. When are analytical procedures required during an audit? Explain why auditors use 

analytical procedures extensively in all parts of the audit. 
c. Describe the factors that influence the extent to which an auditor will use the results 

of analytical procedures to reduce detailed tests in meeting audit objectives.* 


7-32 (OBJECTIVES 7-4, 7-5) Analytical procedures are an important part of the audit process 
and consist of the evaluation of financial information by the study of plausible relation- 
ships among financial and nonfinancial data. Analytical procedures may be done during 
planning, as a substantive test, or as a part of the overall review of an audit. 

The following are various statements regarding the use of analytical procedures: 


1. Should focus on enhancing the auditor’s understanding of the client’s business and 
the transactions and events that have occurred since the last audit date 

2. Should focus on identifying areas that may represent specific risks relevant to the audit 

3. Require documentation in the working papers of the auditor’s expectation of the ratio 
or account balance 

4. Do not result in detection of misstatements 

5. Designed to obtain evidential matter about particular assertions related to account 
balances or classes of transactions 

6. Generally use data aggregated at a lower level than the other stages 

7. Should include reading the financial statements and notes to consider the adequacy 
of evidence gathered 

8. Not required during this stage 

9. Involve reconciliation of confirmation replies with recorded book amounts 

10. Use the preliminary or unadjusted working trial balance as a source of data 


For each of the 10 statements listed above, select the stage of the audit for which the state- Required 
ment is most accurate using the following responses: 


a. Planning the audit 

b. Substantive testing 

c. Overall review 

d. Statement is not correct concerning analytical procedures.* 


7-33 (OBJECTIVE 7-5, 7-6) Following are the auditor’s calculations of several key ratios for Required 
Cragston Star Products. The primary purpose of this information is to understand the 

client’s business and assess the risk of financial failure, but any other relevant conclusions 

are also desirable. 


Ratio 2016 2015 2014 £2013 2012 
1. Current ratio 2.08 2.26 2.51 2.43 2.50 
2. Quick ratio 97 1.34 1.82 1.76 1.64 
3. Times interest earned 3.50 3.20 4.10 5.30 7.10 
4. Accounts receivable turnover 4.20 5.50 4.10 5.40 5.60 
5. Days to collect receivables 86.90 66.36 89.02 67.59 65.18 
6. Inventory turnover 2.03 1.84 2.68 3.34 3,36 
7. Days to sell inventory 179.80 198.37 136.19 109.28 108.63 
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Ratio 2016 2015 2014 2013 2012 


8. Net sales divided by tangible assets .68 .64 73 69 67 
9. Profit margin 3 14 LG AS 14 
10. Return on assets 09 .09 2 .10 09 
11. Return on equity 05 .06 10 .10 ll 
12. Earnings per share $4.30 $4.26 $449 $4.26 $4.14 
Required a. What major conclusions can be drawn from this information about the company’s 
future? 


b. What additional information would be helpful in your assessment of this company’s 
financial condition? 

c. Based on the preceding ratios, which aspects of the company do you believe should 
receive special emphasis in the audit? 


7-34 (OBJECTIVE 7-5) You are auditing payroll for the Morehead Technologies company for 


the year ended October 31, 2016. Included next are amounts from the client’s trial bal- 
ance, along with comparative audited information for the prior year. 


Audited Balance Preliminary Balance 

10/31/2015 10/3 1/2016 
Sales $ 51,316,234 $ 57,474,182 
Executive salaries 546,940 615,970 
Factory hourly payroll 10,038,877 11,476,319 
Factory supervisors’ salaries 785,825 810,588 
Office salaries 1,990,296 2,055,302 
Sales commissions 2,018,149 2,367,962 


You have obtained the following information to help you perform preliminary analytical 
procedures for the payroll account balances. 


1. There has been a significant increase in the demand for Morehead’s products. The 
increase in sales was due to both an increase in the average selling price of four per- 
cent and an increase in units sold that resulted from the increased demand and an 
increased marketing effort. 

2. Even though sales volume increased, there was no addition of executives, factory su- 
pervisors, or office personnel. 

3. All employees including executives, but excluding commission salespeople, received 
a three percent salary increase starting November 1, 2015. Commission salespeople 
receive their increased compensation through the increase in sales. 

4. The increased number of factory hourly employees was accomplished by recalling 
employees that had been laid off. They receive the same wage rate as existing employ- 
ees. Morehead does not permit overtime. 

5. Commission salespeople receive a five percent commission on all sales on which a 
commission is given. Approximately 75 percent of sales earn sales commission. The 
other 25 percent are “call-ins,” for which no commission is given. Commissions are 
paid in the month following the month they are earned. 


Required a. Use the final balances for the prior year included above and the information in items 
1 through 5 to develop an expected value for each account, except sales. 
b. Calculate the difference between your expectation and the client’s recorded amount 
as a percentage using the formula (expected value—recorded amount)/expected 
value. 
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7-35 (OBJECTIVES 7-4, 7-7) Use AICPA (www.aicpa.org) and PCAOB (pcaobus.org) VEN 
auditing standards to answer the following questions about audit evidence and audit ‘OP 
documentation. Ow 


a. According to PCAOB Auditing Standard 3 on audit documentation, the complete Required 
audit documentation must be assembled by 45 days after the report release date. 
What does this standard say about whether documentation can be deleted after the 
document completion date or whether documentation can be added after the docu- 
ment completion date? 
b. According to AU-C 230.08, what are the requirements for the form, content, and 
extent of audit documentation? 
c. AU-C 500, Audit Evidence, in the AICPA auditing standards refers to information pro- 
duced by the entity. What must the auditor do to evaluate whether information pro- 
vided by the client is sufficiently reliable? 


7-36 (OBJECTIVES 7-7, 7-8) You are the in-charge auditor on the audit of Vandervoort 


Company and are to review the audit schedule shown below. 


a. List the deficiencies in the audit schedule. Required 
b. For each deficiency, state how the audit schedule could be improved. 
c. Prepare an improved audit schedule, using an electronic spreadsheet software pro- 

gram. Include an indication of the audit work done as well as the analysis of the client 

data (instructor’s option). 


Vandervoort Company Schedule N-| Date 
AIC # 110—Notes Receivable Prepared by JD_ 1-21-17 
12-31-16 Approved by PP 2-15-17 
MARTIN- 
APEX CO. AJAX, INC. J.J. CO. P.SMITH PETERSON TENT Co. 
Date made 6/15/15 11/21/15 11/1/15 7/26/16 5/12/15 9/3/16 
Date due 6/15/17 Demand $200/mo. $1,000/mo. Demand $400/mo. 
Paid to date None Paid 12/31/16 9/30/16 Paid 11/30/16 
Face amount $5,000 x $3,591 x $ 13,180 x $ 25,000 x $2,100 x $ 12,000 x 
Interest rate 5% 5% 5% 5% 5% 6% 
Value of security None None $ 24,000 $ 50,000 None $ 10,000 
Note Receivable: 
12/31/15 bal. $4,000 py $3,591 py $ 12,780 py $ 0 $2,100 py $ 0 
Additions 25,000 12,000 
Payments (1,000) x $(3,591) x (2,400) x (5,000) x (2,100) x (1,600) x 
3 12/31/16 bal. $3,000 $0 $ 10,380 $ 20,000 $ 0 $ 10,400 TOTALS 
2 
8 Current $3,000 = $ 2,400 $ 12,000 = $ 4,800 $22,200 tb 
£ Long-term = = 7,980 8,000 = 5,600 21,580 tb 
= Total end. bal. $3,000 @ $ 0 $ 10,380 @ $ 20,000 @ $ 0 $ 10,400 @ $43,780 tb 
7 Interest Receivable: 
2 12/31/15 bal. $ 104 py $ O py $ 24 py $ 0 $ O py $0 $128 
3 Interest earned WS) 3K OSX: Ds 468 x IMO) be 162 x 1,589 # 
5 Interest received 0 (102) x (601) x (200) x (105) x (108) x (1,116) 
8 12/31/16 bal. $ 279 $ 0 $ 0 $ 268 $ 0 $ 54 $ 601 alr 
8 x = Tested 
- py = Agrees with prior year’s audit schedules. 
2 tb = Agrees with working trial balance. 
8 # = Agrees with miscellaneous income analysis in operations w/p. 
a/r = Agrees with A/R lead schedule. 
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Ce. 7-37 (OBJECTIVE 7-4) ABC Stores is a large discount catalog department store chain. The 

om company has recently expanded from 8 to 60 stores by borrowing from several large 
financial institutions and from a public offering of common stock. A recent investiga- 
tion has disclosed that ABC materially overstated net income. This was accomplished 
by understating accounts payable and recording fictitious supplier credits that further 
reduced accounts payable. An SEC investigation was critical of the evidence gathered 
by ABC’s audit firm, John & Peter, in testing accounts payable and the supplier credits. 
The following is a description of some of the fictitious supplier credits and unrecorded 
amounts in accounts payable, as well as the audit procedures. 


1. Banana Advertising Credits — ABC had arrangements with some vendors to share 
the cost of advertising the vendor’s product. The arrangements were usually agreed 
to in advance by the vendor and supported by evidence of the placing of the advertise- 
ments. ABC created a 115-page list of approximately 1,100 vendors, supporting ad- 
vertising credits of $300,000. ABC’s auditors selected a sample of 5 of the 1,100 items 
for direct confirmation. One item was confirmed by telephone, one traced to cash 
receipts, one to a vendor credit memo for part of the amount and cash receipts for the 
rest, and one to a vendor credit memo. Two of the amounts confirmed differed from 
the amount on the list, but the auditors did not seek an explanation for the differences 
because the amounts were not material. The rest of the credits were tested by select- 
ing 20 items. Twelve of the items were supported by examining the advertisements 
placed, and eight were supported by ABC debit memos charging the vendors for the 
promotional allowances. 


2. Apple Credits — ABC created 28 fictitious credit memos totaling $257,000 from 
Apple Distributors, the main supplier of health and beauty aids to ABC. ABC’s con- 
troller initially told the auditor that the credits were for returned goods, then said 
they were a volume discount, and finally stated they were a payment so that ABC 
would continue to use Apple as a supplier. One of the John & Peter staff auditors 
concluded that a $257,000 payment to retain ABC’s business was too large to make 
economic sense. The credit memos indicated that the credits were for damaged mer- 
chandise, volume rebates, and advertising allowances. The audit firm requested a 
confirmation of the credits. In response, John Tom, the president of ABC Stores, 
placed a call to Brown Marry, the president of Apple, and handed the phone to the 
staff auditor. In fact, the call had been placed to an officer of ABC. The ABC officer, 
posing as Marry, orally confirmed the credits. ABC refused to John & Peter to obtain 
written confirmations supporting the credits. Although the staff auditor doubted 
the validity of the credits, the audit partner, Mark Jack, accepted the credits based on 
the credit, telephone confirmation of the credits, and oral representations of ABC 
officers. 


Sa 


Orange Credits—$130,000 in credits based on 35 credit memoranda from Or- 
ange, Inc., were purportedly for the return of overstocked goods from several ABC 
stores. A John & Peter staff auditor noted the size of the credit and that the credit 
memos were dated subsequent to year-end. He further noticed that a sentence on 
the credit memos from Orange had been obliterated by a felt-tip marker. When 
held to the light, the accountant could read that the marked-out sentence read, 
“Do not post until merchandise received.” The staff auditor thereafter called Har- 
old Orange, treasurer of Orange, Inc., and was informed that the $130,000 in goods 
had not been returned and the money was not owed to ABC by Orange. Marry 
advised Jack, the audit partner, that he had talked to Harold Orange. Claimed had 
been misunderstood by the staff auditor. Marry told Jack not to have anyone call 
Orange to verify the amount because of pending litigation between ABC and Or- 
ange, Inc. 
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4. Accounts Payable Accrual— John & Peters assigned a senior with experience in the 
retail area to audit accounts payable. Although ABC had poor internal control, John 
& Peter selected a sample of 50 for confirmation of the several thousand vendors who 
did business with ABC. 27 responses were received, and 21 were reconciled to ABC’s 
records. These tests indicated an unrecorded liability of approximately $290,000 when 
projected to the population of accounts payable. However, the investigation disclosed 
that ABC’s president made telephone calls to some suppliers who had received con- 
firmation requests from John & Peter and told them how to respond to the request. 

John & Peter also performed a purchases cutoff test by vouching accounts payable 
invoices received for 9 weeks after year-end. The purpose of this test was to identify 
invoices received after year-end that should have been recorded in accounts payable. 
Thirty percent of the sample ($160,000) was found to relate to the prior year, indicat- 
ing a potential unrecorded liability of approximately $500,000. The audit firm and 
ABC eventually agreed on an adjustment to increase accounts payable by $260,000. 


Identify deficiencies in the sufficiency and appropriateness of the evidence gathered inthe Required 
audit of accounts payable of ABC Stores. 


ACL PROBLEM 


7-38 (OBJECTIVE 7-4) This problem requires the use of ACL software, which can be ACD 
accessed through the textbook Web site. Information about downloading and using ACL 

and the commands used in this problem can also be found on the textbook Web site. You 

should read all of the reference material preceding the instructions about “Quick Sort” 

before locating the appropriate command to answer parts a. through f. For this problem, 

use the file labeled “Payroll_details” in the “Payroll” subfolder in the ACL_Rockwood 

project. The suggested command or other source of information needed to solve the 

problem requirement is included at the end of each question. 


a. Determine the number of payroll transactions in the file. (Read the bottom of the Required 
Payroll_detail file screen.) 

b. Determine the largest and smallest payroll transaction (gross pay) for all pay periods 
combined. (Quick Sort) 

c. Determine total gross pay for all pay periods. (Total) 

d. Determine and print gross pay by pay period. (Summarize) 

e. Recalculate net pay for each payroll transaction for all pay periods and compare it to 
the amount included in the file. (Filter) 

f. Determine if there are any gaps in the pay period sequence. If you were to identify 
gaps in the sequence, what would be your concern? (Gaps) 

g. For parts a. through f. above, identify the type of audit evidence used for each proce- 
dure. How might the auditor use this evidence in testing of payroll expense? 
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CHAPTER 


AUDIT PLANNING AND 
“MATERIALITY 


LEARNING OBJECTIVES The Fall of Enron: Did Anyone Understand Their Business? 


After studying this chapter, you should The bankruptcy of Enron Corporation, at one time the nation’s largest energy wholesaling 


be able to 
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8-1 


Discuss why adequate audit 
planning is essential. 


company, represents one of the biggest corporate collapses in American history. Despite being 
listed as No. 7 on the Fortune 500 list with a market capitalization of $75 billion before its 
collapse, Enron’s meltdown was rapid. The fall began in October 2001, when Enron officials 


8-2 Make client acceptance reported a shocking $618 million quarterly loss related to allegedly mysterious and hidden 
decisions and perform ini- related party partnerships with company insiders. Then, in early November 2001, company 
tial audte planning. officials were forced to admit that they had falsely claimed almost $600 million in earnings dating 

8-3 Gain an understanding of the back to 1997, requiring the restatement of four years of audited financial statements. By the end 
eens usess araunaustty, of 2001, the company was in bankruptcy. 

8-4 Perform preliminary ana- 
lytical procedures. Enron was created in 1985 out of a 

8-5 Apply the concept of mate- merger of two gas pipelines, and was 
riality to ae audit. a pioneer in trading natural gas and 

8-6 — Make a preliminary judg- electricity in the newly deregulated 
ee eee he 3 utilities markets. In its earlier years, 
Re ret Enron made its money from hard 

8-7 Determine performance mate- : ~ : 
ae : assets like pipelines. Enron built new 
riality during audit planning. : 

8-8 Use materiality to evaluate markets, such as trading of weather 


audit findings. 
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securities, and by the end of the 
1990s, 80% of Enron’s earnings came 
from a more vague business known 
as “wholesale energy operations and 
services.” In early 2001, speculation 
about Enron’s business dealings began to surface. One highly regarded investment banker pub- 
licly stated that no one could explain how Enron actually made money. 


In the wake of the collapse, many wondered how these issues could have gone undetected for 
so long. Many pointed to Enron’s incredibly complicated business structure and related vague 
and confusing financial statements. “What we are looking at here is an example of superbly 
complex financial reports. They didn’t have to lie. All they had to do was to obfuscate it with 
sheer complexity,’ noted John Dingell, U.S. Congressman from Michigan. Others alleged that 
the individuals running the company never even understood their business concept because it 
was too complicated. 


Apparently, the complexity and uncertainty surrounding Enron's business and financial state- 
ments fooled their auditors, too. Enron’s auditors faced a flurry of attacks, class action lawsuits, 
and a criminal indictment that ultimately led to the firm’s demise. In December 2001 congres- 
sional testimony, the audit firm’s CEO admitted that the firm’s professional judgment “turned 
out to be wrong” and that they mistakenly let Enron keep the related entities separate when 
they should have been consolidated. 


The Enron disaster continues to provide many lessons for the auditing profession. One to be 
underscored for auditors is the paramount importance of understanding the company’s busi- 
ness and industry to identify significant business risks that increase the risk of material misstate- 
ments in the financial statements. Without that understanding, it will be almost impossible to 
identify the next Enron. 


Source: Based on Bethany McLean, “Why Enron Went Bust,” Fortune (December 24, 2001), pp. 58-68. 
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As the chapter story illustrates, Enron’s complex and confusing business structure helped disguise material mis- 
statements in Enron’s financial statements for several years. Gaining an understanding of the client’s business and 
industry is one of the most important steps in audit planning. This chapter explains audit planning in detail, includ- 
ing gaining an understanding of the client’s business and industry, developing an overall audit plan and strategy, and 
making a preliminary judgment about materiality. 


Principles underlying AICPA auditing standards indicate: PLANNING 


The auditor must plan the work and properly supervise any assistants. ‘OBJECTIVE 8-10 


Discuss why adequate audit plan- 
There are three main reasons why the auditor should properly plan engagements: _ ning is essential. 


to enable the auditor to obtain sufficient appropriate evidence for the circumstances, 
to help keep audit costs reasonable, and to avoid misunderstandings with the client. 
Obtaining sufficient appropriate evidence is essential if the CPA firm is to minimize 
legal liability and maintain a good reputation in the business community. Keeping 
costs reasonable helps the firm remain competitive. Avoiding misunderstandings 
with the client is necessary for good client relations and for facilitating high-quality 
work at reasonable cost. Suppose that the auditor informs the client that the audit will 
be completed before June 30 but is unable to finish it until August because of inad- 
equate scheduling of staff. The client is likely to be upset with the CPA firm and may 
even sue for breach of contract. 

Figure 8-1 presents the eight major parts of audit planning. Each of the first seven 
parts is intended to help the auditor develop the last part, an effective and efficient 
overall audit plan and audit program. The first four parts of the planning phase of an 
audit are studied in this chapter. The last four are studied separately in later chapters. 


FIGURE 8-| Planning an Audit and Designing an Audit Approach 


Accept client and perform 
initial audit planning 


Understand the client’s 
business and industry 


Perform preliminary 
analytical procedures 


Set preliminary judgment 
of materiality and 
performance materiality 


Identify significant risks 
due to fraud or error 


Assess inherent risk 


Understand internal control 
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Before beginning our discussion, we briefly introduce three risk terms: acceptable 
audit risk, client business risk, and risk of material misstatement. These risks significantly 
influence the conduct and cost of audits. Much of the early planning of audits deals 
with obtaining information to help auditors assess these risks. 

Acceptable audit risk is a measure of how willing the auditor is to accept that 
the financial statements may be materially misstated after the audit is completed and 
an unmodified opinion has been issued. When the auditor decides on a lower accept- 
able audit risk, it means that the auditor wants to be more certain that the financial 
statements are not materially misstated. Zero risk is certainty, and a 100 percent risk is 
complete uncertainty. 

Client business risk is the risk that the entity fails to achieve its objectives or execute 
its strategies. Business risk can arise from factors such as significant changes in industry 
conditions or events such as regulatory changes, or from the setting of inappropriate 
objectives or strategies. For example, the auditor may identify declines in economic con- 
ditions that adversely affect sales and the collectibility of accounts receivable. 

The risk of material misstatement is the risk that the financial statements con- 
tain a material misstatement due to fraud or error prior to the audit. The risk of mate- 
rial misstatement is a function of the susceptibility of the financial statements (as a 
whole or in individual accounts) to misstatement, and the effectiveness of the client’s 
controls in preventing or detecting and correcting the misstatements. Continuing 
with the previous example, declining economic conditions may increase the likeli- 
hood that the company may take inappropriate actions to meet sales targets or 
understate the allowance for doubtful accounts, especially if the client does not have 
adequate controls over sales and collection of accounts receivable. 

Assessing acceptable audit risk, client business risk, and risk of material mis- 
statement is an important part of audit planning because it helps determine the audit 
procedures and amount of evidence that will need to be accumulated, as well as 
the experience level of staff needed for the engagement. For example, if the auditor 
identifies a risk of material misstatement for inventory valuation because of complex 
valuation issues, additional evidence will be accumulated in the audit of inventory 
valuation and more experienced staff will be assigned to perform testing in this area. 


ACCEPT CLIENT AND PERFORM INITIAL AUDIT PLANNING 
‘OBJECTIVE 8-200 Initial audit planning involves four things, all of which should be done early in 


; the audit: 

Make client acceptance 
r decisions and perform initial 1. The auditor decides whether to accept a new client or continue serving an exist- 
= ; ing. ing one. This determination is typically made by an experienced auditor who is in 
3 audit planning g This det t typically made by p d audit h 
g a position to make important decisions. The auditor wants to make this decision 
5 early, before incurring any significant costs that cannot be recovered. 
= 2. The auditor identifies why the client wants or needs an audit. This information is 
2 likely to affect the remaining parts of the planning process. 
7 3. To avoid misunderstandings, the auditor obtains an understanding with the client 
ne) 
F about the terms of the engagement. 
& 4. The auditor develops the overall strategy for the audit, including engagement 
5 s ‘ : a 
z staffing and any required audit specialists. 
a 
z : Even though obtaining and retaining clients is not easy in a competitive profession 
. Client Acceptance and 4 bli : fi a decid hich cli 
: eine such as public accounting, a CPA firm must use care in deciding which clients are 
acceptable. The firm’s legal and professional responsibilities are such that clients who 
8 lack integrity or argue constantly about the proper conduct of the audit and fees can 


cause more problems than they are worth. Some CPA firms refuse clients in certain 
high-risk industries, such as software technology companies or subprime lenders, 
and may even discontinue auditing existing clients in those industries. Some smaller 
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CPA firms will not do audits of publicly held clients because of the risk of litigation or 
because of costs associated with registering the audit firm with the PCAOB. An audi- 
tor is unlikely to accept a new client or continue serving an existing client if the risk 
associated with the client is greater than the risk the firm is willing to accept. 


New Client Investigation Before accepting a new client, most CPA firms investi- 
gate the company to determine its acceptability. They do this by examining, to the 
extent possible, the prospective client’s standing in the business community, financial 
stability, and relations with its previous CPA firm. For example, many CPA firms use 
considerable caution in accepting new clients in newly formed, rapidly growing busi- 
nesses. Many of these businesses fail financially and expose the CPA firm to signifi- 
cant potential liability. The CPA firm must also determine that it has the competency, 
such as industry knowledge, to accept the engagement and that the firm can satisfy all 
independence requirements. 

For prospective clients that have previously been audited by another CPA firm, 
the new (successor) auditor is required by auditing standards to communicate with the 
predecessor auditor. The purpose of the requirement is to help the successor auditor 
evaluate whether to accept the engagement. The communication may, for example, 
inform the successor auditor that the client lacks integrity or that there have been dis- 
putes over accounting principles, audit procedures, or fees. 

The burden of initiating the communication rests with the successor auditor, 
but the predecessor auditor is required to respond to the request for information. 
However, the confidentiality requirement in the Code of Professional Conduct requires 
that the predecessor auditor obtain permission from the client before the communi- 
cation can be made. In the event of unusual circumstances such as legal problems or 
disputes between the client and the predecessor, the predecessor’s response can be 
limited to stating that no information will be provided. If a client will not permit the 
communication or the predecessor will not provide a comprehensive response, the 
successor should seriously consider the desirability of accepting a prospective engage- 
ment, without considerable other investigation. 

Even when a prospective client has been audited by another CPA firm, a successor 
may make other investigations by gathering information from local attorneys, other 
CPAs, banks, and other businesses. In some cases, the auditor may even hire a profes- 
sional investigator to obtain information about the reputation and background of key 
members of management. Such extensive investigation is appropriate when there has 
been no previous auditor, when a predecessor auditor will not provide the desired 
information, or if any indication of problems arises from the communication. 

AICPA auditing standards also require that the auditor determine whether the 
financial reporting framework to be used by management to prepare the financial 
statements is appropriate. Without an appropriate financial reporting framework, 
the auditor does not have suitable criteria for auditing the financial statements. 
In making that determination, the auditor considers the nature of the entity, the 
purpose and nature of the financial statements, and whether laws or regulations 
prescribe a particular framework. Common financial reporting frameworks include 
U.S. generally accepted accounting principles and international financial reporting 
standards (IFRS). 


Continuing Clients Many CPA firms evaluate existing clients annually to determine 
whether there are reasons for not continuing to do the audit. Previous conflicts over 
the appropriate scope of the audit, the type of opinion to issue, unpaid fees, or other 
matters may cause the auditor to discontinue association. The auditor may also drop a 
client after determining the client lacks integrity. 

Even if none of the previously discussed conditions exist, the CPA firm may 
decide not to continue doing audits for a client because of excessive risk. For example, 
a CPA firm might decide that considerable risk of a regulatory conflict exists between 
a governmental agency and a client, which could result in financial failure of the client 
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and ultimately lawsuits against the CPA firm. Even if the engagement is profitable, the 
long-term risk may exceed the short-term benefits of doing the audit. 

Investigating new clients and reevaluating existing ones is an essential part of 
deciding acceptable audit risk. For example, assume that a potential client operates 
in a reasonably risky industry, that its management has a reputation of integrity, but 
that it is also known to take aggressive financial risks. If the CPA firm decides that 
acceptable audit risk is extremely low, it may choose not to accept the engagement. If 
the CPA firm concludes that acceptable audit risk is low but the client is still accept- 
able, the firm may accept the engagement but increase the fee proposed to the client. 
Audits with a low acceptable audit risk will normally result in higher audit costs, 
which should be reflected in higher audit fees. 


Two major factors affecting acceptable audit risk are the likely statement users and 
their intended uses of the statements. The auditor is likely to accumulate more evi- 
dence when the statements are to be used extensively, as is often the case for publicly 
held companies, those with extensive indebtedness, and companies that are to be sold 
in the near future. 

The most likely uses of the statements can be determined from previous experi- 
ence with the client and discussions with management. Throughout the engagement, 
the auditor may get additional information about why the client is having an audit and 
the likely uses of the financial statements. This information may affect the auditor’s 
acceptable audit risk. 


A clear understanding of the terms of the engagement should exist between the client 
and the CPA firm. Auditing standards require that auditors obtain an understanding 
with the client in an engagement letter, including the engagement’s objectives, the 
responsibilities of the auditor and management, identification of the financial report- 
ing framework used by management, reference to the expected form and content of 
the audit report, and the engagement’s limitations. For public companies, the audit 
committee is responsible for hiring the auditor as required by the Sarbanes—Oxley 
Act. The engagement letter is typically signed by management for private companies. 
An example of an engagement letter for the audit of a private company is provided in 
Figure 8-2. 

The engagement letter may also include an agreement to provide other services 
such as tax returns or management consulting allowed under the Code of Professional 
Conduct and regulatory requirements. It should also state any restrictions to be imposed 
on the auditor’s work, deadlines for completing the audit, assistance to be provided by 
the client’s personnel in obtaining records and documents, and schedules to be pre- 
pared for the auditor. It often includes an agreement on fees. The engagement letter 
also serves the purpose of informing the client that the auditor cannot guarantee that 
all acts of fraud will be discovered. 

Engagement letter information is important in planning the audit principally 
because it affects the timing of the tests and the total amount of time the audit and 
other services will take. For example, if the deadline for submitting the audit report 
is soon after the balance sheet date, a significant portion of the audit must be done 
before the end of the year. If unexpected circumstances arise or if client assistance 
is not available, arrangements must be made to extend the amount of time for the 
engagement. Client-imposed restrictions on the audit can affect the procedures per- 
formed and possibly even the type of audit opinion issued. 


After understanding the client’s reasons for the audit, the auditor should develop and 
document a preliminary audit strategy that sets the scope, timing, and direction of 
the audit and that guides the development of the audit plan. This strategy considers 
the nature of the client’s business and industry, including areas where there is greater 
risk of significant misstatements. The auditor also considers other factors such as the 


FIGURE 8-2. | Engagement Letter 


HILYER AND RIDDLE, CPAs 
Macon, Georgia 31212 
June 14, 2016 
Mr. Chuck Milsaps, President 
Babb Clothing Co. 
4604 Oakley St. 
Macon, Georgia 31212 


Dear Mr. Milsaps: 


You have requested that we audit the financial statements of Babb Clothing Co., which comprise the balance sheet as 
of December 31, 2016, and the related statements of income, changes in stockholders’ equlity, and cash flows for the year 
then ended, and the related notes to the financial statements. We are pleased to confirm our acceptance and our 
understanding of this audit engagement by means of this letter. Our audit will be conducted with the objective of our 
expressing an opinion on the financial statements. 

We will conduct our audit in accordance with auditing standards generally accepted in the United States of America 
(GAAS). Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the 
financial statements are free from material misstatement. An audit involves performing procedures to obtain audit 
evidence about the amounts and disclosures in the financial statements. The procedures selected depend on the auditor’s 
judgment, including the assessment of the risks of material misstatement of the financial statements, whether due to fraud 
or error. An audit also includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as well as evaluating the overall presentation of the financial 
statements. 

Because of the inherent limitations of an audit, together with the inherent limitations of internal control, an unavoid- 
able risk that some material misstatements may not be detected exists, even though the audit is properly planned and 
performed in accordance with GAAS. 

In making our risk assessments, we consider internal control relevant to the entity’s preparation and fair presentation 
of the financial statements in order to design audit procedures that are appropriate in the circumstances but not for the 
purpose of expressing an opinion on the effectiveness of the entity’s internal control. However, we will communicate to 
you in writing concerning any significant deficiencies or material weaknesses in internal control relevant to the audit of the 
financial statements that we have identified during the audit. 

Our audit will be conducted on the basis that management acknowledges and understands that they have responsibility 

a. for the preparation and fair presentation of the financial statements in accordance with accounting principles 

generally accepted in the United States of America; 
. for the design, implementation, and maintenance of internal control relevant to the preparation and fair pre- 
sentation of financial statements that are free of material misstatement, whether due to fraud or error; and 
. to provide us with 
i. access to all information of which management is aware that is relevant to the preparation and fair presentation 
of the financial statements such as records, documentation, and other matters; 
additional information that we may request from management for the purpose of the audit; and 
unrestricted access to persons within the entity from whom we determine it necessary to obtain audit 
evidence. 

As part of our audit process, we will request from management written confirmation concerning representations 

made to us in connection with the audit. 


As part of our engagement for the year ending December 31, 2016, we will also prepare the federal and state income 
tax returns for Babb Clothing Co. 

Our fees will be billed as work progresses and are based on the amount of time required at various levels of responsi- 
bility, plus actual out-of-pocket expenses. Invoices are payable upon presentation. We will notify you immediately of any 
circumstances we encounter that could significantly affect our initial estimate of total fees of $135,000. 

We will issue a written report upon completion of our audit of Babb Clothing Co.'s financial statements. Our report will 
be addressed to the board of directors of Babb Clothing Co. We cannot provide assurance that an unmodified opinion will be 
expressed. Circumstances may arise in which it is necessary for us to modify our opinion, add an emphasis-of-matter or 
other-matter paragraph(s), or withdraw from the engagement. 

Please sign and return the attached copy of this letter to indicate your acknowledgement of, and agreement with, the 
arrangements for our audit of the financial statements including our respective responsibilities. 


Yours very truly: 


Accepted: Alan Hs, fe 
By: Chuck Milsaps. Alan Hilyer 


Date: 6-21-16 Partner 
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number of client locations and the past effectiveness of client controls in developing a 
preliminary approach to the audit. The planned strategy helps the auditor determine 
the resources required for the engagement, including engagement staffing. 


Select Staff for Engagement The auditor must assign the appropriate staff to the 
engagement to comply with auditing standards and to promote audit efficiency. One 
of the underlying principles in auditing standards is that: 


Auditors are responsible for having appropriate competence and capabilities to perform 


the audit. 


Staff must therefore be assigned with that requirement in mind, and those 
assigned to the engagement must be knowledgeable about the client’s industry. Larger 
audit engagements are likely to require one or more partners and staff at several expe- 
rience levels. Individuals in multiple offices of the firm may be involved, including 
offices outside the United States, if the client has operations in numerous locations 
around the world. Specialists in such technical areas as statistical sampling, business 
valuation, and information technology risk assessment may also be assigned. On 
smaller audits, only one or two staff members may be needed. 

A major consideration of staffing is the need for continuity from year to year. 
Continuity helps the CPA firm maintain familiarity with the technical requirements 
and closer interpersonal relations with client personnel. An inexperienced staff assis- 
tant is likely to become the most experienced nonpartner on the engagement within 
a few years. 

Consider a computer manufacturing client with extensive inventory of comput- 
ers and computer parts where risk of material misstatement for inventory has been 
assessed as high. It is essential for the staff person doing the inventory portion of the 
audit to be experienced in auditing inventory. The auditor should also have a good 
understanding of the computer manufacturing industry. The CPA firm may decide to 
engage a specialist if no one within the firm is qualified to evaluate whether the inven- 
tory is obsolete. 


Evaluate Need for Outside Specialists Ifthe audit requires specialized knowledge, it 
may be necessary to consult a specialist. Auditing standards establish the requirements 
for selecting specialists and reviewing their work. Examples include using a diamond 
expert in evaluating the replacement cost of diamonds and an actuary for determin- 
ing the appropriateness of the recorded value of insurance loss reserves. Another 
common use of specialists is consulting with attorneys on the legal interpretation of 
contracts and titles or business valuation experts on fair value accounting treatments. 

The auditor must have a sufficient understanding of the client’s business to rec- 
ognize whether a specialist is needed. The auditor needs to evaluate the specialist’s 
professional qualifications and understand the objectives and scope of the special- 
ist’s work. The auditor should also consider the specialist’s relationship to the client, 
including circumstances that might impair the specialist’s objectivity. The use of a 
specialist does not affect the auditor’s responsibility for the audit, and the audit report 
should not refer to the specialist unless the specialist’s report results in a modification 
of the audit opinion. 


UNDERSTAND THE CLIENT’S BUSINESS AND INDUSTRY 
‘OBJECTIVE 8-300 A thorough understanding of the client’s business and industry and knowledge about 


en ore the company’s operations are essential for the auditor to conduct an adequate audit. 
peer becmees achidueny Another of the underlying principles in auditing standards states: 
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The auditor identifies and assesses risks of material misstatement, whether due to fraud or 


error, based on an understanding of the entity and its environment, including the entity’s 
internal control. 


Auditing standards require the auditor to perform risk assessment procedures 
to obtain an understanding of the client’s business and its environment to assess the 
risk of material misstatements in the financial statements, including inquiries of man- 
agement and analytical procedures. The auditor uses this information to assess client 
business risk and the risk of material misstatement. Several factors have increased the 
importance of understanding the client’s business and industry: 


Accept client and perform 
initial audit planning 
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* Recent significant declines in economic conditions around the world are likely 
to significantly increase a client’s business risks. Auditors need to understand the 
nature of the client’s business to understand the impact of major economic down- 
turns on the client’s financial statements and ability to continue as a going concern. 

* Information technology connects client companies with major customers and 
suppliers. As a result, auditors need greater knowledge about major custom- 
ers and suppliers and related risks. That connectivity also exposes the client to 
potential cyber risks that the auditor should consider. 

* Clients have expanded operations globally, often through joint ventures or stra- 
tegic alliances. 

* Information technology affects internal client processes, improving the quality 
and timeliness of accounting information. 

* The increased importance of human capital and other intangible assets has 
increased accounting complexity and the importance of management judg- 
ments and estimates. 

* Many clients may have invested in complex financial instruments, such as 
collateralized debt obligations or mortgage backed securities, which may have 
declined in value, require complex accounting treatments, and often involve 
unknown counterparties who may create unexpected financial risks for the client. 


Figure 8-3 provides an overview of the strategic approach to understanding the 
client’s business and industry. Next, we will discuss several aspects of this approach. 


FIGURE 8-3 Strategic Understanding of the Client’s Business and Industry 


Understand Client's 
Business and Industry 


Industry and 
External Environment 


Business Operations 
and Processes 


Management and 
Governance 


Objectives and 
Strategies 


Measurement and 
Performance 


Created from undip-ebooks on 2020-12-13 20:09:40. 


Understand the client’s 
business and industry 


ad ee 


Perform preliminary 
analytical procedures 


Set preliminary judgment 
of materiality and 
performance materiality 


Identify significant risks 
due to fraud or error 


Assess inherent risk 


Understand internal control 
and assess control risk 


Finalize overall audit 
strategy and audit plan 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A.268 auditing and ARantc2 SehitEsAGMDATHARIOCESEson Education Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Industry and External 
Environment 


Understand Client's 
Business and Industry 


Industry and 
External Environment 


Business Operations 
and Processes 


Management and 
Governance 


Objectives and 
Strategies 


Measurement and 
Performance 


Business Operations and 
Processes 


Understand Client's 
Business and Industry 


Industry and 
External Environment 


Business Operations 
and Processes 


Management and 
Governance 


Objectives and 
Strategies 


Measurement and 
Performance 


Created from undip-ebooks on 2020-12-13 20:09:40. 


The three primary reasons for obtaining a good understanding of the client’s industry 
and external environment are: 


1. Risks associated with specific industries may affect the auditor’s assessment of 
client business risk and acceptable audit risk—and may even influence auditors 
against accepting engagements in riskier industries, such as the financial services 
and health insurance industries. 

2. Many risks are common to all clients in certain industries. Familiarity with those 
risks aids the auditor in determining their relevance to the client when assessing 
client business risk and risk of material misstatement. Examples include potential 
inventory obsolescence in the fashion clothing industry, accounts receivable col- 
lection risk in the consumer loan industry, and loss reserve risk in the casualty 
insurance industry. 

3. Many industries have unique accounting requirements that the auditor must 
understand to evaluate whether the client’s financial statements are in accordance 
with accounting standards. For example, if the auditor is doing an audit of a city 
government, the auditor must understand governmental accounting and auditing 
requirements. Unique accounting requirements exist for construction companies, 
railroads, not-for-profit organizations, financial institutions, and many other 
organizations. 


Many auditor litigation cases (like those described in Chapter 5) result from the 
auditor’s failure to fully understand the nature of transactions in the client’s industry, 
similar to what occurred in the Enron case discussed in the opening vignette to this 
chapter. The auditor must also understand the client’s external environment, includ- 
ing such things as wide volatility in economic conditions, extent of competition, and 
regulatory requirements. For example, auditors of utility companies need more than 
an understanding of the industry’s unique regulatory accounting requirements. They 
must also know how deregulation in this industry has increased competition and 
how fluctuations in energy prices impact firm operations. To develop effective audit 
plans, auditors of all companies must have the expertise to assess external environ- 
ment risks. 


The auditor should understand factors such as major sources of revenue, key custom- 
ers and suppliers, sources of financing, and information about related parties that 
may indicate areas of increased client business risk. For example, many technology 
firms are dependent on one or a few products that may become obsolete due to new 
technologies or stronger competitors. Dependence on a few major customers may 
result in material losses from bad debts or obsolete inventory. 


Tour Client Facilities and Operations A tour of the client’s facilities is helpful in 
obtaining a better understanding of the client’s business operations because it pro- 
vides an opportunity to observe operations firsthand and to meet key personnel. By 
viewing the physical facilities, the auditor can assess physical safeguards over assets 
and interpret accounting data related to assets such as inventory in process and fac- 
tory equipment. With such first-hand knowledge, the auditor is better able to iden- 
tify risks from factors such as unused equipment or potentially unsalable inventory. 
Discussions with nonaccounting employees during the tour and throughout the audit 
also help the auditor learn more about the client’s business to aid in assessing risk. 


Identify Related Parties Transactions with related parties are important to auditors 
because accounting standards require that they be disclosed in the financial statements if 
they are material. A related party is defined in auditing standards as an affiliated com- 
pany, a principal owner of the client company, or any other party with which the client 
deals, where one of the parties can influence the management or operating policies 
of the other. A related party transaction is any transaction between the client and 
a related party. Common examples include sales or purchase transactions between a 


parent company and its subsidiary, exchanges of equipment between two companies 
owned by the same person, and loans to officers. A less common example is the exercise 
of significant management influence on an audit client by its most important customer. 

A transaction with a related party is not an arm’s-length transaction. Therefore, 
there is a risk that they may not be valued at the same amount as a transaction with an 
independent third party. For example, a company may be able to purchase inventory 
from a related company at more favorable terms than from an outside vendor. Most 
auditors assess risk of material misstatement as high for related parties and related 
party transactions, because of the accounting disclosure requirements, the lack of 
independence between the parties involved in the transactions, and the opportunities 
they may provide to engage in fraudulent financial reporting. 

Because material related party transactions must be disclosed, all related parties 
need to be identified and included in the auditor’s permanent files early in the engagement. (The 
disclosure requirements include the nature of the related party relationship; a descrip- 
tion of transactions, including dollar amounts; and amounts due from and to related 
parties.) Having all related parties included in the permanent audit files, and making 
sure all auditors on the team know who the related parties are, helps auditors identify 
undisclosed related party transactions as they do the audit. Auditing standards require 
the auditor to ask management to identify the entity’s related parties and inquire as to 
whether the entity has entered into any transactions with these related parties and, if 
so, the type and purpose of the transaction. Those standards also require the auditor to 
inquire of management and perform other procedures to obtain an understanding of 
controls that management has established to identify, authorize, and approve related 
party transactions. Auditors may also learn about related parties by reviewing SEC fil- 
ings and examining stockholders’ listings to identify principal stockholders. 

Because of the lack of independence between related parties, the Sarbanes—Oxley 
Act prohibits related party transactions that involve personal loans to any direc- 
tor or executive officer of a public company. Banks and other financial institutions, 
however, are permitted to make normal loans, such as residential mortgages, to their 
directors and officers using market rates. 


Because management establishes a company’s strategies and business processes, an 
auditor should assess management’s philosophy and operating style and its ability to 
identify and respond to risk, as these significantly influence the risk of material mis- 
statements in the financial statements. Research commissioned by the Committee 
of Sponsoring Organizations of the Treadway Commission (COSO), Fraudulent 
Financial Reporting 1998-2007, found that in over 340 instances of fraudulent financial 
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and reviewed by Harbor and Chopping failed to 
examine various related party transactions between 
Cronos, a lessor of marine cargo containers, and 
Stefan M. Palatin, its former chairman and chief execu- 
tive officer, and evidence of asset impairment that was 
not recorded on Cronos’ books and records. For ex- 
ample, the Commission found the audit was deficient 
in examining the disclosure surrounding an October 
1996 disbursement of $1.5 million which Palatin and 
others at the company claimed were placed in escrow 
for purported investment banking fees related to a 
possible strategic alliance. In fact, the funds had been 
disbursed to an account controlled by Palatin and he 
used the funds for his personal expenses and with- 
drew the rest as cash. Stewart, Harbor and Chopping 
were aware of the disclosure and management integ- 
rity issues surrounding this disbursement because the 


when the company failed to provide audit evidence for 
the transaction. Nevertheless, they decided to “audit 
around” the transaction in conducting the audit of 
Cronos’ 1996 consolidated financial statements filed 
with the Commission as part of the company’s 1996 
Form 20-F. 

The Order finds that Stewart, Harbor and 
Chopping engaged in improper professional conduct 
in connection with Moore Stephens UK's audit of 
Cronos’ 1996 financial statements, by failing to exer- 
cise due professional care and sufficient professional 
skepticism in the performance of the audit, as required 
by generally accepted auditing standards (GAAS); fail- 
ing to adequately plan the audit, as required by GAAS. 


Source: SEC News Digest. Issues 2002-127. Enforcement 
Proceeding (July 2, 2002) (www.sec.gov/news/digest/07-02.txt). 
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reporting investigated by the SEC, the chief executive officer (CEO) or chief financial 
officer (CFO) was named as being involved in perpetrating the fraud, representing 
almost 90 percent of the cases. 

A firm’s governance includes its organizational structure, as well as the activi- 
ties of the board of directors and the audit committee. An effective board of directors 
helps ensure that the company takes only appropriate risks, while the audit com- 
mittee, through oversight of financial reporting, can reduce the likelihood of overly 
aggressive accounting. To gain an understanding of the client’s governance system, 
the auditor should understand how the board and audit committee exercise oversight, 
including consideration of the company’s code of ethics and evaluation of the corpo- 
rate minutes. 


Code of Ethics Companies frequently communicate the entity’s values and ethical 
standards through policy statements and codes of conduct. In response to require- 
ments in the Sarbanes—Oxley Act, the SEC requires each public company to disclose 
whether it has adopted a code of ethics that applies to senior management, including 
the CEO, CFO, and principal accounting officer or controller. A company that has not 
adopted such a code must disclose this fact and explain why it has not done so. The 
SEC also requires companies to promptly disclose amendments and waivers to the 
code of ethics for any of those officers. Auditors should gain knowledge of the com- 
pany’s code of ethics and examine any changes and waivers of the code of conduct 
that have implications about the governance system and related integrity and ethical 
values of senior management. 


Minutes of Meetings The corporate minutes are the official record of the meetings 
of the board of directors and stockholders. They include key authorizations and sum- 
maries of the most important topics discussed at these meetings and the decisions 
made by the directors and stockholders. Common authorizations in the minutes 
include compensation of officers, new contracts and agreements, acquisitions of 
property, loans, and dividend payments. Examples of other information relevant to 
the audit include discussions about litigation, a pending issuance of stock, or a poten- 
tial merger. 

The auditor should read the minutes to obtain authorizations and other informa- 
tion that is relevant to performing the audit. This information should be included in 
the audit files with significant portions highlighted. Before the audit is completed, 
the auditor must follow up on this information to be sure that management has 
complied with actions taken by the stockholders and the board of directors. For 
example, the auditor should compare the authorizations of loans with notes payable 
to make certain that these liabilities are recorded and key terms disclosed. Litigation, 
pending stock issuances, and merger information may need to be included in foot- 
notes. Auditors often supplement their review of minutes with inquiries of the audit 
committee or full board about their awareness of events that might affect financial 
reporting. 


Strategies are approaches followed by the entity to achieve organizational objectives. 
Auditors should understand client objectives related to: 


1. Reliability of financial reporting 
2. Effectiveness and efficiency of operations 
3. Compliance with laws and regulations 


Despite management’s best efforts, business risks arise that threaten manage- 
ment’s ability to achieve its objectives. As a result, knowledge of client objectives and 
strategies helps the auditor to assess client business risk and risk of misstatements in 
the financial statements. For example, product quality can have a significant impact 
on the financial statements through lost sales and through warranty and product lia- 
bility claims. Toyota, Inc., suffered significant losses arising from business risks when 
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production problems involving gas pedals and brakes in several of its most popular 
vehicles triggered significant declines in sales and stockholder value. 

As part of understanding the client’s objectives related to compliance with laws 
and regulations, the auditor should become familiar with the terms of client contracts 
and other legal obligations. These can include such diverse items as long-term notes 
and bonds payable, stock options, pension plans, contracts with vendors for future 
delivery of supplies, government contracts for completion and delivery of manufac- 
tured products, royalty agreements, union contracts, and leases. Most contracts are of 
primary interest in individual parts of the audit and, in practice, receive special atten- 
tion during the different phases of the detailed tests. For example, the provisions of a 
pension plan will receive substantial emphasis as a part of the audit of the unfunded 
liability for pensions. The auditor should review and abstract the documents early in 
the engagement to gain a better perspective of the organization and to better assess 
risk. Later, these documents can be examined more carefully as a part of the tests of 
individual audit areas. 


A client’s performance measurement system includes key performance indicators 
that management uses to measure progress toward its objectives. These indicators go 
beyond financial statement figures, such as sales and net income, to include measures 
tailored to the client and its objectives. Such key performance indicators may include 
market share, sales per employee, unit sales growth, unique visitors to a Web site, 
same-store sales, sales by country, and sales per square foot for a retailer. 

Inherent risk of financial statement misstatements may be increased if the client 
has set unreasonable objectives or if the performance measurement system encour- 
ages aggressive accounting. For example, a company’s objective may be to obtain the 
leading market share of industry sales. If management and salespeople are compen- 
sated based on achieving this goal, there is increased incentive to record sales before 
they have been earned or record sales for nonexistent transactions. In such a situation, 
the auditor is likely to increase assessed inherent risk and the extent of testing for the 
occurrence transaction-related audit objective for sales. 

Performance measurement includes ratio analysis and benchmarking against 
key competitors. As part of understanding the client’s business, the auditor should 
perform ratio analysis or review the client’s calculations of key performance ratios. 
Performing preliminary analytical procedures is the third step in the planning process 
and is discussed next. 
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PERFORM PRELIMINARY ANALYTICAL PROCEDURES 


As first introduced in Chapter 7, auditors are required to perform preliminary analyti- 
cal procedures as part of risk assessment procedures to better understand the client's 
business and industry, and to assess client business risk. One such procedure compares 
client ratios to industry or competitor benchmarks to provide an indication of the 
company’s performance. Such preliminary tests can reveal unusual changes in ratios 
compared to prior years, or to industry averages, and help the auditor identify areas 
with increased risk of misstatements that require further attention during the audit. 
The Hillsburg Hardware Co. example is used to illustrate the use of preliminary 
analytical procedures as part of audit planning. Table 8-1 presents key financial ratios 
for Hillsburg Hardware Co., along with comparative industry information that audi- 
tors might consider during audit planning. These ratios are based on the Hillsburg 
Hardware Co. financial statements. (See the glossy insert in this textbook.) Hillsburg’s 
Annual Report to Shareholders described the company as a wholesale distributor of 
hardware equipment to independent, high-quality hardware stores in the midwest- 
ern United States. The company is a niche provider in the overall hardware industry, 
which is dominated by national chains like Home Depot and Lowe’s. Hillsburg’s 
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Cash ratio 


Quick ratio 


Current ratio 


Accounts receivable turnover 
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0.06 0.22 0.06 0.20 
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Profitability Ratios 


3.06 5.50 328) 5.60 


Gross profit percent 27.85 31.00 27.70 32.00 
Profit margin 0.05 0.07 0.05 0.08 
Return on assets 0.09 0.09 0.08 0.09 
Return on common equity 0.26 0.37 0.24 0.35 
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auditors identified potential increased competition from national chains as a specific 
client business risk. Hillsburg’s market consists of smaller, independent hardware 
stores. Increased competition could affect the sales and profitability of these custom- 
ers, likely affecting Hillsburg’s sales and the value of assets such as accounts receiv- 
able and inventory. An auditor might use ratio information to identify areas where 
Hillsburg faces increased risk of material misstatements. 

The profitability measures indicate that Hillsburg is performing fairly well, 
despite the increased competition from larger national chains. Although lower than 
the industry averages, the liquidity measures indicate that the company is in good 
financial condition, and the leverage ratios indicate additional borrowing capacity. 
Because Hillsburg’s market consists of smaller, independent hardware stores, the 
company holds more inventory and takes longer to collect receivables than the indus- 
try average. 

In identifying areas of specific risk, the auditor is likely to focus on the liquidity 
activity ratios. Inventory turnover has improved but is still lower than the industry 
average. Accounts receivable turnover has declined slightly and is lower than the 
industry average. The collectibility of accounts receivable and inventory obsolescence 
are likely to be assessed as having higher risk of material misstatement and will there- 
fore likely warrant additional attention in the current year’s audit. These areas likely 
received additional attention during the prior year’s audit as well. 

Numerous potential comparisons of current- and prior-period data extend 
beyond those normally available from industry data. For example, the percent of each 
expense category to total sales can be compared with that of previous years. Similarly, 
in a multiunit operation such as a retail chain, internal data comparisons for each unit 
can be made with previous periods. 


Auditors often prepare common-size financial statements for one or more years 
that display all items as a percent of a common base, such as sales. Common-size 
financial statements allow for comparison between companies or for the same 
company over different time periods, revealing trends and providing insight into 
how different companies compare. Common-size income statement data for the 
past three years for Hillsburg Hardware are included in Figure 8-4. The auditor 


FIGURE 8-4 


Hillsburg Hardware Common-Size Income Statement 


HILLSBURG HARDWARE Co. 
COMMON-SIZE INCOME STATEMENT 
Three Years Ending December 31, 2016 


2016 2015 2014 


Sales 
Less: Returns and allowances 


Net sales 
Cost of goods sold 


Gross profit 


Selling expense 
Salaries and commissions 
Sales payroll taxes 
Travel and entertainment 
Advertising 
Sales and promotional literature 
Sales meetings and training 
Miscellaneous sales expense 


Total selling expense 


Administration expense 
Executive and office salaries 
Administrative payroll taxes 
Travel and entertainment 
Computer maintenance and supplies 
Stationery and supplies 
Postage 
Telephone and fax 
Rent 
Legal fees and retainers 
Auditing and related services 
Depreciation 
Bad debt expense 
Insurance 
Office repairs and maintenance 
Miscellaneous office expense 
Miscellaneous general expense 


Total administrative expenses 


Earnings from operations 


Other income and expense 
Interest expense 
Gain on sale of assets 


Earnings before income taxes 
Income taxes 
Net income 
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Total selling and administrative expenses 


(000) 
Preliminary 


% of 
Net Sales 


(000) 
Audited 


% of 
Net Sales 


(000) 
Audited 


% of 
Net Sales 


$144,328 
1,242 


100.87 
0.87 


$132,421 
1,195 


100.91 
0.91 


$123,737 
1,052 


100.86 
0.86 


143,086 
103,241 


100.00 
725 


131,226 
94,876 


100.00 
72.30 


122,685 
88,724 


100.00 
7232: 


39,845 


27.85 


36,350 


27.70 


33,961 


27.68 


7,739 
1,422 
1, 110 
2,611 
322 
925 
681 


7,044 
1,298 
925. 
1,920 
425 
781 
506 


6,598 
1,198 
797 
1,790 
488 
767 
456 


14,810 


12,899 


12,094 


5,524 
682 
562 
860 
763 
244 
722 
312 
383 
303 

1,452 

35323 
123, 
844 
644 
324 


Dal 
655 
595 
832 
658 
251 
626 
312 
321 
288 

1,443 

3,394 
760 
538 
621 
242 


5,103 
633 
542 
799 
695 
236 
637 
312 
283 
265 

1,505 

3,162 
785 
458 
653 
275 


17,665 


16,757 


16,343 


32,475 


29,656 


28,437 


7,370 


2,409 
(720) 


1.68 
(0.50) 


6,694 


5,524 


5,681 
1,747 


3.97 
1.22 


$ 3,934 


2.75 


$ 


should calculate income statement account balances as a percent of sales when the 
level of sales has changed from the prior year—a likely occurrence in many busi- 
nesses. Hillsburg’s sales have increased significantly over the prior year. Note that 
accounts such as cost of goods sold, as well as sales salaries and commissions, have 
also increased significantly but are fairly consistent as a percent of sales, which we 
expect for these accounts. 

The auditor is likely to require further explanation and corroborating evidence for 
the changes in advertising, bad debt expense, and office repairs and maintenance. 


* Note that advertising expense has increased as a percent of sales. One possible 
explanation is the development of a new advertising campaign. 

¢ The dollar amount of bad debt expense has not changed significantly but has 
decreased as a percent of sales. The auditor needs to gather additional evi- 
dence to determine whether bad debt expense and the allowance for doubtful 
accounts are understated. 

* Repairs and maintenance expense has also increased. Fluctuations in this 
account are not unusual if the client has incurred unexpected repairs. The audi- 
tor should investigate major expenditures in this account to determine whether 
they include any amounts that should be capitalized as a fixed asset. 


CONCEPT CHECK 


. Identify the eight major steps in planning audits. 

2. What factors should an auditor consider prior to accepting an engagement? 

3. Explain the five elements that are part of a strategic understanding of the client’s 
business. 


MATERIALITY 
‘OBJECTIVE 8-5 


Apply the concept of materiality 
to the audit. 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A.B Auditing and ARarmbc2 Sehit¢EsAGMDETEARIOCKSGson Education Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2020-12-15 19:19:00. 


After performing preliminary analytical procedures, the fourth step in the audit 
planning process is to make a preliminary judgment about materiality for the audit 
of the financial statements. Materiality is a major consideration in determining the 
appropriate audit report to issue, and the materiality concepts discussed in this 
chapter are directly related to those we introduced in Chapter 3. Auditing standards 
define materiality as the magnitude of misstatements that individually, or when 
aggregated with other misstatements, could reasonably be expected to influence the 
economic decisions of users made on the basis of the financial statements. 

Because auditors are responsible for determining whether financial state- 
ments are materially misstated, they must, upon discovering a material misstate- 
ment, bring it to the client’s attention so that a correction can be made. If the 
client refuses to correct the statements, the auditor must issue a qualified or an 
adverse opinion, depending on the materiality of the misstatement. To make such 
determinations, auditors depend on a thorough knowledge of the application of 
materiality. 

Because materiality depends on the decisions of users who rely on the state- 
ments to make decisions, auditors must have knowledge of the likely users of the 
client’s statements and the decisions that are being made. For example, if an audi- 
tor knows that financial statements will be relied on in a buy-sell agreement for 
the entire business, the amount that the auditor considers material may be smaller 
than that for an otherwise similar audit. In practice, of course, auditors may not 
know who all the users are or what decisions they may make based on the financial 
statements. As a result, applying materiality in practice is a difficult professional 
judgment. 
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Auditors follow five closely related steps in applying materiality, as shown in 
Figure 8-5. The auditor first determines materiality for the financial statements as a 
whole. Second, the auditor determines performance materiality, which is material- 
ity for segments of the audit (classes of transactions, account balances, or disclosures) 
as shown in the first bracket of the figure. These two steps, which are part of planning, 
are our primary focus for the discussion of materiality in this chapter. Step 3 occurs 
throughout the engagement, when auditors estimate the amount of misstatements 
in each segment as they evaluate audit evidence. Near the end of the audit, during the 
engagement completion phase, auditors proceed through the final two steps. These 
latter three steps, as shown in the second bracket in Figure 8-5, are part of evaluating 
the results of audit tests. 


MATERIALITY FOR FINANCIAL STATEMENTS AS A WHOLE 


Auditing standards require auditors to decide on the combined amount of mis- 
statements in the financial statements that they would consider material early in 
the audit as they are developing the overall strategy for the audit. We refer to this as 
the preliminary judgment about materiality. It is called a preliminary judgment 
about materiality because, although a professional opinion, it may change during the 
engagement. This judgment must be documented in the audit files. 

The preliminary judgment about materiality for the financial statements as a 
whole (step 1 in Figure 8-5) is the maximum amount by which the auditor believes 
the statements could be misstated and still not affect the decisions of reasonable 
users. This judgment is one of the most important decisions the auditor makes, and it 
requires considerable professional wisdom. 

Auditors set a preliminary judgment about materiality to help plan the appropri- 
ate evidence to accumulate. The lower the dollar amount of the preliminary judgment, 
the more evidence required. Examine the financial statements of Hillsburg Hardware 


FIGURE 8-5 Steps in Applying Materiality 
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Judgment 
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Co., in the glossy insert to the textbook. What combined amount of misstatements 
will affect decisions of reasonable users? Do you believe that a $100 misstatement will 
affect users’ decisions? If so, the amount of evidence required for the audit is likely to 
be beyond that for which the management of Hillsburg Hardware is willing to pay. Do 
you believe that a $10 million misstatement will be material? Most experienced audi- 
tors believe that amount is far too large as a combined materiality amount in these 
circumstances. 

During the audit, auditors may change the preliminary judgment about material- 
ity. We refer to this as the revised judgment about materiality. Auditors are likely 
to make the revision because of changes in one of the factors used to determine the 
preliminary judgment; that is, the auditor decides that the preliminary judgment was 
too large or too small. For example, a preliminary judgment about materiality is often 
determined before year-end and is based on prior years’ financial statements or annu- 
alized interim financial statement information. The judgment may be reevaluated 
after current financial statements are available. Or, client circumstances may have 
changed due to qualitative events such as the issuance of debt, which created a new 
class of financial statement users. 


Several factors affect the auditor’s preliminary judgment about materiality for a given 
set of financial statements. The most important of these are: 


Materiality Is a Relative Rather Than an Absolute Concept A misstatement of a 
given magnitude might be material for a small company, whereas the same dollar mis- 
statement could be immaterial for a large one. This makes it impossible to establish 
dollar-value guidelines for a preliminary judgment about materiality that are appli- 
cable to all audit clients. For example, a total misstatement of $10 million would be 
extremely material for Hillsburg Hardware Co. because, as shown in their financial 
statements, total assets are about $61 million and net income before taxes is less than 
$6 million. A misstatement of the same amount is almost certainly immaterial for a 
company such as IBM, which has over $100 billion in total assets and net income of 
several billion dollars. 


Benchmarks Are Needed for Evaluating Materiality Because materiality is rela- 
tive, it is necessary to have benchmarks for establishing whether misstatements are 
material. Net income before taxes is often the primary benchmark for deciding what is 
material for profit-oriented businesses because it is regarded as a critical item of infor- 
mation for users. Some firms use a different primary benchmark, because net income 
often fluctuates considerably from year to year and therefore does not provide a 
stable benchmark, or when the entity is a not-for-profit organization. Other primary 
benchmarks include net sales, gross profit, and total or net assets. After establishing 
a primary benchmark, auditors should also decide whether the misstatements could 
materially affect the reasonableness of other benchmarks such as current assets, total 
assets, current liabilities, and owners’ equity. Auditing standards require the auditor to 
document in the audit files the preliminary judgment about materiality and the basis 
used to determine it. 

Assume that for a given company, an auditor decides that a misstatement of 
income before taxes of $100,000 or more would be material, but that a misstatement 
would need to be $250,000 or more to be material for current assets. It is not appro- 
priate for the auditor to use a preliminary judgment about materiality of $250,000 
for both income before taxes and current assets. Instead, the auditor must plan to 
find all misstatements affecting income before taxes that exceed the preliminary 
judgment about materiality of $100,000. Because almost all misstatements affect 
both the income statement and balance sheet, the auditor uses a primary prelimi- 
nary materiality level of $100,000 for most tests. The only other misstatements that 
will affect current assets are misclassifications within balance sheet accounts, such 
as misclassifying a long-term asset as a current one. So, in addition to the primary 


preliminary judgment about materiality of $100,000, the auditor will also need to 
plan the audit with the $250,000 preliminary judgment about materiality for mis- 
classifications of current assets. 


Qualitative Factors Also Affect Materiality Certain types of misstatements are 
likely to be more important to users than others, even if the dollar amounts are the 
same. For example: 


¢ Amounts involving fraud are usually considered more important than uninten- 
tional errors of equal dollar amounts because fraud reflects on the honesty and 
reliability of the management or other personnel involved. For example, most 
users consider an intentional misstatement of inventory more important than 
clerical errors in inventory of the same dollar amount. 

¢ Misstatements that are otherwise minor may be material if there are possible 
consequences arising from contractual obligations. Say that net working 
capital included in the financial statements is only a few hundred dollars 
more than the required minimum in a loan agreement. If the correct net 
working capital were less than the required minimum, putting the loan in 
default, the current and noncurrent liability classifications would be materi- 
ally affected. 

* Misstatements that are otherwise immaterial may be material if they affect a 
trend in earnings. For example, if reported income has increased three percent 
annually for the past five years but income for the current year has declined 
one percent, that change may be material. Similarly, a misstatement that would 
cause a loss to be reported as a profit may be of concern. 


Accounting and auditing standards do not provide specific materiality guidelines to 
practitioners. The concern is that such guidelines might be applied without consider- 
ing all the complexities that should affect the auditor’s final decision. However, in this 
chapter, we do provide guidelines to illustrate the application of materiality. These are 
intended only to help you better understand the concept of applying materiality in 
practice. The guidelines are stated in Figure 8-6 (p. 262) in the form of policy guide- 
lines of a CPA firm. Notice that the guidelines are formulas using one or more bench- 
marks and a range of percentages. The application of guidelines, such as the ones we 
present here, requires considerable professional judgment. 


Illustrative Guidelines 


Using the illustrative guidelines in Figure 8-6, let’s examine a preliminary judgment 


about materiality for Hillsburg Hardware Co. The guidelines are as follows: Ppplcation to 


Hillsburg Hardware 


Preliminary Judgment About Materiality (Rounded, in Thousands) 


Minimum Maximum 
Percentage Dollar Amount Percentage Dollar Amount 
Earnings from 3 $221 6 $442 
operations 
Current assets 3 1,531 6 3,062 
Total assets 1 614 3 1,841 
Current liabilities 3 396 6 7Q3 


If the auditor for Hillsburg Hardware decides that the general guidelines are 
reasonable, the first step is to evaluate whether any qualitative factors significantly 
affect the materiality judgment. Assuming no qualitative factors exist, if the auditor 
concludes at the end of the audit that combined misstatements of operating income 
before taxes are less than $221,000, the statements will be considered fairly stated. If 
the combined misstatements exceed $442,000, the statements will not be considered 
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FIGURE 8-6 | Illustrative Materiality Guidelines 


BERGER AND ANTHONY, CPAs 
Gary, Indiana 46405 


POLICY STATEMENT Charles G. Berger 
No. 321IC Joe Anthony 
Title: Materiality Guidelines 


Professional judgment is to be used at all times in setting and applying materiality guidelines. As a general 
guideline, the following policies are to be applied: 
|. The combined total of misstatements in the financial statements exceeding 6 percent is 
normally considered material. A combined total of less than 3 percent is presumed to be immaterial 
in the absence of qualitative factors. Combined misstatements between 3 percent and 6 percent 
require the greatest amount of professional judgment to determine their materiality. 

. The 3 percent to 6 percent must be measured in relation to the appropriate benchmark. Many 
times there is more than one benchmark to which misstatements should be compared. The 
following guides are recommended in selecting the appropriate benchmark: 

a. Income statement. Combined misstatements in the income statement should ordinarily 
be measured at 3 percent to 6 percent of operating income before taxes. A guideline of 3 perc- 
ent to 6 percent may be inappropriate in a year in which income is unusually large or small. 
When operating income in a given year is not considered representative, it is desirable to 
substitute as a benchmark a more representative income measure. For example, average 
operating income for a 3-year period may be used as the benchmark. 

. Balance sheet. Combined misstatements in the balance sheet should originally be 
evaluated for current assets, current liabilities, and total assets. For current assets and current 
liabilities, the guidelines should be between 3 percent and 6 percent, applied in the same way as 
for the income statement. For total assets, the guidelines should be between | percent and 3 
percent, applied in the same way as for the income statement. 

. Qualitative factors should be carefully evaluated on all audits. In many instances, they are 
more important than the guidelines applied to the income statement and balance sheet. The 
intended uses of the financial statements and the nature of the information in the statements, 
including footnotes, must be carefully evaluated. 


fairly stated. If the misstatements are between $221,000 and $442,000, a more careful 
consideration of all facts will be required. The auditor then applies the same process to 
the other three bases. 


DETERMINE PERFORMANCE MATERIALITY 


Determine performance 
materiality during audit 
planning. 
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Performance materiality is defined as the amount(s) set by the auditor at less than 
materiality for the financial statements as a whole to reduce to an appropriately low 
level the probability that the aggregate of uncorrected and undetected misstatements 
exceeds materiality for the financial statements as a whole. Determining performance 
materiality (step 2 in Figure 8-5 on p. 259) is necessary because auditors accumulate 
evidence by segments rather than for the financial statements as a whole, and the 
level of performance materiality helps them decide the appropriate audit evidence to 
accumulate. Performance materiality is inversely related to the amount of evidence 
an auditor will accumulate. For an accounts receivable balance of $1,000,000, for 
example, the auditor should accumulate more evidence if a misstatement of $50,000 
is considered material than if $300,000 were considered material. However, if auditors 
assigned the same level of materiality to each segment of the audit that was assigned 
for the overall financial statements, there would likely be unidentified misstatements 
that exceed materiality for the financial statements as a whole. 

Many auditors set performance materiality for most tests as a standard percent- 
age of the preliminary judgment about materiality for the financial statements as a 
whole. Performance materiality is commonly set at 50-75% of overall materiality. 
However, performance materiality can vary for different classes of transactions, 
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account balances, or disclosures, especially if there is a focus on a particular area. For 
example, users of financial statements might expect disclosures of related party trans- 
actions involving the CEO or the purchase price of a newly acquired subsidiary to be 
more precise, and therefore auditors might set a lower materiality level in these audit 
areas. In addition, overall audit assurance and the cost of audit evidence can be consid- 
ered when determining performance materiality, as discussed further below. 

We refer to the process of determining performance materiality as the allocation 
of the preliminary judgment about materiality to segments in our discussion that 
follows. If auditors do not use a standard percentage and consider audit assurance and 
the cost of audit evidence in determining performance materiality, most practitioners 
allocate materiality to balance sheet rather than income statement accounts, because 
most income statement misstatements have an equal effect on the balance sheet due 
to the nature of double-entry accounting. For example, a $20,000 overstatement of 
accounts receivable is also a $20,000 overstatement of sales. Because most audit pro- 
cedures focus on balance sheet accounts, materiality is usually allocated only to bal- 
ance sheet accounts. 

The determination of performance materiality is based on professional judgment 
and reflects the amount of misstatement an auditor is willing to accept in a particular 
segment. For example, if an auditor decides to allocate $100,000 of a total preliminary 
judgment about materiality of $200,000 to accounts receivable, this means the audi- 
tor is willing to consider accounts receivable fairly stated if it is misstated by $100,000 
or less. PCAOB auditing standards refer to this amount as tolerable misstatement, 
whereas AICPA standards define tolerable misstatement as the application of perfor- 
mance materiality to a particular sampling procedure. We use the term performance 
materiality rather than tolerable misstatement throughout this chapter to be consis- 
tent with AICPA and IAASB standards. 

Auditors face three major difficulties in allocating materiality to balance sheet 
accounts: 


1. Auditors expect certain accounts to have more misstatements than others. 
2. Both overstatements and understatements must be considered. 
3. Relative audit costs affect the allocation. 


All three of these difficulties are considered in the allocation in Figure 8-7 (p. 264). 
It is worth keeping in mind that at the end of the audit, the auditor must combine 
all actual and estimated misstatements and compare them to the preliminary judg- 
ment about materiality. In determining performance materiality levels, the auditor is 
attempting to do the audit as efficiently as possible. 


Figure 8-7 illustrates the allocation approach used to establish different performance 
materiality levels across segments of the financial statements for the audit of Hillsburg 
Hardware Co. It summarizes the balance sheet, combining certain accounts, and 
shows the allocation of total materiality of $442,000 (six percent of earnings from 
operations). The allocation approach uses judgment in the allocation, subject to the 
following two arbitrary requirements established by Berger and Anthony, CPAs: 


* Performance materiality for any account cannot exceed 60 percent of the pre- 
liminary judgment (60 percent of $442,000 = $265,000, rounded). 

* The sum of all performance materiality levels cannot exceed twice the prelimi- 
nary judgment about materiality (2 $442,000 = $884,000). 


The first requirement keeps the auditor from allocating all of preliminary mate- 
riality to one account. If, for example, all of the preliminary judgment of $442,000 is 
allocated to trade accounts receivable, a $442,000 misstatement in that account will 
be acceptable. However, it may not be acceptable to have such a large misstatement 
in one account, and even if it is acceptable, it does not allow for any misstatements in 
other accounts. 
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Allocation Illustrated 


FIGURE 8-7 Performance Materiality Levels for Hillsburg Hardware Co. 


Balance 12-31-16 (in Thousands) Performance Materiality (in Thousands) 


Cash 

Trade accounts receivable (net) 
Inventories 

Other current assets 

Property, plant, and equipment 


Total assets 


Trade accounts payable 

Notes payable—total 

Accrued payroll and payroll tax 

Accrued interest and dividends 
payable 

Other liabilities 

Capital stock and capital in excess 
of par 


Retained earnings 


Total liabilities and equity 


$ 828 $ 6(a) 
18,957 265 (b) 
29,865 265 (b) 

1,377 60 (c) 
10,340 48 (d) 
$61,367 

$ 4,720 90 (e) 
28,300 6 (a) 

1,470 60 (c) 
2,050 6 (a) 


2,364 72 (c) 
8,500 6 (a) 


13,963 NA (f) 


$61,367 $884 (2 x $442) 


NA = Not applicable. 


(a) Small performance materiality because account can be completely audited at low cost and no misstatements are expected. 


(b) Large performance materiality because account is large and requires extensive sampling to audit the account. 


(c) Large performance materiality as a percent of account because account can be verified at extremely low cost, probably with substantive analytical procedures. 


(d) Small performance materiality as a percent of account balance because most of the balance is in land and buildings, which is unchanged from the prior year and need not 


be audited further this year. 


(e) Moderately large performance materiality because a relatively large number of misstatements are expected. 


(f) Not applicable—retained earnings is a residual account that is affected by the net amount of the misstatements in the other accounts. 
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There are two reasons for the second requirement, permitting the sum of perfor- 
mance materiality to exceed overall materiality: 


¢ It is unlikely that all accounts will be misstated by the full amount of perfor- 
mance materiality. If, for example, other current assets have a performance 
materiality of $100,000 but no misstatements are found in auditing those 
accounts, it means that the auditor, after the fact, could have allocated zero ora 
small performance materiality to other current assets. It is common for auditors 
to find fewer misstatements than performance materiality. 

¢ Some accounts are likely to be overstated, whereas others are likely to be 
understated, resulting in a net amount that is likely to be less than the prelimi- 
nary judgment. 


Notice in the allocation that the auditor is concerned about the combined effect 
on operating income of the misstatement of each balance sheet account. An overstate- 
ment of an asset account will therefore have the same effect on the income statement 
as an understatement of a liability account. In contrast, a misclassification in the bal- 
ance sheet, such as a classification of a note payable as an account payable, will have 
no effect on operating income. Therefore, the materiality of items not affecting the 
income statement must be considered separately. 

Figure 8-7 also includes the rationale followed in deciding performance mate- 
riality for each account. For example, a small amount of performance materiality 
was assigned to notes payable, even though it is as large as inventories. If $132,500 
had been assigned to each of those two accounts, more evidence would have been 


required in inventories, but the confirmation of the balance in notes payable would 
still have been necessary. It was therefore more efficient to allocate $265,000 to 
inventories and a small amount to notes payable. Similarly, $60,000 was assigned to 
other current assets and to accrued payroll and payroll tax, both of which are large 
compared with the recorded account balance. This was done because these accounts 
can be verified within $60,000 by using only substantive analytical procedures, 
which are lower cost. If performance materiality were set lower, more costly audit 
procedures such as inspection and confirmation would be necessary. 

In practice, it is often difficult to predict in advance which accounts are most 
likely to be misstated and whether misstatements are likely to be overstatements or 
understatements. Similarly, the relative costs of auditing different account balances 
often cannot be determined. It is therefore a difficult professional judgment to allo- 
cate the preliminary judgment about materiality to accounts. Accordingly, many 
accounting firms have developed rigorous guidelines and sophisticated methods for 
doing so. These guidelines also help ensure the auditor appropriately documents the 
overall materiality level and performance materiality levels and the factors considered 
in determining those amounts in the audit files. 

To summarize, the purpose of allocating the preliminary judgment about 
materiality to balance sheet accounts is to help the auditor decide the appropriate 
evidence to accumulate for each account on both the balance sheet and income 
statement. An aim of the allocation is to minimize audit costs without sacrific- 
ing audit quality. Regardless of how the allocation is done, when the audit is 
completed, the auditor must be confident that the combined misstatements in 
all accounts are less than or equal to the preliminary (or revised) judgment about 
materiality. 


ESTIMATE MISSTATEMENT AND COMPARE WITH 
PRELIMINARY JUDGMENT 


The first two steps in applying materiality involve planning (see Figure 8-5 on p. 259) ‘OBJECTIVE 8-8 


and are our primary concern in this chapter. The last three steps result from perform- ‘4... materialeve evaluate audie 
ing audit tests. These steps are introduced here and discussed in more detail in subse- findings. 
quent chapters. 

When auditors perform audit procedures for each segment of the audit, they 
document all misstatements found. Misstatements in an account can be of two 
types: known misstatements and likely misstatements. Known misstatements 
are those where the auditor can determine the amount of the misstatement in the 
account. For example, when auditing property, plant, and equipment, the auditor 
may identify capitalized leased equipment that should be expensed because it is an 
operating lease. There are two types of likely misstatements. The first are misstate- 
ments that arise from differences between management’s and the auditor’s judgment 
about estimates of account balances. Examples are differences in the estimate for the 
allowance for uncollectible accounts or for warranty liabilities. The second are pro- 
jections of misstatements based on the auditor’s tests of a sample from a population. 
For example, assume the auditor finds six client misstatements in a sample of 200 
in testing inventory costs. The auditor uses these misstatements to estimate the total 
likely misstatements in inventory (step 3). The total is called an estimate or a “projec- 
tion” or “extrapolation” because only a sample, rather than the entire population, 
was audited. The projected misstatement amounts for each account are combined on 
the worksheet (step 4), and then the combined likely misstatement is compared with 
materiality (step 5). 

Table 8-2 illustrates the last three steps in applying materiality. For simplicity, 
only three accounts are included. The misstatement in cash of $2,000 is a known 
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misstatement related to unrecorded bank service charges detected by the auditor. 
Unlike for cash, the misstatements for accounts receivable and inventory are based 
on samples. The auditor calculates likely misstatements for accounts receivable and 
inventory using known misstatements detected in those samples. To illustrate the 
calculation, assume that in auditing inventory the auditor found $3,500 of net over- 
statement amounts in a sample of $50,000 of the total population of $450,000. The 
$3,500 identified misstatement is a known misstatement. To calculate the estimate 
of the likely misstatements for the total population of $450,000, the auditor makes a 
direct projection of the known misstatement from the sample to the population and 
adds an estimated allowance for sampling risk. The calculation of the direct projection 
estimate of misstatement is: 


Direct projection 


Net misstatements in the sample ($3,500) Total recorded estimate of 
Xx population value = : 
Total sampled ($50,000) ($450,000) misstatement 
, ($31,500) 


(Note that the direct projection of likely misstatement for accounts receivable of 
$12,000 is not illustrated.) 

The allowance for sampling risk results because the auditor has sampled only 
a portion of the population and there is a risk that the sample does not accurately 
represent the population. (We'll discuss this in more detail in Chapters 15 and 17.) 
In this simplified example, we'll assume the estimated allowance for sampling risk 
is 50 percent of the direct projection of the misstatement amounts for the accounts 
where sampling was used (accounts receivable and inventory). There is no allowance 
for sampling risk for cash because the total amount of misstatement is known, not 
estimated. 

In combining the misstatements in Table 8-2, we can observe that the known mis- 
statements and direct projection of likely misstatements for the three accounts adds 
to $45,500. However, the total allowance for sampling risk is less than the sum of the 
individual sampling risk amounts. This is because the allowance for sampling risk 
represents the maximum misstatement in account details not audited. It is unlikely 
that this maximum misstatement amount exists in all accounts subjected to sampling. 

Table 8-2 shows that total estimated likely misstatement of $62,300 exceeds the 
preliminary judgment about materiality of $50,000. The major area of difficulty is 
inventory, where estimated misstatement including allowance for sampling risk of 
$47,250 is significantly greater than performance materiality of $36,000. Because the 
estimated combined misstatement exceeds the preliminary judgment, the financial 
statements are not acceptable. The auditor can either determine whether the esti- 
mated likely misstatement actually exceeds $50,000 by performing additional audit 


Illustration of Comparison of Estimated Total Misstatement to 


3 
2 
B 
2 
< 
g TABLE 8-2 ere TE 
7 Preliminary Judgment About Materiality 
3 Performance Known Misstatement Allowance for 
3 Account Materiality and Direct Projection Sampling Risk 
Ww 
8 Cash $ 4,000 $ 2,000 $ NA $ 2,000 
o 
é Accounts receivable 20,000 12,000 6,000 18,000 
io} 
8 Inventory 36,000 31,500 15,750 47,250 
= Total estimated misstatement amount $45,500 $16,800 $62,300 
jo] 
(Ss) 
Preliminary judgment about materiality $50,000 
NA = Not applicable. 
Cash audited 100 percent. 
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procedures or require the client to make an adjustment for estimated misstatements. 
If the auditor decides to perform additional audit procedures, they will be concen- 
trated in the inventory area. 

If the estimated net overstatement amount for inventory had been $28,000 
($18,000 plus $10,000 allowance for sampling risk), the auditor probably would not 
have needed to expand audit tests because it would have met both the tests of perfor- 
mance materiality ($36,000) and the preliminary judgment about materiality ($2,000 
+ $18,000 + $28,000 = $48,000 < $50,000). In fact, the auditor would have had some 
leeway with that amount because the results of cash and accounts receivable proce- 
dures indicate that those accounts are within their performance materiality limits. 
If the auditor approaches the audit of the accounts in a sequential manner, the find- 
ings of the audit of accounts audited earlier can be used to revise the performance 
materiality established for accounts audited later. In the illustration, if the auditor had 
audited cash and accounts receivable before inventories, performance materiality for 
inventories could have been increased. 


CONCEPT CHECK 


|. What is meant by setting a preliminary judgment about materiality? Identify the most 
important factors affecting the preliminary judgment. 

2. Distinguish between the terms performance materiality and preliminary judgment about 
materiality. How are they related to each other? 

3. Explain the difference between known and likely misstatements. Assume the auditor 
tests a sample of $100,000 of inventory and finds misstatements totaling $5,000. What 
is the likely misstatement if the account balance is $500,000? 


SUMMARY 


A major purpose of audit planning is to gain an understanding of the client’s business and 
industry, which is used to assess acceptable audit risk, client business risk, and the risk of 
material misstatements in the financial statements. Figure 8-8 (p. 268) summarizes the 
four major parts of audit planning discussed in this chapter and the key components of 
each part, with a brief illustration of how a CPA firm applied each component to a con- 
tinuing client, Hillsburg Hardware Co. 

There are four additional parts of audit planning that are discussed in subsequent 
chapters. The four subsequent parts are: 


* Identify significant risks due to fraud or error (Chapters 9 and 10) 

* Assess inherent risk (Chapter 9) 

* Understand internal control and assess control risk (Chapters 11 and 12) 
* Finalize the overall audit plan and audit program (Chapter 13) 


ESSENTIAL TERMS 
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Acceptable audit risk—a measure of 
how willing the auditor is to accept that 
the financial statements may be materially 
misstated after the audit is completed and 
an unmodified opinion has been issued 


Allocation of the preliminary judg- 
ment about materiality—the process of 
assigning to each balance sheet account 
the misstatement amount considered to 
be material for that account based on the 
auditor’s preliminary judgment 


Created from undip-ebooks on 2020-12-15 19:19:00. 


Audit strategy—overall approach to the 
audit that considers the nature of the cli- 
ent, risk of significant misstatements, and 
other factors such as the number of client 
locations and past effectiveness of client 
controls 


Client business risk—the risk that the cli- 
ent will fail to achieve its objectives related to 
(1) reliability of financial reporting, (2) effec- 
tiveness and efficiency of operations, and 
(3) compliance with laws and regulations 


Key Parts of Planning: Accept Client and Perform Initial Planning, 
Understand the Client’s Business and Industry, Perform Preliminary 
Analytical Procedures, and Set Preliminary Judgment About Materiality 
and Performance Materiality Applied to Hillsburg Hardware Co. 


FIGURE 8-8 


MAJOR PART 
OF PLANNING 


Accept client 
and perform 
initial planning 


Understand the 
client's business 
and industry 


Perform 
preliminary 
analytical 
procedures 


Set preliminary 
judgment of 
materiality and 
performance 
materiality 
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SUBPARTS OF 
PLANNING 


APPLICATION TO HILLSBURG HARDWARE CO. 


New client 
acceptance 
and continuance 


Hillsburg is a continuing audit client. No circumstances 
were identified in the continuation review to cause 
discontinuance. 


Identify client’s 
reasons for audit 


There are two primary reasons. Company is publicly 
traded and audit is required by bank due to large notes 
payable outstanding. 


Obtain an 
understanding 
with the client 


Obtained an engagement letter before starting field 
work. 


Staff the 
engagement 


Partner—Joe Anthony 

Manager—Leslie Franklin 

Senior—Fran Moore 

Assistant—Mitch Bray and one person to be named later 


Understand client's 
industry and external 
environment 


Anthony and Franklin subscribe to industry publications. 
Moore reviewed industry data and reports in several 
databases and online sources. 


Understand client's 
operations, strategies, 
and performance 
system 


See Figure 8-3 (p. 251). Moore discussed with CEO and 
CFO, read minutes, and reviewed other key reports and 
performance indicators. 


Moore compared 12-31-16 unaudited balances to the 

prior year. She calculated key ratios and compared them 
with prior years and industry averages as illustrated in 
Table 8-| (p. 256). She also computed common-size income 
statements in Figure 8-4 (p. 257). All significant differences 
were identified for follow-up. 


Set preliminary 
judgment of 
materiality 


Moore used the materiality guidelines 
in Figure 8-6 (p. 262) to make a preliminary 
judgment of materiality of $442,000. 


Determine 
performance 
materiality 


Moore used the preliminary judgment to 
determine performance materiality as 
illustrated in Figure 8-7 (p. 264). 
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Corporate minutes—the official record 
of the meetings of a corporation’s board 
of directors and stockholders, in which 
corporate issues such as the declaration of 
dividends and the approval of contracts are 
documented 


Engagement letter—an agreement be- 
tween the CPA firm and the client as to the 
terms of the engagement for the conduct of 
the audit and related services 


Initial audit planning— involves deciding 
whether to accept or continue doing the 
audit for the client, identifying the client’s 
reasons for the audit, obtaining an engage- 
ment letter, and developing an audit strategy 


Known misstatements—specific mis- 
statements in a class of transactions or 
account balance identified during the audit 


Likely misstatements—misstatements 
that arise either from differences between 
management’s and the auditor’s judgment 
about estimates of account balances or from 
projections of misstatements based on the 
auditor’s test of a sample from a population 


Materiality—the magnitude of an omis- 
sion or misstatement of accounting infor- 
mation that, in the light of surrounding 
circumstances, makes it probable that the 
judgment of a reasonable person rely- 
ing on the information would have been 
changed or influenced by the omission or 
misstatement 


Performance materiality—the material- 
ity amount(s) for segments of the audit, set 
by the auditor at less than materiality for 
the financial statements as a whole 


Preliminary judgment about material- 
ity—the maximum amount by which the 
auditor believes that the statements could 
be misstated and still not affect the deci- 
sions of reasonable users; used in audit 
planning 

Related party—affiliated company, prin- 
cipal owner of the client company, or any 
other party with which the client deals, 
where one of the parties can influence the 
management or operating policies of the 
other 


Related party transaction—any transac- 
tion between the client and a related party 


Revised judgment about materiality— 
a change in the auditor’s preliminary judg- 
ment made when the auditor determines 
that the preliminary judgment was too 
large or too small 


Risk assessment procedures—audit 
procedures performed to obtain an under- 
standing of the entity and its environment, 
including the entity's internal control, to 
identify and assess the risks of material 
misstatement 


Risk of material misstatement—the risk 
that the financial statements are materially 
misstated prior to the audit 


Sampling risk—results because the audi- 
tor has sampled only a portion of the pop- 
ulation 


Tolerable misstatement—the application 
of performance materiality to a sampling 
procedure (AICPA standards) or the materi- 
ality allocated to any given account balance 
(PCAOB standards) 


REVIEW QUESTIONS 


8-1 (OBJECTIVE 8-1) What are the benefits derived from planning audits? 
8-2 (OBJECTIVE 8-2) What are the responsibilities of the successor and predecessor auditors 


when a company is changing auditors? 


8-3 (OBJECTIVE 8-2) Identify client’s reasons for audit. 
8-4 (OBJECTIVE 8-2) Who is considered the client when auditing public companies? 
8-5 (OBJECTIVE 8-3) Identify the strategic understanding of the client’s business and 


Industry. 


8-6 (OBJECTIVE 8-3) Discuss the code of ethics during the management and governance. 
8-7 (OBJECTIVE 8-3) An auditor often tries to acquire background knowledge of the client’s 
industry as an aid to audit work. How does the acquisition of this knowledge aid the audi- 
tor in distinguishing between obsolete and current inventory? 
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8-8 (OBJECTIVE 8-3) Define what is meant by a related party. What are the auditor’s respon- 
sibilities for related parties and related party transactions? 


8-9 (OBJECTIVE 8-3) Which types of loans to executives are permitted by the Sarbanes— 
Oxley Act? 


8-10 (OBJECTIVE 8-3) In recent years the global economy experienced recession levels 
unprecedented since the Great Depression, and the instability of the Euro continues to 
cause volatility in stock and bond markets. Why might it be important for you to consider 
current economic events as part of planning an audit? 


8-11 (OBJECTIVE 8-3) Discuss factors such as major sources of revenue, key customers and 
suppliers, sources of financing, and information about related parties that may indicate 
areas of increased client business risk during business operations and processes. 


8-12 (OBJECTIVE 8-3) Identify two types of information in the client’s minutes of the board 
of directors meetings that are likely to be relevant to the auditor. Explain why it is impor- 
tant to read the minutes early in the engagement. 


8-13 (OBJECTIVE 8-3) Identify the three primary reasons for obtaining a good understand 
of the client’s industry and external environment. 


8-14 (OBJECTIVE 8-3) What is the purpose of the client’s performance measurement sys- 
tem? How might that system be useful to the auditor? Give examples of key performance 
indicators for the following businesses: (1) a chain of retail clothing stores; (2) an Internet 
portal; (3) a hotel chain. 


8-15 (OBJECTIVE 8-4) Gale Gordon, CPA, has found ratio and trend analysis relatively use- 
less as a tool in conducting audits. For several engagements, he computed the industry 
ratios included in publications by Standard and Poor’s and compared them with indus- 
try standards. For most engagements, the client’s business was significantly different 
from the industry data in the publication, and the client automatically explained away 
any discrepancies by attributing them to the unique nature of its operations. In cases 
in which the client had more than one branch in different industries, Gordon found the 
ratio analysis to be no help at all. How can Gordon improve the quality of his analytical 
procedures? 


8-16 (OBJECTIVE 8-4) Your client, Harper Company, has a contractual commitment as a part 
of a bond indenture to maintain a current ratio of 2.0. If the ratio falls below that level on 
the balance sheet date, the entire bond becomes payable immediately. In the current year, 
the client’s financial statements show that the ratio has dropped from 2.6 to 2.05 over the 
past year. How should this situation affect your audit plan? 


8-17 (OBJECTIVE 8-5) Define the meaning of the term materiality as it is used in accounting 
and auditing. What is the relationship between materiality and the phrase obtain reasonable 
assurance used in the auditor’s report? 


8-18 (OBJECTIVES 8-5, 8-6) Explain why materiality is important but difficult to apply in 
practice. 


8-19 (OBJECTIVE 8-6) What is meant by using benchmarks for setting a preliminary judg- 
ment about materiality? How will those benchmarks differ for the audit of a manufactur- 
ing company and a government unit such as a school district? 


8-20 (OBJECTIVE 8-6) Assume that Rosanne Madden, CPA, is using 5% of net income before 
taxes, current assets, or current liabilities as her major guidelines for evaluating material- 
ity. What qualitative factors should she also consider in deciding whether misstatements 
may be material? 


8-21 (OBJECTIVE 8-6) Identify the revised judgment about materiality. 


8-22 (OBJECTIVE 8-7) Assume a company with the following balance sheet accounts: 
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You are concerned only about overstatements of owner’s equity. Set performance materi- 
ality for the three relevant accounts such that the preliminary judgment about materiality 
does not exceed $5,000. Justify your answer. 


Account Amount Account Amount 
Cash $10,000 Long-term loans $30,000 
Fixed assets 60,000 M. Johnson, proprietor 40,000 

$70,000 $70,000 


8-23 (OBJECTIVE 8-7) Provide two examples of when an auditor might set a lower level of per- 
formance materiality for a particular class of transactions, account balance, or disclosure. 


8-24 (OBJECTIVE 8-8) Assume materiality for the financial statements as a whole is $100,000 
and performance materiality for accounts receivable is set at $40,000. If the auditor finds 
one receivable that is overstated by $55,000, what should the auditor do? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


8-25 (OBJECTIVES 8-1, 8-3, 8-4) The following questions concern the planning of the engage- 
ment. Select the best response. 


a. Which of the following will most likely indicate the existence of related parties? 
(1) Writing down obsolete inventory prior to year end 
(2) Failing to correct deficiencies in the client’s internal control 
(3) An unexplained increase in gross margin 
(4) Borrowing money at a rate significantly below the market rate 


b. Which of the following is least likely to be included in the auditor’s engagement letter? 
(1) Details about the preliminary audit strategy 
(2) Overview of the objectives of the engagement 
(3) Statement that management is responsible for the financial statements 
(4) Description of the level of assurance obtained when conducting the audit 


c. Analytical procedures used in planning an audit should focus on identifying 
(1) material weaknesses in internal control. 
(2) the predictability of financial data from individual transactions. 
(3) the various assertions that are embodied in the financial statements. 
(4) areas that may represent specific risks relevant to the audit. 


8-26 (OBJECTIVE 8-2) The following questions pertain to client acceptance. Choose the best 
response. 


a. When approached to perform an audit for the first time, the CPA should make inqui- 
ries of the predecessor auditor. This is a necessary procedure because the predecessor 
may be able to provide the successor with information that will assist the successor in 
determining whether 
(1) the predecessor’s work should be used. 

(2) the company follows the policy of rotating its auditors. 
(3) inthe predecessor’s opinion, internal control of the company has been satisfactory. 
(4) the engagement should be accepted. 


b. Asuccessor would most likely make specific inquiries of the predecessor auditor regarding 
(1) specialized accounting principles of the client’s industry. 
(2) the competency of the client’s internal audit staff. 
(3) the uncertainty inherent in applying sampling procedures. 
(4) disagreements with management as to auditing procedures. 
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c. Which of the following circumstances would most likely pose the greatest risk in ac- 
cepting a new audit engagement? 
(1) Staff will need to be rescheduled to cover this new client. 
(2) There will be a client-imposed scope limitation. 
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(3) The firm will have to hire a specialist in one audit area. 
(4) The client’s financial reporting system has been in place for 10 years. 


8-27 (OBJECTIVES 8-5, 8-6) The following questions deal with materiality. Choose the best 
response. 


a. Which one of the following statements is correct concerning the concept of materiality? 
(1) Materiality is determined by reference to guidelines established by the AICPA. 
(2) Materiality depends only on the dollar amount of an item relative to other items 
in the financial statements. 
(3) Materiality depends on the nature of an item rather than the dollar amount. 
(4) Materiality is a matter of professional judgment. 


b. In considering materiality for planning purposes, an auditor believes that misstate- 
ments aggregating $10,000 will have a material effect on an entity’s income state- 
ment, but that misstatements will have to aggregate $20,000 to materially affect 
the balance sheet. Ordinarily, it is appropriate to design audit procedures that are 
expected to detect misstatements that aggregate 
(1) $10,000. 

(2) $15,000. 

(3) $20,000. 

(4) $30,000. 

c. A client decides not to record an auditor’s proposed adjustments that collectively are 
not material and wants the auditor to issue the report based on the unadjusted num- 
bers. Which of the following statements is correct regarding the financial statement 
presentation? 

(1) The financial statements are free from material misstatement, and no disclosure 
is required in the notes to the financial statements. 

(2) The financial statements do not conform with generally accepted accounting 
principles (GAAP). 

(3) The financial statements contain unadjusted misstatements that should result in 
a qualified opinion. 

(4) The financial statements are free from material misstatement, but disclosure of 
the proposed adjustment is required in the notes to the financial statements. 
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DISCUSSION QUESTIONS AND PROBLEMS 


8-28 (OBJECTIVES 8-2, 8-3, 8-4, 8-5) The following are various activities an auditor does during 
audit planning. 
1. Decide whether to accept a new client or continue serving an existing one. 
2. Identify why the client wants or needs an audit. 
3. Obtain an understanding with the client about the terms of the engagement in order 
to avoid misunderstandings. 
4. Identify whether any specialists are required for the engagement. 
5. Compares client ratios to industry or competitor benchmarks to provide an indication 
of the company’s performance. 
. Tour the client’s plant and offices. 
. Specify materiality levels to be used in testing of accounts receivable. 
. Compare key ratios for the company to those for industry competitors. 
. Develop an overall strategy for the audit, including engagement staffing and any 
required audit specialists. 
10. Prepare common-size financial statements for one or more years that display all items 
as a percent of acommon base, such as sales. 


\O CON D 


For each audit procedure, indicate which of the first four parts of audit planning the proce- Required 
dure primarily relates to: (1) accept client and perform initial audit planning; (2) understand 

the client’s business and industry; (3) perform preliminary analytical procedures; (4) set 
preliminary judgment about materiality and performance materiality. 


8-29 (OBJECTIVE 8-3) For the audit of ABC Outing Provision Company’s financial state- 
ments, the following transactions are disclosed if they are material: 


1. ABC Outing’s operating lease for its main store is with Perth Properties, which is a 
real estate investment company owned by John Peter. Mr. John is a member of ABC 
Outing’s board of directors. 

2. One of ABC Outing’s main suppliers for kayaks is Marry Boating Company. ABC 
Outing has purchased kayaks and canoes from Marry for the last 25 years under a 
long-term contract arrangement. 

3. Short-term financing lines of credit are provided by Commonwealth Bank. Alice Tom 
is the lending officer assigned to the ABC Outing account. Alice is the wife of the 
largest investor of ABC Outing. 

4. Michael Travel partners with ABC Outing to provide hiking and rafting adventure 
vacations. The owner of Michael Travel lives in the same neighborhood as the CEO 
of ABC Outing. They are acquaintances, but not close friends. 

5. The board of directors consists of several individuals who own stock in ABC Outing. 
At a recent board meeting, the board approved its annual dividend payable to share- 
holders effective June 1st. 


a. Define what constitutes a “related party.” Required 
b. Which of the preceding transactions would most likely be considered a related party 
transaction? 
c. What disclosures are required when related party transactions or balances are 
material? 
d. What procedures might auditors consider to help them identify potential related 
party transactions for clients like ABC Outing? 
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8-30 (OBJECTIVE 8-3) The minutes of the board of directors of the Cala Catalogue Company 
for the year ended December 31, 2013, were provided to you. 
Meeting of February 15, 2013 


Kamila Saleh, chairman of the board, called the meeting to order at 4:00 pm. The 
following directors were in attendance: 


Yehaya Ali Essam Saad Najjar Hassan 
Wasim Aziz Ferran Amanullah Emad Mandany 
Rabi Fayed Bahir El Malky Kateb Utu 


Miriam Kalyani 


The minutes of the meeting of October 11, 2012, were read and approved. 

Reem Al Amon, president, discussed the new marketing plan for wider distri- 
bution of catalogues in the southwestern Jordan market. She made a motion for 
approval of increased expenditures of approximately $500,000 for distribution 
costs that was seconded by Utu and unanimously passed. 

The unresolved dispute with the Income and Sales Tax Department over the 
tax treatment of leased office buildings was discussed with Basil Makay, attorney. 
However, Mr. Makay does not believe the matter will be resolved for another few 
months nor does he foresee a favorable settlement. 

Najjar Hassan recomended that the computer equipment that was no longer 
being used in the Amman office, because of new equipment acquired in 2012, be 
donated to the Iman Vocational School for use in their repair and training pro- 
gram. Yehaya Ali seconded the motion and it was unanimously passed. 

Annual cash dividends were unanimously approved as being payable April 30, 
2013, for stockholders of record on April 15, 2013, as follows: 


Class A common—$10 per share 
Class B common—$5 per share 


Officers’ bonuses for the year ended December 31, 2012, were approved for pay- 
ment March 1, 2013, as follows: 


Reem Al Amon—President $130,000 
Bahir Malky—Vice President $60,000 
Rabi Fayed—Controller $60,000 
Wasim Aziz—Secretary-treasurer $45,000 


Meeting of September 16, 2013 


Kamila Saleh, chairman of the board, called the meeting to order at 4:00 pm. The 
following directors were in attendance: 


Yehaya Ali Essam Saad Najjar Hassan 
Wasim Aziz Ferran Amanullah Emad Mandany 
Rabi Fayed Bahir El Malky Kateb Utu 


Miriam Kalyani 


The minutes of the meeting of February 15, 2013, were read and approved. 
Reem Al Amon, president, discussed the improved sales and financial con- 
dition for 2013. She was pleased with the results of the catalogue distribution 
and cost control for the company. Possible online marketing was also briefly dis- 
cussed. No action would be taken at this time. 
The nominations for officers were made as follows: 


President—Reem Al Amon 

Vice President—Bahir Malky 
Controller—Rabi Fayed 
Secretary-treasurer—Wasim Aziz 


The nominees were elected by unanimous voice vote. 
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4% salary increases were recommended for all officers for the year 2014. Reem 
Al Amon recommended that salary increases be approved, seconded by Najjir 
Hassan, and was unanimously approved. 


Salary 
2013 2014 
Reem Al Amon, President $200,000 $230,000 
Bahir Malky, Vice President $170,000 $175,000 
Rabi Fayed, Controller $170,000 $175,000 
Wasim Aziz, Secretary-Treasurer $110,000 $115,000 


Kateb Utu recommended that the company consider adopting a pension/ 
profit-sharing plan for all employees as a way to provide greater incentive for 
employees to stay with the company. Considerable discussion ensued. The mem- 
bers agreed that Utu should discuss the legal and tax implications of the proposal 
with attorney Basil Makay as well as Fudail and Jawas, a CPA firm knowledgeable 
about pension and profit-sharing plans. 

Kateb Utu discussed expenditure of $40,000 for acquisition of a new computer 
system for the Amman office to replace equipment that was purchases in 2012 
and has proven ineffective. A settlement has been tentatively reached to return 
the equipment for a refund of $21,000. Utu recommended that both transactions 
be approved, seconded by Kalyani and unanimously approved. 

Wasim Aziz recommended that a loan of $360,000, from the Amman Federal 
Bank and Trust, be approved. The interest is floating at 2% above prime. The loan 
is collateralized by accounts receivable, with the loan balance not to exceed 75% of 
current accounts receivable. Seconded by Amanullah and unanimously approved. 

Bahir El Malky, chair of the audit committee, recommended that the CPA firm 
of El Sayid and Shakran be selected again for the company’s annual audit and 
related tax work for the year ended December 31, 2013. Seconded by Ali and 
unanimously approved. 

Meeting adjourned 7 pm. 

Wasim Aziz, Secretary 


a. If you are the company’s auditor, how do you determine that all minutes have been Required 
made available to you? 

b. Read the minutes of the meetings of February 15 and September 16. Use the following 
format to list and explain information that is relevant for the 2013 audit: 


Salary 


Information Relevant to 2013 Audit Audit Action Required 


2. 


c. Read the minutes of the meeting of February 15, 2013. Did any of the information 
pertain to the December 31, 2012, audit? Explain what the auditor should have done 
during the December 31, 2012, audit with respect to 2013 minutes. 


8-31 (OBJECTIVE 8-4) Your comparison of the gross margin percent for Jones Drugs for the 
years 2013 through 2016 indicates a significant decline. This is shown by the following 
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information: 
2016 2015 2014 2013 
Sales (thousands) $14,211 $12,916 $11,462 $10,351 
CGS (thousands) 9,223 8,266 7,313 6,573 
Gross margin $ 4,988 $ 4,650 $ 4,149 $ 3,778 
Percent 35.1 36.0 36.2 36.5 
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A discussion with Marilyn Adams, the controller, brings to light two possible explana- 
tions. She informs you that the industry gross profit percent in the retail drug industry 
declined fairly steadily for three years, which accounts for part of the decline. A second 
factor was the declining percent of the total volume resulting from the pharmacy part of 
the business. The pharmacy sales represent the most profitable portion of the business, 
yet the competition from discount drugstores prevents it from expanding as fast as the 
nondrug items such as magazines, candy, and many other items sold. Adams feels strongly 
that these two factors are the cause of the decline. 

The following additional information is obtained from independent sources and the 
client’s records as a means of investigating the controller’s explanations: 


Jones Drugs ($ in thousands) Industry Gross 
Profit Percent for 
Nondrug DrugCostof Nondrug Cost Retailers of Drugs 
Drug Sales Sales Goods Sold of Goods Sold and Related Products 
2016 $5,126 $9,085 $3,045 $6,178 32.7 
2015 5,051 7,865 2,919 5,347 32.9 
2014 4,821 6,641 2,791 4,522 33.0 
2013 4,619 5,732 2,665 3,908 33.2 
Required a. Evaluate the explanation provided by Adams. Show calculations to support your 


conclusions. 
b. Which specific aspects of the client’s financial statements require intensive 
investigation in this audit? 


8-32 (OBJECTIVE 8-3, 8-7, 8-8) You've been asked to review the gross margin percent for Erie 
Books for the years 2005 through 2008. You find there’s been a significant decline during 
this time. Here are the numbers: 


2008 2007 2006 2005 
Sales (thousands) $47,175 $44,039 $37,073 $35,035 
CGS (thousands) 30,314 27,998 23,431 22,072 
Gross margin 16,861 16,041 13,642 12,963 
Percent 35.7 36.4 36.8 37.0 


Your discussion with Erin O’Keefe, the controller, brings to light two possible explana- 
tions. She informs you that the industry gross profit percent in the retail book industry 
declined fairly steadily for 3 years as more people purchase books online, which accounts 
for part of the decline. She also believes that online shopping and discount bookstores pre- 
vent the company from rapidly expanding its non-book items, such as magazines, candy, 
music, DVDs, and many other items sold. O’Keefe feels strongly that these two factors are 
the cause of the decline. 

The following additional information is obtained from independent sources and the 
client’s records as a means of investigating the controller’s explanations: 


Erie Books ($ in thousands) 


Industry Gross 
Profit Percent for 
Non-book Book Cost of Non-book Cost Retailers of Books 


Year Book Sales Sales Goods Sold of Goods Sold & Related Products 
2008 $21,500 $25,675 $13,169 $17,145 39.8 
2007 20,472 23,567 12,197 15,801 39.9 
2006 17,851 19,222 10,543 12,888 40.0 
2005 16,995 18,040 9,961 12,111 40.4 
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a. Evaluate the explanation provided by O’Keefe. Show calculations to support your 
conclusions. 

b. Which specific aspects of the client’s financial statements require intensive investiga- 
tion in this audit? 


8-33 (OBJECTIVE 8-4) In the audit of the Worldwide Wholesale Company, you did extensive 
ratio and trend analysis as part of preliminary audit planning. Your analytical procedures 
identified the following: 


1. Commission expense as a percent of sales was constant for several years but has in- 
creased significantly in the current year. Commission rates have not changed. 

. The rate of inventory turnover has steadily decreased for three years. 

. Inventory as a percent of current assets has steadily increased for four years. 

. The number of days’ sales in accounts receivable has steadily increased for three years. 

. Allowance for uncollectible accounts as a percent of accounts receivable has steadily 
decreased for three years. 

6. The absolute amounts of depreciation expense and depreciation expense as a percent 

of gross fixed assets are significantly smaller than in the preceding year. 


WwW B&B Wh 


a. Evaluate the potential significance of each of the changes in ratios or trends identified 
in your analysis on the fair presentation of financial statements. 

b. State the follow-up procedures you would perform for each fluctuation to determine 
whether a material misstatement exists. 


8-34 (OBJECTIVES 8-3, 8-4) Coca Cola Co. and PepsiCo Inc. are chains of soft drinks and bev- 
erage products industry that cater to customers who desire soft drink and beverage goods 
at certain prices. The Securities and Exchange Commission (SEC) Form 10-K filing rules 
require management of American public companies to include background information 
about the business, as well as the most recent financial condition and results of opera- 
tions. Access each company’s most recent Form 10-K. These can be obtained through the 
SEC Web site (www.sec.gov), or directly from the investor relations section of the Coca 
Cola Co. (www.coca-cola.com) and PepsiCo Inc. (www.pepsico.com) Web sites. 


a. Read the description of each company’s business in Part I, Item 1 of Form 10-K and 
evaluate the similarity of each company as a basis for making financial comparisons. 

b. Read the description of each company’s business included in Part II, Item 7 of Form 
10-K and evaluate the similarity of each company as a basis for making comparisons. 

c. Evaluate whether the Item1 and Item 7 information between Coca Cola Co. and 
PepsiCo Inc. makes sense given the description of each company’s business. 


8-35 (OBJECTIVES 8-5, 8-8) You are evaluating audit results for assets in the audit of Roberts 
Manufacturing. You set the preliminary judgment about materiality at $50,000. The 
account balances, performance materiality, and estimated overstatements in the accounts 
are shown next. 


Account Performance Estimate of Total 
Account Balance Materiality Overstatements 
Cash $ 50,000 $ 5,000 $ 1,000 
Accounts receivable 1,200,000 30,000 20,000 
Inventory 2,500,000 50,000 ? 
Other assets 250,000 15,000 12,000 
Total $4,000,000 $100,000 ? 


a. Assume you tested inventory amounts totaling $1,000,000 and found $10,000 in 
overstatements. Ignoring sampling risk, what is your estimate of the total misstate- 
ment in inventory? 

b. Based on the audit of the assets accounts and ignoring other accounts, are the overall 
financial statements acceptable? Explain. 

c. What do you believe the auditor should do in the circumstances? 
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Required 


Required 


Required 


Required 


8-36 (OBJECTIVE 8-7) Ling, an audit manager, is planning the audit of Modern Technologies, 
Inc. (MT, Inc.), a manufacturer of electronic components. This is the first year that Ling’s 
audit firm has performed the audit for MT, Inc. Ling set the preliminary judgment about 
materiality for the financial statements as a whole at $66,000 and is now in the process 
of setting performance materiality for asset accounts. Asset balances for the current year 
(unaudited) and prior year (audited) are listed below, as well as Ling’s initial determina- 
tion of performance materiality for each account. Based on preliminary discussions with 
management, a tour of the production facility, and background reading about the elec- 
tronic components industry, Ling determines that MT, Inc., has strong credit policies, and 
most customers pay their full balance on time. Competition in the electronic components 
industry is high and inventory can become obsolete quickly due to rapid technology 
changes (inventory turnover is a measure that analysts focus on when assessing perfor- 
mance for electronic component manufacturers). Production equipment is relatively 
specialized and additional investment is required when new electronic components are 


introduced. 
Current Year Performance Prior Year 
(unaudited) Materiality (audited) 
Cash $ 397,565 $10,000 $ 356,122 
Accounts receivable, 2,583,99 | 25,000 2,166,787 
net of allowance 
Inventory 1,953,845 15,000 1,555,782 
Total current assets 4,935,401 4,078,69 | 
Property, plant, and 1,556,342 20,000 1,458,963 
equipment, net 
Other assets 153,000 20,000 149,828 
Total assets $6,644,743 $5,687,482 
Required a. What factors should Ling consider in setting performance materiality for the asset 
accounts? 


b. Explain why Ling set performance materiality for cash at the lowest amount. 

c. Explain why Ling set performance materiality for inventory at a lower amount as 
compared to accounts receivable, PP&E, and other assets. 

d. Explain why Ling set performance materiality for accounts receivable at the highest 
amount. 

e. Does setting materiality at a lower level result in collecting more or less audit evidence 
(as compared to setting materiality at a higher level)? 


8-37 (OBJECTIVES 8-6, 8-7, 8-8) Following are statements of earnings and financial position 


for Wexler Industries. 
Consolidated Statements of Earnings 
Wexler Industries (in Thousands) 
For the Year Ended 
March 31, 2016 March 31, 2015 March 31, 2014 
Revenue 
Net sales $ 8,351,149 $ 6,601,255 $ 5,959,587 
Other income 59,675 43,186 52,418 
8,410,824 6,644,441 6,012,005 
Costs and expenses 
Cost of sales 5,197,375 4,005,548 3,675,369 
Marketing, general, and administrative 2,590,080 2,119,590 1,828,169 
expenses 
Provision for loss on restructured 64,100 — —_ 
operations 
Interest expense 141,662 46,737 38,546 
7,993,217 6,171,875 5,542,084 
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For the Year Ended 
March 31, 2016 March 31, 2015 March 31, 2014 


Earnings from continuing 


operations before income taxes 417,607 472,566 469,921 
Income taxes (196,700) (217,200) (214,100) 
Earnings from continuing 

operations 220,907 255,366 255,821 
Provision for loss on discontinued 

operations, net of income taxes (20,700) — —_ 

Net earnings $ 200,207 $ 255,366 $ 255,821 


Consolidated Statements of Financial Position 
Wexler Industries (in Thousands) 


Assets March 31, 2016 March 31, 2015 


Current assets 
Cash $ 39,683 $ 37,566 


Temporary investments, including time 
deposits of $65,361 in 2016 and $181,589 
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in 2015 (at cost, which approximates market) 123,421 271,639 
Receivables, less allowances of $16,808 in 2016 

and $17,616 in 2015 899,752 759,001 
Inventories 

Finished product 680,974 550,407 

Raw materials and supplies 443,175 353,795 

1,124,149 904,202 

Deferred income tax benefits 9,633 10,468 
Prepaid expenses 57,468 35,911 
Current assets 2,254,106 2,018,787 
Land, buildings, and equipment, at cost, 

less accumulated depreciation 1,393,902 1,004,455 
Investments in affiliated companies 

and sundry assets 112,938 83,455 
Goodwill and other intangible assets 99,79 23,145 

Total $3,860,737 $3,129,842 
Liabilities and Stockholders’ Equity March 31, 2016 March 31, 2015 
Current liabilities 
Notes payable $ 280,238 $ 113,411 
Current portion of long-term debt 64,594 12,336 
Accounts and drafts payable 359,511 380,395 
Accrued salaries, wages, and vacations 112,200 63,557 
Accrued income taxes 76,479 89,151 
Other accrued liabilities 321,871 269,672 
Current liabilities 1,214,893 928,522 
Long-term debt 730,987 390,687 
Other noncurrent liabilities 146,687 80,586 
Deferred income taxes 142,344 119,715 
Stockholders’ equity 
Common stock issued, 51,017,755 shares in 2016 51,018 50,992 

and 50,992,410 in 2015 
Additional paid-in capital 149,177 148,584 
Cumulative foreign currency translation adjustment (76,572) = 
Retained earnings 1,554,170 1,462,723 
Common stock held in treasury, at cost, |,566,598 shares (51,967) (51,967) 
Stockholders’ equity 1,625,826 1,610,332 

Total $3,860,737 $3,129,842 
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Required a. Use professional judgment in deciding on the preliminary judgment about material- 
ity for earnings, current assets, current liabilities, and total assets. Your conclusions 
should be stated in terms of percents and dollars. 

b. Assume that you define materiality for the financial statements as a whole as a com- 
bined misstatement of earnings from continuing operations before income taxes of 
5%. Also assume that you believe there is an equal likelihood of a misstatement of 
every account in the financial statements, and each misstatement is likely to result 
in an overstatement of earnings. Allocate materiality to these financial statements as 
you consider appropriate. 

c. As discussed in part b., net earnings from continuing operations before income taxes 
was used as a base for calculating materiality for the Wexler Industries audit. Discuss 
why most auditors use before-tax net earnings instead of after-tax net earnings when 
calculating materiality based on the income statement. 

d. Now assume that you have decided to allocate 75% of your preliminary judgment to 
accounts receivable, inventories, and accounts payable because you believe all other 
accounts have a low risk of material misstatement. How does this affect evidence 
accumulation on the audit? 

e. Assume that you complete the audit and conclude that your preliminary judgment 
about materiality for current assets, current liabilities, and total assets has been met. 
The actual estimate of misstatements in earnings exceeds your preliminary judgment. 
What should you do? 


CASE 

© @.. 8-38 (OBJECTIVES 8-2, 8-3, 8-4) 

mM John Peter was an audit partner in the firm of Banana, Orange & Company. He was in the 
process of reviewing the audit files for the audit of a new client, Tom Resources. Tom was 
in the business of heavy construction. John was conducting his first review after the audit 
was substantially complete. Normally, he would have done an initial review during the 
planning phase as required by his firm’s policies; however, he had been overwhelmed by an 
emergency with his largest and most important client. He rationalized not reviewing audit 
planning information because (1) the audit was being overseen by Marry Sarah, a man- 
ager in whom he had confidence, and (2) he could “recover” from any problems during his 
end-of-audit review. Now John found that he was confronted with a couple of problems. 
First, he found that the firm may have accepted Tom without complying with its new-client 
acceptance procedures. Tom came to Banana, Orange & Company on a recommendation 
from a friend of John’s. John got “credit” for the new business, which was important to him 
because it would affect his compensation from the firm. Because John was busy, he told 
Sarah to conduct a new-client acceptance review and let him know if there were any prob- 
lems. He never heard from Sarah and assumed everything was okay. In reviewing Sarah’s 
pre-audit planning documentation, he saw a check mark in the box “Contact prior audi- 
tors” but found no details indicating what was done. When he asked Sarah about this, she 
responded with the following: 


“I called Gardner Smith (the responsible partner with Tom’s prior audit firm) and left 
a voicemail message for him. He never returned my call. I talked to Ted Tom about 
the change, and he told me that he informed Gardner about the change and that 
Gardner said, ‘Fine, I will help in any way I can.’ Ted said Gardner sent over copies of 
analyses of fixed assets and equity accounts, which Ted gave to me. I asked Ted why 
they replaced Gardner’s firm, and he told me it was over the tax contingency issue and 
the size of their fee. Other than that, Ted said the relationship was fine.” 


The tax contingency issue that Sarah referred to was a situation in which Tom had 
entered into litigation with a bank from which it had received a loan. The result of the 
litigation was that the bank forgave several hundred thousand dollars in debt. This was a 
windfall to Tom, and they recorded it as a gain, taking the position that it was non-taxable. 
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The prior auditors disputed this position and insisted that a contingent tax liability existed 
that required disclosure. This upset Tom, but the company agreed in order to receive an 
unmodified opinion. Before hiring Banana, Orange & Company as their new auditors, 
Tom requested that the firm review the situation. Banana, Orange & Company believed 
the contingency was remote and agreed to the elimination of the disclosure. 

The second problem involved a long-term contract with a customer in Mauritius. 
Under accounting standards, Tom was required to recognize income on this contract 
using the percentage-of-completion method. The contract was partially completed as of 
year-end and had a material effect on the financial statements. When John went to review 
the copy of the contract in the audit files, he found three things. First, there was a contract 
summary that set out its major features. Second, there was a copy of the contract written 
in French. Third, there was a signed confirmation confirming the terms and status of the 
contract. The space requesting information about any contract disputes was left blank, 
indicating no such problems. 

John’s concern about the contract was that to recognize income in accordance with 
accounting standards, the contract had to be enforceable. Often, contracts contain a can- 
cellation clause that might mitigate enforceability. Because he was not able to read French, 
John could not tell whether the contract contained such a clause. When he asked Sarah 
about this, she responded that she had asked the company’s vice president for the Mau- 
ritius division about the contract and he told her that it was their standard contract. The 
company’s standard contract did have a cancellation clause in it, but it required mutual 
agreement and could not be cancelled unilaterally by the buyer. 


a. Evaluate and discuss whether Banana, Orange & Company complied with auditing Required 
standards in their acceptance of Tom Resources as a new client. What can they do at 
this point in the engagement to resolve deficiencies if they exist? 
b. Evaluate and discuss whether sufficient audit work has been done with regard to 
Tom’s Mauritius contract. If not, what more should be done? 
c. Evaluate and discuss whether John and Sarah conducted themselves in accordance 
with auditing standards. 


INTEGRATED CASE APPLICATION — 
PINNACLE MANUFACTURING: PART I 
8-39 (OBJECTIVES 8-3, 8-4) 
Introduction 


This case study is presented in seven parts. Each part deals largely with the material in the 


chapter to which that part relates. However, the parts are connected in such a way that in 
completing all seven, you will gain a better understanding of how the parts of the audit are 
interrelated and integrated by the audit process. The parts of this case appear in the follow- 
ing textbook chapters: 


¢ Part I—Perform analytical procedures for different phases of the audit, Chapter 8. 

¢ Part II—Understand factors influencing risks and the relationship of risks to audit 
evidence, Chapter 9. 

* Part I1I—Conduct fraud brainstorming and assess fraud risks, Chapter 10. 

¢ Part [V—Understand internal control and assess control risk for the acquisition and 
payment cycle, Chapter 12. 

* Part V—Design tests of controls and substantive tests of transactions, Chapter 14. 

* Part VI—Determine sample sizes using audit sampling and evaluate results, 
Chapter 15. 

* Part VII—Design, perform, and evaluate results for tests of details of balances, 
Chapter 16. 
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Background Information 


Your audit firm has recently been engaged as the new auditor for Pinnacle Manufacturing, 
effective for the audit of the financial statements for the year ended December 31, 
2016. Pinnacle is a medium-sized corporation, with its headquarters located in Detroit, 
Michigan. The company is made up of three divisions. The first division, Welburn, has 
been in existence for 35 years and creates powerful diesel engines for boats, trucks, and 
commercial farming equipment. The second division, Solar-Electro, was recently acquired 
from a high-tech manufacturing firm based out of Dallas, Texas. Solar-Electro produces 
state-of-the-art, solar-powered engines. The solar-powered engine market is relatively 
new, and Pinnacle’s top management believes that the Solar-Electro division will be 
extremely profitable in the future as the focus on global climate change continues and 
when highly anticipated EPA regulations make solar-powered engines mandatory for 
certain public transportation vehicles. Finally, the third division, Machine-Tech, engages 
in a wide variety of machine service and repair operations. This division, also new to 
Pinnacle, is currently in its second year of operations. Pinnacle’s board of directors has 
recently considered selling the Machine-Tech division in order to focus more on core 
operations—engine manufacturing. However, before any sale will be made, the board has 
agreed to evaluate this year’s operating results. Excellent operating results may have the 
effect of keeping the division as part of Pinnacle for the next few years. The vice president 
for Machine-Tech is committed to making it profitable. 


PART I 
The purpose of Part I is to perform preliminary analytical procedures as part of the audit 
planning process. You have been asked to focus your attention on two purposes of ana- 
lytical procedures: obtaining an understanding about the client’s business and indicating 
where there is an increased likelihood of misstatements. 
Required a. Refer to the financial statement data in Figure 8-9 for the current year and prior 


two years. Analyze the year-to-year change in account balance for at least five 
financial statement line items. Document the trend analysis in a format similar to the 


following: 
% Change % Change 
Account Balance 2015-2016 2014-2015 
Net sales 


b. Calculate at least five common ratios shown in Chapter 7 on pages 196-199 and 
document them in a format similar to the following: 


Ratio 2016 2015 2014 


Current ratio 


c. Based on the analytical procedures calculated in parts a. and b., summarize your 
observations about Pinnacle’s business, including your assessment of the client’s 
business risk. 

d. Go to the Pinnacle link on the textbook Web site (www.pearsonhighered.com/arens) 
and open the Pinnacle income statement, which is located in the Pinnacle Income 
Statement worksheet of the Pinnacle Financials Excel file. Use the income state- 
ment information to prepare a common-size income statement for all three years. 
See Figure 8-4 (p. 257) for an example. Use the information to identify accounts for 
which you believe there is a concern about material misstatements. Use a format 
similar to the following: 


Estimate of $ Amount 
Account Balance of Potential Misstatement 
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FIGURE 8-9 


Net sales 

Cost of goods sold 
Gross profit 

Operating expenses 


Pinnacle Manufacturing Financial Statements 


Pinnacle Manufacturing Company 


Income Statement 


For the Year Ended December 31 


2016 


$ 150,737,628 
109,284,780 


2015 


$ 148,586,037 
106,255,499 


2014 


$ 144,686,413 
101,988, 165 


41,452,848 
S738 


42,330,538 
38,133,969 


42,698,248 
37,241,108 


Income from operations 4,275,110 4,196,569 5,457,140 
Other revenues and gains — — —_— 
Other expenses and losses 2,181,948 2299 207 2,397,953 
Income before income tax 2,093,162 1,897,352 3,059,187 

Income tax 883,437 858,941 1,341,536 
Net income for the year 1,209,725 1,038,411 1,717,651 
Earnings per share $1.21 $1.04 $1.72 


Pinnacle Manufacturing Company 
Balance Sheet 
As of December 31 


Assets 2016 2015 2014 
Current assets 


Cash and cash equivalents SI 772279 $ 7,324,846 $ 8,066,545 


Net receivables 13,042,165 8,619,857 7,936,409 
Inventory 32,236,021 25,537,198 25,271,503 
Other current assets 172,278 143,206 131,742 
Total current assets 53,171,743 41,625,107 41,406,199 
Property, plant, and equipment 62,263,047 61,635,530 58,268,732 
Total assets $ 115,434,790 $ 103,260,637 99,674,931 


Liabilities 
Current liabilities 
Accounts payable $ 12,969,686 $ 9,460,776 
Short/current long-term debt 15,375,819 10,298,668 
Other current liabilities 2,067,643 1,767,360 
Total current liabilities 30,413,148 21,526,804 
Long-term debt 24,420,090 22,342,006 
Total liabilities 54,833,238 43,868,810 


7,586,374 
9,672,670 
1,682,551 
18,941,595 
22,379,920 
41,321,515 


Stockholders’ equity 

Common stock 

Additional paid-in capital 

Retained earnings 

Total stockholders’ equity 

Total liabilities & stockholders’ equity 


1,000,000 
15,717,645 
43,883,907 
60,601,552 

$ 115,434,790 


1,000,000 
15,717,645 
42,674,182 
59,391,827 

$ 103,260,637 


1,000,000 
15,717,645 
41,635,771 
58,353,416 
99,674,931 


e. Use the three divisional income statements in the Pinnacle_Financials Excel file 
on the Web site to prepare a common-size income statement for each of the three 
divisions for all three years. Each division’s income statement is in a separate work- 
sheet in the Excel file. Use the information to identify accounts for which you believe 
there is a concern about material misstatements. Use a format similar to the one in 
requirement d. 

f. Explain whether you believe the information in requirement d. or e. provides the 
most useful data for evaluating the potential for misstatements. Explain why. 

g. Analyze the account balances for accounts receivable, inventory, and short/current 
long-term debt. Describe any observations about those accounts and discuss addi- 
tional information you want to consider during the current year audit. 

h. Based on your calculations, assess the likelihood (high, medium, or low) that Pinnacle 
is likely to fail financially in the next 12 months. 
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ACL PROBLEM 


ACD 8-40 (OBJECTIVE 8-4) This problem requires the use of ACL software, which can be accessed 
through the textbook Web site. Information about downloading and using ACL and 
the commands used in this problem can also be found on the textbook Web site. You 
should read all of the reference material preceding the instructions about “Quick Sort” 
before locating the appropriate command to answer questions a. through c. For this 
problem, use the “Invoices” file in the “Sales and Collection” subfolder under tables in the 
ACL_Rockwood project. This file contains information on sales invoices generated during 
calendar year 2014, including those that have been paid versus those still outstanding. The 
suggested command or other source of information needed to solve the problem require- 

ment is included at the end of each question. 


Required a. Obtain and print statistical information for Invoice Amount. What is the total 
amount of invoices generated during the year? Do any invoices have a negative value? 
(Statistics) 

b. What is the total amount of invoices still outstanding (not yet paid) at the end of the 
year? Note the file includes a default payment date for unpaid invoices that will be 
updated once payment is received. (Summarize) 

c. From the summary created in part b. above, click on the “Outstanding” invoices to 
examine the details of those still outstanding. Sort the “invoice_date” column in 
ascending order. What concerns do you have, if any, about the collectibility of the 
invoice amounts? (Quick Sort) 

d. How might the evidence obtained in parts a. through c. above help the auditor in test- 
ing accounts receivable? 
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ASSESSING THE 
RISK OF MATERIAL 
MISSTATEMENT 


What’s the Big Deal About Risk? 


With the explosion of the childcare services and education over the past decade, new education 
approaches have been launched to learning products and services to consumers. ABC Learning 
Centres Limited (ABC) was a publicly listed company whose main business was the provision of 
childcare services and education. It is now known as ZYX Learning Centres Limited and is in the 
process of being wound up. 


On 2007, Mr. Simon Andrew Peter Green was engaged to audit ABC’s financial statements for 
the year ended 2007. ABC filed its 2007 annual financial statements with the Australian Securities 
and Investments Commission (ASIC) on 2007, which included Mr. Green’s opinion that ABC’s 
financial statements were presented fairly, in all material respects, in accordance with ICAA. ASIC 
has accepted an enforceable undertaking (EU) from Brisbane auditor, Mr. Simon Andrew Peter 
Green. This EU follows ASIC’s investigation into Mr. Green’s conduct of the audit of the 2007 
financial report of ABC Learning Centres Limited (ABC). At the time, Mr. Green was a partner 
with the former Brisbane firm of Pitcher Partners, which was dissolved on 28 November 2008. 
Under the EU, Mr. Green is prevented from practicing as a registered auditor for a period of five 
years (period of suspension). He is also required during the period of suspension to: notify any 
employer of the EU and if he is retained directly by a client, then inform the client of the EU; regu- 
larly report to ASIC any other audit and/or review work under the Corporations Act 2001 he 
undertakes outside of what only a registered auditor can perform, and participate, in each 12 
month period, in an additional 15 hours of continuing professional development above the manda- 
tory requirements of the ICAA. 


Following conclusion of the period of suspension, he is required to submit his first five audits 
for review by a registered company auditor approved by ASIC. ‘Auditors are important gate- 
keepers who are relied upon to provide assurance and market confidence in the quality of 
financial reports’, ASIC Chairman, Greg Medcraft said. ‘ASIC continues to focus auditors on 
the importance of applying professional skepticism and obtaining sufficient audit evidence to 
support their conclusions. It is vital that auditors apply appropriate skills, experience and skep- 
ticism in identifying and responding to risks, reviewing accounting treatments, gathering audit 
evidence and in judgment areas such as going concern assessments, added Mr. Medcraft. 


ASIC is of the view that during the audit of ABC’s 2007 financial report, Mr. Green failed to per- 
form adequately and properly his duties as an auditor. In particular, ASIC is of the view that Mr. 
Green failed to: obtain sufficient appropriate audit evidence in relation to the correct accounting 
treatment for various fees which resulted in a significantly material overstatement of ABC’s reve- 
nue; to support the classification of income items—the consequence being that items not from the 
provision of childcare services were incorrectly classified as revenue which resulted in the over- 
statement of ABC’s revenue; to enable a reasonably competent auditor to conclude that ABC 
was a going concern; to support his conclusions with regard to related party transactions, prop- 
erty plant and equipment, wages and salaries, and to support his opinion that ABC’s 2007 financial 
report was free of material misstatement, adequately document the testing undertaken in respect 
to the risk of fraud, develop audit procedures to deal with assessed risks, perform sufficient and 
appropriate subsequent events procedures, and use professional judgment and skepticism when 
auditing ABC’s 2007 financial report. Mr. Green acknowledges ASIC’s views are reasonably held. 


Sources: ASIC, “12-186MR Former ABC Learning Centres auditor prevented from auditing 
companies for five years” (August 6, 2012) (http://asic.gov.au/about-asic/media-centre/find-a- 
media-release/20 | 2-releases/ | 2-186mr-former-abc-learning-centres-auditor-prevented-from- 
auditing-companies-for-five-years/). 


CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


9-1 Define risk in auditing. 

9-2 Distinguish the different types 
of risk assessment procedures. 

9-3 Understand important 
auditor considerations 
related to the risk of material 
misstatement due to fraud. 

9-4 Describe the auditor's 
responsibility to identify 
significant risks. 

9-5 Describe the audit risk 
model and its components. 

9-6 Assess acceptable audit risk. 

9-7 Consider the impact of 
several factors on the 
assessment of inherent risk. 

9-8 Discuss the relationship of 
risks to audit evidence. 

9-9 Discuss how materiality and 
risk are related and integrated 
into the audit process. 
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Accept client and 
perform 
initial audit planning 


Understand the 
client’s business 
and industry 


Perform preliminary 
analytical procedures 


Set preliminary 
judgment of 
materiality and 
performance materiality 


Identify significant 
risks due to fraud or error 


| Assess inherent risk 


Understand 
internal control and 
assess control risk 


Finalize overall audit 
strategy and audit plan 


The auditor’s responsibility section in an audit report includes two important 
phrases (italicized below) that are directly related to materiality and risk. 


* We conducted our audits in accordance with auditing standards generally 
accepted in the United States of America. Those standards require that 
we plan and perform the audit to obtain reasonable assurance about whether 
the financial statements are free of material misstatement. 


The phrase obtain reasonable assurance is intended to inform users that auditors do 
not guarantee or ensure the fair presentation of the financial statements. Some risk 
that the financial statements are not fairly stated exists, even when the opinion is 
unmodified. 

The phrase free of material misstatement is intended to inform users that the auditor’s 
responsibility is limited to material financial information. Materiality is important 
because it is impractical for auditors to provide assurances on immaterial amounts. 

Chapter 8 described the auditor’s consideration of materiality as part of audit 
planning. This chapter focuses on the risk assessment process that is fundamental 
to planning the audit and designing an audit approach. In this chapter, we will show 
how these concepts fit into the planning phase of the audit. Note that the topic of this 
chapter is closely related to earlier discussions of auditor’s responsibilities, transac- 
tion cycles, audit objectives (Chapter 6), along with materiality and planning the 
audit (Chapter 8). 

In this chapter, we apply the assessment of the risk of material misstatements to 
the concepts studied in Chapter 6. We introduce the fifth and sixth steps in planning 
the audit, as shown in the shaded boxes in the figure in the margin, which build on the 
first four steps that were covered in Chapter 8. These steps relate to the auditor’s as- 
sessment of the risks of material misstatement, including significant risks and inher- 
ent risks. When auditors assess risks, they use a considerable amount of the informa- 
tion acquired and documented during the first four parts of audit planning. As noted 
in the opening vignette about WebXU’s auditor, failure to assess the risk of material 
misstatement can be hugely detrimental. 


AUDIT RISK 


Define risk in auditing. 
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Auditing standards require the auditor to obtain an understanding of the entity and 
its environment, including its internal control, to assess the risk of material misstate- 
ments in the client’s financial statements. Chapter 8 described how the auditor gains 
an understanding of the client’s business and industry to assess client business risk 
and the risk of material misstatements. 

Auditors accept some level of risk or uncertainty in performing the audit func- 
tion. The auditor recognizes, for example, the inherent uncertainty about the appro- 
priateness of evidence, uncertainty about the effectiveness of a client’s internal con- 
trols, and uncertainty about whether the financial statements are fairly stated when 
the audit is completed. An effective auditor recognizes that risks exist and deals with 
those risks in an appropriate manner. Most risks auditors encounter are difficult to 
measure and require careful consideration before the auditor can respond appropri- 
ately. Because the assessment of risks is a matter of professional judgment, rather 
than a precise measurement, responding to these risks properly is critical to achiev- 
ing a high-quality audit. 

As discussed in Chapter 8, the risk of material misstatement is the risk that the 
financial statements contain a material misstatement due to fraud or error prior to 
the audit. The risk of material misstatement is a function of the susceptibility of the 
financial statements as a whole or individual accounts to misstatement, including 
the risk that the client’s controls may not be effective in preventing or detecting 
and correcting the misstatements. The risk of material misstatement exists at two 


levels: the overall financial statement level and at the assertion level for classes of 
transactions, account balances, and presentation and disclosures. Auditing stan- 
dards require the auditor to assess the risk of material misstatement at each of 
these levels and to plan the audit in response to those assessed risks. 


The risk of material misstatement at the overall financial statement level refers to risks 
that relate pervasively to the financial statements as a whole and potentially affect a 
number of different transactions and accounts. It is important for the auditor to con- 
sider risks at the overall financial statement level, given those risks may increase the 
likelihood of risks of material misstatement across a number of accounts and asser- 
tions for those accounts. 

A number of overarching factors may increase the risks of material misstatement 
at the overall financial statement level. For example, deficiencies in management’s 
integrity or competence, ineffective oversight by the board of directors, or inadequate 
accounting systems and records increase the likelihood that material misstatements 
may be present in a number of assertions affecting several classes of transactions, 
account balances, or financial statement disclosures. Similarly, declining economic 
conditions or significant changes in the industry may increase the risk of material 
misstatement at the overall financial statement level. 


Risk of Material 
Misstatement at the 
Overall Financial 
Statement Level 


Auditing standards require the auditor to assess the risk of material misstatement at 
the assertion level for classes of transactions, account balances, and presentation and 
disclosure in order to determine the nature, timing, and extent of further audit pro- 
cedures. As discussed in Chapter 6, auditors develop audit objectives for each of the 
assertions and perform audit procedures to obtain persuasive audit evidence that each 
of those audit objectives is achieved. As a result, auditors typically assess the risk that 
audit objectives related to assertions for classes of transactions, account balances, and 
presentation and disclosure are not achieved. 

The risk of material misstatement at the assertion level consists of two compo- 
nents: inherent risk and control risk. Inherent risk represents the auditor’s assessment 
of the susceptibility of an assertion to material misstatement, before considering the 
effectiveness of the client’s internal controls. For example, inherent risk may be higher 
for accounts whose valuations are dependent on complex calculations or accounting 
estimates subject to significant estimation judgment. Control risk represents the audi- 
tor’s assessment of the risk that a material misstatement could occur in an assertion 
and not be prevented or detected on a timely basis by the client’s internal controls. 
For example, control risk may be higher if the client’s internal control procedures fail 
to include independent review and verification by other client personnel of complex 
calculations used or significant estimates developed to determine the valuation of an 
account balance recorded in the client’s financial statements. Inherent risk and con- 
trol risk are the client’s risks and they exist independent of the audit of the financial 
statements. We will discuss both inherent risk and control risk later in this chapter. 


Risk of Material 
Misstatement at the 
Assertion Level 


RISK ASSESSMENT PROCEDURES 
As first discussed in Chapter 8, to obtain an understanding of the entity and its OBJECTIVE 9-200 


environment, including the entity’s internal controls, the auditor performs risk assess- soy ; 

: ; . : : istinguish the different types 
ment procedures to identify and assess the risk of material misstatement, whether due 6 risk assessment procedures. 
to fraud or error. Risk assessment procedures include the following: 


1. Inquiries of management and others within the entity 
Analytical procedures 

3. Observation and inspection 

Discussion among engagement team members 

Other risk assessment procedures 
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FIGURE 9-1 Role of Risk Assessment Procedures 


Risk Assessment Procedures 


Inquiries of management and others 


Provide input for 
understanding entity and Help auditor identify 

its environment, and assess the risk of 
including internal material misstatement 
controls 


Analytical procedures Used to develop audit 
strategy and audit plan 
in response to assessed 


risks 


Observation and inspection 


Discussion among engagement 
team members 


Other risk assessment procedures 


Collectively, the performance of risk assessment procedures is designed to help 
the auditor obtain an understanding of the entity and its environment, including 
internal controls, for purposes of assessing the risk of material misstatement when 
planning the audit, as illustrated in Figure 9-1; however, risk assessment procedures 
do not provide sufficient appropriate audit evidence to form an audit opinion on the 
financial statements. 


Management and others within the entity may have important information to assist 
the auditor in identifying the risks of material misstatement. Auditors will frequently 
interact with members of management and others with financial reporting responsi- 
bilities to understand the entity and its environment and to learn about the design and 
operation of internal controls. In addition to making inquiries of those individuals, 
auditing standards emphasize the benefits and importance of obtaining informa- 
tion or different perspectives through inquiries of others within the entity and other 
employees with different levels of authority. 

Inquiries of those charged with governance, such as the board of directors or 
audit committee, may provide information about the overall competitive environ- 
ment and strategy of the business that may provide important insights about overall 
client business risks. Those charged with governance are often involved in significant 
strategic and operational decisions, such as the pursuit of acquisitions or new lines 
of business. As a result, they may have insider knowledge that may help the auditor 
identify heightened risks of material misstatements. Additionally, inquiries of those 
charged with governance provide the auditor with important insights about the over- 
all governance oversight provided by the board of directors and others, which is an 
importance aspect of internal control. While AICPA auditing standards suggest that 
inquiries of those charged with governance may be informative to the auditor, PCAOB 
auditing standards require the auditor to inquire of the audit committee or its equiva- 
lent about risks of material misstatement. 

Similarly, because internal auditors typically have exposure to all aspects of 
the client’s business and operations, they may have important information about 
risks at the overall financial statement level or assertion level. Most internal audit 
functions develop their internal audit scope based on a risk assessment process that 
considers risks to design their audit strategies. Inquiries of internal audit personnel 
may provide important information about key risks to the business affecting not 
only financial reporting, but also operations and compliance with laws and regula- 
tions that may increase the likelihood of material misstatements. Because a primary 
focus of most internal audit functions is evaluating the effectiveness of the entity’s 
internal processes related to financial reporting, operations, and compliance, inqui- 
ries of internal audit personnel may provide valuable information about the design 


Inquiries of Management 
and Others Within the 
Entity 
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and operating effectiveness of internal controls. Similar to inquiries related to those 
charged with governance, AICPA auditing standards suggest making inquiries of 
internal audit personnel, while PCAOB auditing standards require inquiry of inter- 
nal audit personnel. 

Auditors may also benefit from making inquiries of others within the entity who 
are involved in different roles and who are at different levels within the client’s opera- 
tions. For example, individuals who help manage legal affairs or regulatory compli- 
ance for the entity may have knowledge relevant to the auditor’s assessment of the 
risk of material misstatements, especially the impact of noncompliance on financial 
reporting. Other personnel, such as those involved in marketing or sales or those 
involved with complex or unusual transactions, may provide insights about risks 
related to revenue recognition or issues involving valuation of receivables. 


As described in Chapter 8, auditors are required to perform preliminary analytical 
procedures as part of audit planning in every audit to better understand the entity 
and to assess client business risks. The performance of analytical procedures may 
help the auditor identify unusual amounts, ratios, or trends that might identify 
unusual transactions or events having audit implications. Analytical procedures 
performed as part of the auditor’s risk assessment procedures may include both 
financial and nonfinancial information, and they often use data aggregated at a high 
level. As a result, they may only provide a broad indication about whether a material 
misstatement exists. Auditors should consider information obtained by performing 
other risk assessment procedures in combination with the results from preliminary 
analytical procedures. The preliminary analytical procedures applied to Hillsburg 
Hardware illustrated in Table 8-1 (p. 232) of Chapter 8 provide an example of how 
they are effective in helping the auditor assess the risks of material misstatement as 
part of audit planning. 


The types of evidence described in Chapter 7 include both observation and inspec- 
tion. Recall the evidence obtained through observation generally involves the au- 
ditor looking at a process or procedure being performed by others. For example, 
observation of the entity’s operations, such as the manufacturing and shipping of 
products to customers, and tours of the entity’s facilities may increase the auditor's 
understanding of the entity and its environment. Additionally, the inspection of 
documents such as the organization’s strategic plan, business model, and its orga- 
nizational structure increases the auditor’s understanding of how the business is 
structured and how it organizes key business functions and leaders in the oversight 
of day-to-day operations. 

In addition to learning about the business and its environment, auditors also 
observe client personnel performing important processes related to financial report- 
ing to help them understand the design of internal controls related to the financial 
statements as a whole and to specific audit objectives related to classes of transac- 
tions, account balances, and presentation and disclosure. They often combine obser- 
vation of processes with the inspection of documents and records, such as purchase 
orders, invoices, and receiving reports related to disbursements, that are part of those 
processes to gain an understanding of the design effectiveness of internal controls 
related to financial reporting. Together, observation and inspection provide the audi- 
tor with a basis for understanding internal controls, which is an important input for 
the assessment of the risk of material misstatement. Understanding internal control is 
discussed further in Chapter 12. 


Auditing standards require the engagement partner and other key engagement team 
members to discuss the susceptibility of the client’s financial statements to mate- 
rial misstatement. Those standards explicitly require that this discussion specifically 
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Analytical Procedures 


Observation and 
Inspection 


Discussions Among 
Engagement Team 
Members 


considers the susceptibility of the client’s financial statements to fraud, in addition to 
their susceptibility of material misstatement due to errors. 

Discussion among the engagement partner and other key members of the 
engagement team provides an opportunity for more experienced team members, 
including the engagement partner, to share their insights about the entity and its 
environment, including their understanding of internal controls, with other mem- 
bers of the engagement team. The discussion should include an exchange of ideas or 
brainstorming among the engagement team members about business risks and how 
and where the financial statements might be susceptible to material misstatement, 
whether due to fraud or error. By including key members of the engagement team 
in discussions with the engagement partner, all members of the engagement team 
become better informed about the potential for material misstatement of the finan- 
cial statements in specific areas of the audit assigned to them, and it helps them gain 
an appreciation for how the results of audit procedures performed by them affect 
other areas of the audit. 

While auditing standards specifically require a discussion among the key engage- 
ment team members, including the engagement partner, about how and where the 
entity’s financial statements may be susceptible to material misstatement due to 
fraud, this can be held concurrently with the discussion about the susceptibility of 
financial statements to material misstatement due to error. It may not be practical 
for all members of the engagement team to be included in a single discussion. For 
example, on large global audit engagements with team members located in multiple 
cities around the globe, it may not be feasible for all of them to participate in a single 
discussion. The engagement partner may choose to discuss matters with members of 
the engagement team who are responsible for audits of components of the financial 
statement, such as the Asia Pacific region of a multinational company, while delegat- 
ing discussion with others to other members of the engagement team leadership. 
Regardless, the engagement partner is responsible for determining which matters 
should be communicated to engagement team members not involved in the discus- 
sion. For large, complex engagements, the engagement partner may create a commu- 
nication plan to ensure that these critical discussions occur appropriately. 


Other procedures may be performed to assist in the auditor’s assessment of the 
risk of material misstatement. For example, information obtained during the client 
acceptance or continuance evaluation process, such as discussions with predecessor 


Other Risk Assessment 
Procedures 


ITEM LA 
RISK FACTOR 
DING KONE] NSS 
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Publicly traded companies must file an annual report 
in a Form 10-K each year with the Securities and 
Exchange Commission (SEC). The Form 10-K can 
be a rich source of information about a company’s 
business, the risks it faces, and the operating and 
financial results of the fiscal year. SEC guidelines 
specify the content that must be reported in the 
Form 10-K. 

Among the required elements, the company must 
provide information as part of Item |—‘Business”— 
that describes the company’s business, including its 
main products and services, subsidiaries it owns, and 
markets where it operates. Disclosures in Item | 
might also include information about recent events, 
competition, regulations, and other factors that 
might help investors better understand how the 
company operates and the environment it faces. 

Item |.A—“Risk Factors’”—includes information 
about the most significant risks that apply to 


the company. Typically, companies list those 
risks in order of importance. In this section, 
management must include a description of those 
risks, which might include macroeconomic risks 
that broadly affect a number of entities or risks 
affecting the industry or geographic regions. 
Other risks might be company specific. 

Both Item | and Item |.A may provide helpful 
information to the auditor when assessing the risk 
of material misstatement. In particular, auditors 
might find it helpful to review not only Item I.A 
risk factors included in the most recently filed 
Form 10-K for the company being audited, but 
also the Item |.A disclosures reported by the 
company’s key competitors to understand the 
entity and the environment in which it operates. 


Source: “How to Read a 10-K,” Securities and Exchange 
Commission (www.sec.gov). 
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auditors or insights obtained from background checks for new client engagements, 
may heighten the auditor’s awareness of the risks of material misstatement. Similarly, 
evidence obtained during the performance of other engagements for the client, 
such as a tax-related engagement, may provide important knowledge about unique 
or nonroutine transactions that indicate a heightened risk of material misstate- 
ment. Information obtained from external sources, such as analyst or credit agency 
reports, trade and economic journals, and regulatory publications, may strengthen 
the auditor’s understanding of the entity and its environment to assess the risk of 
material misstatement. For example, the auditor may learn about new regulatory 
requirements that impact the accounting for certain types of transactions within an 
industry. 


CONSIDERING FRAUD RISK 


While auditors perform risk assessment procedures to assess the risk of material 
misstatement due to fraud or error, the risk of not detecting a material misstatement 
due to fraud is higher than the risk of not detecting a misstatement due to error. 
Fraud often involves complex and sophisticated schemes designed by perpetrators to 
conceal it, such as forgery of approvals and authorizations for unusual cash disburse- 
ment transactions or intentional efforts to not record a transaction in the accounting 
records. And, individuals engaged in conducting a fraud often intentionally mis- 
represent information to the auditor, and they may try to conceal the transaction 
through collusion with others. As a result, identifying material misstatements due to 
fraud is difficult. 

As discussed in Chapter 6, the audit must be planned and performed with an 
attitude of professional skepticism in all aspects of the engagement, recognizing the 
possibility that a material misstatement could exist regardless of the auditor’s prior 
experience with the integrity and honesty of client management and those charged 
with governance. The application of professional skepticism consists of two primary 
components: a questioning mind and a critical assessment of the audit evidence. 

To assist the auditor in assessing the risk of material misstatement due to fraud, 
auditing standards outline procedures the auditor should perform to obtain infor- 
mation from management about their consideration of fraud. For example, the 
auditor should inquire of management about their assessment of the risk that the 
financial statements may be materially misstated due to fraud. As part of those 
inquiries, the auditor should ask management to describe the frequency of man- 
agement’s assessments and the extent of their consideration of risks due to fraud, 
including discussion about management’s processes that are designed to identify, 
respond to, and monitor the risks of fraud in the organization. Auditing standards 
require the auditor to make inquiries of management and others within the entity 
about their knowledge of any actual, suspected, or alleged fraud affecting the client 
and whether management has communicated any information about fraud risks to 
those charged with governance. 

The auditor’s consideration of the risk of material misstatement due to fraud is 
made at both the financial statement level and at the assertion level for classes of trans- 
actions, account balances, and presentation and disclosures. The auditor’s risk assess- 
ment should be ongoing throughout the audit, given the auditor may obtain knowledge 
and information from the performance of audit procedures that suggest fraud may be 
present. Because a number of high-profile instances of fraudulent financial reporting 
have involved misstatements in revenue recognition, auditing standards require the 
auditor to presume that risks of fraud exist in revenue recognition. As a result, risks 
related to audit objectives for revenue transactions and their related account balances 
and presentation and disclosure are presumed to be significant risks in most audits. 
If the auditor determines that the presumption is not applicable to a particular audit 
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Understand important auditor 
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risk of material misstatement 
due to fraud. 


Accept client and 
perform 
initial audit planning 
| 
Understand the 
client’s business 
and industry 


Perform preliminary 
analytical procedures 


Set preliminary 
judgment of 
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Finalize overall audit 
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engagement, the auditor must document his or her conclusions in the working papers. 
We will discuss the auditor’s consideration and response to fraud risk in Chapter 10. 


IDENTIFICATION OF SIGNIFICANT RISKS 
OBJECTIVE 9-40 As part of the auditor’s assessment of the risk of material misstatement, whether due 


es to fraud or error, auditing standards require the auditor to determine whether any of 
Describe the auditor’s i ‘ ae 7 : ; 4 ? pena hee , 
Feeponsibiliey to\ldencity the risks identified are, in the auditor’s professional judgment, a significant risk. A 
significant risks. significant risk represents an identified and assessed risk of material misstatement that, 
in the auditor's professional judgment, requires special audit consideration. As illustrated 
by the first shaded rectangle in the figure in the margin on page 286, the identification 
of significant risks due to fraud and error is a core element of effective audit planning. 
Auditing standards require the auditor to obtain an understanding of the entity's controls 
relevant to significant risks to evaluate the design and implementation of those controls, 
and the auditor must perform substantive tests related to assertions deemed to have sig- 
nificant risks. This will be discussed more extensively in Chapters 12 and 13. 


Significant risks often relate to nonroutine transactions, which represent transactions 
that are unusual, either due to size or nature, and that are infrequent in occurrence. For 
example, a retail client that normally sells its products through company-owned stores 
across the country may decide to sell to a competitor a large block of inventory located 
in a distribution center. The terms of that transaction may be based on significant nego- 
tiations that include various buy-back provisions and warranties that increase risks of 
material misstatement related to revenue recognition and receivables collection. 
Nonroutine transactions may increase the risk of material misstatement because 
they often involve a greater extent of management intervention, including more reliance 
on manual versus automated data collection and processing, and they can involve 
complex calculations or unusual accounting principles not subject to effective internal 
controls due to their infrequent nature. Related party transactions often reflect these 
characteristics, thereby increasing the likelihood they are considered significant risks. 


Nonroutine Transactions 


Significant risks also relate to matters that require significant judgment because they 
include the development of accounting estimates for which significant measurement 
uncertainty exists. For example, a client may engage in a new type of hedging transac- 
tion that management has not done in the past, thereby increasing the potential that 
the client’s lack of experience and expertise in the underlying accounting treatment 
and estimation process will increase the risks of material misstatement. 

Classes of transactions or account balances that are based on the development of 
accounting estimates often require significant judgment that is subjective or complex 
because it is based on assumptions about future events. As a result, those types of 
transactions or balances frequently are identified as significant risks. For example, fair 
value accounting related to unique and material hedging transactions would likely be 
considered a significant risk. 


Matters That Require 
Significant Judgment 


Because fraud generally involves concealment, detecting material misstatements due 
to fraud is difficult. As a result, when auditors identify a potential risk of material mis- 
statement due to fraud, auditing standards require the auditor to consider that risk 
a significant risk, which triggers required responses to those risks. We will discuss 
those responses further in Chapter 10. 


Fraud Risk 
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I. At what two levels does the auditor assess the risk of material misstatement? 
2. Describe the types of procedures that constitute risk assessment procedures. 


Arens, Alvin A. 308 Auditing and ARantc2 SehitEsAGMDATHARIOCRSEson Education Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2020-12-15 19:19:00. 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education Limited, 2h epaeweQ FbAOS ESSA G tip Hb BAGIE ibe. PYDATESR ¢Arb/ IVS BIIASHE DH B/NETail. action?docID3HQ4B606. 


AUDIT RISK MODEL 


We discussed earlier how the auditor’s assessment of the risk of material misstate- 
ment at the assertion level consists of two components: inherent risk and control risk. 
Auditors consider these risks in planning procedures to obtain audit evidence primar- 
ily by applying the audit risk model. The model is introduced here and discussed 
in greater detail later in the chapter. You will need a thorough understanding of the 
model to conduct effective audit planning and to master the content presented in the 
remaining chapters of this book. 


The audit risk model helps auditors decide how much and what types of evidence to 
accumulate for each relevant audit objective. It is usually stated as follows: 


eo 
IR XCR 
where: 
PDR = planned detection risk 
AAR = acceptable audit risk 
IR = inherent risk 
CR = control risk 
Figure 9-2 shows the relationship between the audit risk model and the under- 
standing of the client’s business and industry discussed in Chapter 8. Auditors use the 
audit risk model to further identify the potential for misstatements in the overall finan- 


cial statements and at the audit objective level for specific account balances, classes of 
transactions, and disclosures where misstatements are most likely to occur. 


Before we discuss the audit risk model components, review the illustration for a hypo- 
thetical company in Table 9-1 (p. 294). The auditor assesses risks at the overall financial 


Audit Risk Model and Understanding the Client’s 
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Describe the audit risk model 
and its components. 


Audit Risk Model 
for Planning 


Illustration Concerning 
Risks and Evidence 


WE ilustration of Differing Evidence Among Cycles 


Acquisition Payroll and Inventory and Capital 
Sales and and Payment Personnel Warehousing Acquisition and 
Collection Cycle Cycle Cycle Cycle Repayment Cycle 

Auditor's assessment of Expect some Expect many Expect few Expect many Expect few 

expectation of material misstatements misstatements misstatements misstatements misstatements 
A __ misstatement before 

considering internal (medium) (high) (low) (high) (low) 

control (inherent risk) 

Auditor’s assessment of Medium High High Low Medium 

effectiveness of internal effectiveness effectiveness effectiveness effectiveness effectiveness 
B controls to prevent or 

detect material (medium) (low) (low) (high) (medium) 

misstatements (control 

risk) 

Auditor's willingness Low Low Low Low Low 

to permit material willingness willingness willingness willingness willingness 
C misstatements to exist 

after completing the audit (low) (low) (low) (low) (low) 

(acceptable audit risk) 

Extent of evidence the Medium level Medium level Low level High level Medium level 
D auditor plans to accumulate 

(planned detection risk) (medium) (medium) (high) (low) (medium) 


statement level and at the audit objective level. Table 9-1 illustrates how the auditor might 
begin by considering risks at the transaction (cycle) level. The auditor will also consider 
differences in risk levels across various audit objectives within an individual class of trans- 
actions. For example, risks related to the occurrence of sales may be greater than risks 
related to accuracy of sales. Let’s walk through the illustration point by point: 


* The first row in the table shows the differences among cycles in the frequency 
and size of expected misstatements (A). Almost no misstatements are expected 
in payroll and personnel, but many are expected in inventory and warehousing. 
It is possible that the payroll transactions are routine, while considerable com- 
plexities exist in recording and valuing inventory. 

¢ Similarly, internal control is believed to differ in effectiveness among the five cycles 
(B). For example, internal controls in payroll and personnel are considered highly 
effective, whereas those in inventory and warehousing are considered ineffective. 

* Finally, the auditor has decided on a low willingness that material misstatements 
exist after the audit is complete for all five cycles (C). It is common for auditors 
to want an equally low likelihood of misstatements for each cycle after the audit 
is finished to permit the issuance of an unmodified opinion audit report. 

* These considerations (A, B, C) affect the auditor’s decision about the appropri- 
ate nature, timing, and extent of evidence to accumulate (D). For example, be- 
cause the auditor expects few misstatements in payroll and personnel (A) and 
internal controls are effective (B), the auditor plans for less evidence (D) than for 
inventory and warehousing. 


Following is a numerical example for discussion. The numbers used are for the 
inventory and warehousing cycle in Table 9-1. 
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IR = 100% 
CR = 100% 
AAR = 5% 
PDR = —9?_ = 0501 5% 
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Note that the assessments in Table 9-1 are not in numerical form. Although risk 
model assessments may be quantitative or nonquantitative, most firms prefer non- 
quantitative assessments of risk (such as low, moderate, and high) due to the difficulty 
in precisely quantifying measures of risk. 

Each of the four risks in the audit risk model is sufficiently important to merit 
detailed discussion. This section briefly discusses all four to provide an overview of 
the risks. Acceptable audit risk and inherent risk are discussed in greater detail later in 
this chapter. Control risk is examined more fully in Chapter 12. 


Planned detection risk is the risk that audit evidence for an audit objective will fail to 
detect misstatements exceeding performance materiality. There are two key points to 
know about planned detection risk. 

Planned detection risk is dependent on the other three factors in the model. It will 
change only if the auditor changes one of the other risk model factors. 

Planned detection risk determines the amount of substantive evidence that the 
auditor plans to accumulate, inversely with the size of planned detection risk. If 
planned detection risk is reduced, the auditor needs to accumulate more evidence to 
achieve the reduced planned risk. For example, in Table 9-1, planned detection risk (D) 
is low for inventory and warehousing, which causes planned evidence to be high. The 
opposite is true for payroll and personnel. 

In the preceding numerical example, the planned detection risk (PDR) of .05 
means the auditor plans to accumulate evidence until the risk of misstatements 
exceeding performance materiality is reduced to 5 percent. If control risk (CR) 
were .50 instead of 1.0, planned detection risk (PDR) would be .10, and planned 
evidence could therefore be reduced. 


Inherent risk measures the auditor’s assessment of the susceptibility of an assertion 
to material misstatement, before considering the effectiveness of related internal con- 
trols. If the auditor concludes that a high likelihood of misstatement exists, the auditor 
will conclude that inherent risk is high. Internal controls are ignored in setting inher- 
ent risk because they are considered separately in the audit risk model as control risk. 
In Table 9-1, inherent risk (A) was assessed high for acquisitions and payments and 
inventory and warehousing and lower for payroll and personnel and capital acquisi- 
tion and repayment. Such assessments are typically based on discussions with man- 
agement, knowledge of the company, and results in audits of previous years. 

Inherent risk is inversely related to planned detection risk and directly related to 
evidence. Inherent risk for inventory and warehousing in Table 9-1 is high, which 
results in a lower planned detection risk and more planned evidence than if inherent 
risk were lower. We'll examine this in greater detail later in the chapter. 

In addition to increasing audit evidence for a higher inherent risk in a given audit 
area, auditors commonly assign more experienced staff to that area and review the 
completed audit tests more thoroughly. For example, if inherent risk for inventory 
obsolescence is extremely high, it makes sense for the CPA firm to assign an experi- 
enced staff person to perform more extensive tests for inventory obsolescence and to 
more carefully review the audit results. 


Control risk measures the auditor’s assessment of the risk that a material mis- 
statement could occur in an assertion and not be prevented or detected on a timely 
basis by the client’s internal controls. Assume that the auditor concludes that inter- 
nal controls are completely ineffective to prevent or detect misstatements. That is 
the likely conclusion for inventory and warehousing (B) in Table 9-1. The auditor 
will therefore assign a high, perhaps 100 percent, risk factor to control risk. The 
more effective the internal controls, the lower the risk factor that can be assigned 
to control risk. 
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The audit risk model shows the close relationship between inherent and control 
risks. For example, an inherent risk of 40 percent and a control risk of 60 percent 
affect planned detection risk and planned evidence the same as an inherent risk of 60 
percent and a control risk of 40 percent. In both cases, multiplying IR by CR results 
in a denominator in the audit risk model of 24 percent. The risk of material misstate- 
ment reflects the combined effect of inherent risk and control risk. The auditor may 
make a combined assessment of the risk of material misstatements or the auditor can 
separately assess inherent risk and control risk. (Remember, inherent risk is the expec- 
tation of misstatements before considering the effect of internal control.) 

As with inherent risk, the relationship between control risk and planned detec- 
tion risk is inverse, whereas the relationship between control risk and substantive 
evidence is direct. If the auditor concludes that internal controls are effective, planned 
detection risk can be increased and evidence therefore decreased. The auditor can 
increase planned detection risk when controls are effective because effective internal 
controls reduce the likelihood of misstatements in the financial statements. 

Before auditors can set control risk less than 100 percent, they must obtain an 
understanding of internal control, evaluate how well it should function based on the 
understanding, and test the internal controls for effectiveness. Obtaining an under- 
standing of internal control is required for all audits. The latter two are assessment of 
control risk steps that are required only when the auditor assesses control risk below 
maximum. 

Auditors of larger public companies choose to rely extensively on controls 
because they must test the effectiveness of internal control over financial reporting 
to satisfy Sarbanes—Oxley Act requirements. Auditors of other companies and other 
types of entities are also likely to rely on controls that are effective, especially when 
day-to-day transaction processing involves highly automated procedures. When con- 
trols are likely to be ineffective and inherent risk is high, the use of the audit risk model 
causes the auditor to decrease planned detection risk and thereby increase planned 
evidence. We devote Chapters 11 and 12 to understanding internal control, assessing 
control risk, and evaluating their impact on evidence requirements. 


Acceptable audit risk is a measure of how willing the auditor is to accept that the 
financial statements may be materially misstated after the audit is completed and an 
unmodified opinion has been issued. When auditors decide on a lower acceptable 
audit risk, they want to be more certain that the financial statements are not materi- 
ally misstated. Zero risk is certainty, and a 100 percent risk is complete uncertainty. 
Complete assurance (zero risk) of the accuracy of the financial statements is not 
economically practical. Moreover, as we discussed in Chapter 6, the auditor cannot 
guarantee the complete absence of material misstatements. 

Often, auditors refer to the term audit assurance (also called overall assurance or 
level of assurance) instead of acceptable audit risk. Audit assurance or any of the equiva- 
lent terms is the complement of acceptable audit risk, that is, one minus acceptable 
audit risk. In other words, acceptable audit risk of 2 percent is the same as audit assur- 
ance of 98 percent. 

The concept of acceptable audit risk can be more easily understood by think- 
ing in terms of a large number of audits, say, 10,000. What portion of these audits 
can include material misstatements without having an adverse effect on society? 
Certainly, the portion is below 10 percent. It is probably much closer to 1 percent or 
less. If an auditor believes that the appropriate percentage is 1 percent, then accept- 
able audit risk should be set at 1 percent, or perhaps lower, based on the specific 
circumstances. 

When employing the audit risk model, there is a direct relationship between 
acceptable audit risk and planned detection risk, and an inverse relationship between 
acceptable audit risk and planned evidence. If the auditor decides to reduce acceptable 


audit risk, planned detection risk is thereby reduced, and planned evidence must be 
increased. For a client with lower acceptable audit risk, auditors also often assign more 
experienced staff or review the audit files more extensively. 


There are important distinctions in how the auditor assesses the four risk factors in 
the audit risk model. For acceptable audit risk, the auditor decides the risk the CPA 
firm is willing to take that the financial statements are misstated after the audit is 
completed, based on certain client-related factors. An example of a client where the 
auditor will accept very little risk (low acceptable audit risk) is for an initial public 
offering. We will discuss factors affecting acceptable audit risk shortly. Inherent risk 
and control risk are based on auditors’ expectations or predictions of client condi- 
tions. An example of a high inherent risk is inventory that has not been sold for two 
years. An example of a low control risk is adequate separation of duties between as- 
set custody and accounting. The auditor cannot change these client conditions, but 
can only make a likelihood assessment. Inherent risk factors are discussed later in the 
chapter and control risk is covered more fully in Chapter 12. Detection risk is depen- 
dent completely on the other three risks. It can be determined only after the auditor 
assesses the other three risks. 


Distinction Among Risks 
in the Audit Risk Model 


ASSESSING ACCEPTABLE AUDIT RISK 
Auditors must decide the appropriate acceptable audit risk for an audit, preferably OBJECTIVE 9-6 


during audit planning. First, auditors decide engagement risk and then use engage- “ , sa 
; : ose ssess acceptable audit risk. 
ment risk to modify acceptable audit risk. 
Engagement risk is the risk that the auditor or audit firm will suffer harm after 
the audit is finished, even though the audit report was correct. Engagement risk is 
closely related to client business risk, which was discussed in Chapter 8. For example, 
if a client declares bankruptcy after an audit is complete, the likelihood of a lawsuit 
against the CPA firm is reasonably high, even if the quality of the audit was high. 

It is worth noting that auditors disagree about whether engagement risk should be 
considered in planning the audit. Opponents of modifying evidence for engagement 
risk contend that auditors do not provide audit opinions for different levels of assur- 
ance and therefore should not provide more or less assurance because of engagement 
risk. Proponents contend that it is appropriate for auditors to accumulate additional 
evidence, assign more experienced personnel, and review the audit more thoroughly 
on audits where legal exposure is high or other potential adverse actions affecting the 
auditor exist, as long as the assurance level is not decreased below a reasonably high 
level when low engagement risk exists. 


Impact of Engagement 
Risk on Acceptable 
Audit Risk 


When auditors modify evidence for engagement risk, it is done by control of accept- 
able audit risk. We believe that a reasonably low acceptable audit risk is always desir- 
able, but in some circumstances an even lower risk is needed because of engagement 
risk factors. Research points to several factors affecting engagement risk and, there- 
fore, acceptable audit risk. Only three of those are discussed here: the degree to which 
external users rely on the statements, the likelihood that a client will have financial 
difficulties after the audit report is issued, and the integrity of management. 


Factors Affecting 
Acceptable Audit Risk 


The Degree to Which External Users Rely on the Statements When external 
users place heavy reliance on the financial statements, it is appropriate to decrease 
acceptable audit risk. When the statements are heavily relied on, a great social harm 
can result if a significant misstatement remains undetected in the financial state- 
ments. Auditors can more easily justify the cost of additional evidence when the loss 
to users from material misstatements is substantial. Several factors are good indica- 
tors of the degree to which statements are relied on by external users: 
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* Client’s size. Generally speaking, the larger a client’s operations, the more widely 
the statements are used. The client’s size, measured by total assets or total rev- 
enues, will have an effect on acceptable audit risk. 

¢ Distribution of ownership. The statements of publicly held corporations are nor- 
mally relied on by many more users than are those of closely held corporations. 
For these companies, the interested parties include the SEC, financial analysts, 
and the general public. 

* Nature and amount of liabilities. When statements include a large amount of liabil- 
ities, they are more likely to be used extensively by actual and potential creditors 
than when there are few liabilities. 


The Likelihood That a Client Will Have Financial Difficulties After the Audit 
Report Is Issued If a client is forced to file for bankruptcy or suffers a significant 
loss after completion of the audit, auditors face a greater chance of being required to 
defend the quality of the audit than if the client were under no financial strain. The 
natural tendency for those who lose money in a bankruptcy, or because of a stock 
price reversal, is to file suit against the auditor. This can result both from the honest 
belief that the auditor failed to conduct an adequate audit and from the users’ desire to 
recover part of their loss regardless of the adequacy of the audit work. 

In situations in which the auditor believes the chance of financial failure or loss is high 
and a corresponding increase in engagement risk occurs, acceptable audit risk should be 
reduced. If a subsequent challenge occurs, the auditor will thus be in a better position to 
defend the audit results successfully. Total audit evidence and costs will increase, but this 
is justifiable because of the additional risk of lawsuits that the auditor faces. 

It is difficult for an auditor to predict financial failure before it occurs, but certain 
factors are good indicators of its increased probability: 


* Liquidity position. If a client is constantly short of cash and working capital, it 
indicates a future problem in paying bills. The auditor must assess the likeli- 
hood and significance of a steadily declining liquidity position. 

* Profits (losses) in previous years. When a company has rapidly declining profits or 
increasing losses for several years, the auditor should recognize the future sol- 
vency problems that the client is likely to encounter. It is also important to con- 
sider the changing profits relative to the balance remaining in retained earnings. 

° Method of financing growth. The more a client relies on debt as a means of financ- 
ing, the greater the risk of financial difficulty if the client’s operating success 
declines. Auditors should evaluate whether fixed assets are being financed with 
short- or long-term loans, as large amounts of required cash outflows during a 
short time can force a company into bankruptcy. 

° Nature of the client’s operations. Certain types of businesses are inherently riskier 
than others. For example, other things being equal, a start-up technology com- 
pany dependent on one product is much more likely to go bankrupt than a 
diversified food manufacturer. 

* Competence of management. Competent management is constantly alert for 
potential financial difficulties and modifies its operating methods to minimize 
the effects of short-run problems. Auditors must assess the ability of manage- 
ment as a part of the evaluation of the likelihood of bankruptcy. 


The Auditor’s Evaluation of Management’s Integrity As we discussed in 
Chapter 8, as a part of new client investigation and continuing client evaluation, if 
a client has questionable integrity, the auditor is likely to assess a lower acceptable 
audit risk. Companies with low integrity often conduct their business affairs in a 
manner that results in conflicts with their stockholders, regulators, and custom- 
ers. In turn, these conflicts often reflect on the users’ perceived quality of the audit 
and can result in lawsuits and other disagreements. A prior criminal conviction of 
key management personnel is an obvious example of questionable management 


GROUPON: A 
LIGHTNING-ROD 
CLIENT 


Groupon, Inc., started in 2008, is an Internet-based 
local marketplace that connects merchants to con- 
sumers by offering goods and services at a discount. 
The company has grown rapidly since its formation 
in October 2008. However, when the company 
was going public in 2011, it would have been clas- 
sified as an audit client with high inherent risk: an 
Internet-based business model, an upcoming initial 
public offering (IPO), top management turnover, low 
working capital, and aggressive accounting practices, 
just to mention a few of the indicators. 

Groupon offers deep-discount deals online 
for local and national retailers. When a customer 
purchases a deal, Groupon keeps a portion of 
the proceeds and forwards the remainder on to 
the retailer. Prior to going public, Groupon re- 
corded revenue for the entire amount of proceeds 
received despite owing a portion to the retailer, 
an aggressive practice that was deemed accept- 
able by their auditors, but ultimately found not 
acceptable by the SEC. The SEC forced Groupon 
to amend its registration statement prior to their 
IPO and reduce sales revenue by approximately 
50 percent. In fact, Groupon had to amend its reg- 
istration statement eight times before it eventually 


went public in November 2011. The SEC also 
disagreed with the Company’s inclusion of a non- 
GAAP income measure in their registration state- 
ment. Groupon touted “adjusted consolidated 
segment operating income,” which was essentially 
income before selling, general and administra- 
tive expenses, which the SEC understandably 
argued was misleading to potential investors. 
Their financial reporting troubles did not end 
with the IPO. The company had to revise its 
fourth-quarter 2011 earnings release prior to 
issuing audited results for the year because they 
failed to sufficiently reserve for customer refunds 
on higher-priced items. Company management 
also reported a material weakness in internal 
control in their 2011 financial statements. All of 
this led to an investor lawsuit against Groupon, 
and a drop in stock price, in April 2012. The 
news headline that followed was appropriate: 
“GRPN is Now Half Price Without a Groupon.” 


Sources: |. Francine McKenna, ““Groupon: Ernst & Young's 
Accounting Challenged Client,” Forbes (April 23, 2012); 
2. Joan Lappin, “GRPN is Now Half Price Without a 
Groupon,” Forbes.com (April 23, 2012). 


integrity. Other examples of questionable integrity might include frequent dis- 
agreements with previous auditors, the Internal Revenue Service, and the SEC. 
Frequent turnover of key financial and internal audit personnel and ongoing con- 
flicts with labor unions and employees may also indicate integrity problems. 


To assess acceptable audit risk, the auditor must first assess each of the factors affect- 
ing acceptable audit risk. Table 9-2 illustrates the methods used by auditors to assess 
each of the three factors already discussed. After examining Table 9-2, it is easy to 
observe that the assessment of each of the factors is highly subjective, meaning overall 
assessment of acceptable audit risk is also highly subjective. A typical evaluation of 
acceptable audit risk is high, medium, or low, where a low acceptable audit risk assess- 
ment means a “risky” client requiring more extensive evidence, assignment of more 
experienced personnel, and/or a more extensive review of audit documentation. As 
the engagement progresses, auditors obtain additional information about the client, 
and acceptable audit risk may be modified. 


Making the Acceptable 
Audit Risk Decision 


\:/0 ee ~Methods Practitioners Use to Assess Acceptable Audit Risk 


Factors 


Methods Used to Assess Acceptable Audit Risk 


External users’ reliance 
on financial statements 


Examine the financial statements, including footnotes, such as the Form 10-K 
for a publicly held company. 


* Read minutes of board of directors meetings to determine future plans. 
* Read financial analysts’ reports for a publicly held company. 
* Discuss financing plans with management. 


Likelihood of financial ° Analyze the financial statements for financial difficulties using ratios and 
difficulties other analytical procedures. 
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¢ Examine historical and projected cash flow statements for the nature of cash 
inflows and outflows. 


Management integrity ° Follow the procedures discussed in Chapter 8 for client acceptance and 
continuance. 
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ASSESSING INHERENT RISK 


Consider the impact of several 
factors on the assessment of 
inherent risk. 


Factors Affecting 
Inherent Risk 


Accept client and 
perform 
initial audit planning 
Understand the 
client’s business 
and industry 


Perform preliminary 
analytical procedures 


Set preliminary 
judgment of 
materiality and 
performance materiality 


Ss a 


Identify significant 
risks due to fraud or error 


Assess inherent risk 


Understand 
internal control and 
assess control risk 


ee 


Finalize overall audit 
strategy and audit plan 
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The inclusion of inherent risk in the audit risk model indicates that auditors should 
attempt to predict where misstatements are most and least likely in the finan- 
cial statement segments. This information affects the amount of evidence that 
the auditor needs to accumulate, the assignment of staff, and the review of audit 
documentation. 


The auditor must assess the factors that make up the risk and modify audit evidence to 
take them into consideration. The auditor should consider several major factors when 
assessing inherent risk: 


« Nature of the client’s business 

* Results of previous audits 

* Initial versus repeat engagement 

* Related parties 

* Complex or nonroutine transactions 

¢ Judgment required to correctly record account balances and transactions 
* Makeup of the population 

* Factors related to fraudulent financial reporting 

¢ Factors related to misappropriation of assets 


Nature of the Client’s Business Inherent risk for certain audit objectives is affected 
by the nature of the client’s business. For example, an electronics manufacturer faces 
a greater likelihood of obsolete inventory than a steel fabricator does. Inherent risk is 
most likely to vary from business to business for accounts such as inventory, accounts 
and loans receivable, investments, and property, plant, and equipment. The nature of 
the client’s business should have little or no effect on inherent risk for accounts such 
as cash, notes, and mortgages payable. Information gained while obtaining knowl- 
edge about the client’s business and industry and assessing client business risk, as 
discussed in Chapter 8, is useful for assessing this factor. 


Results of Previous Audits Misstatements found in the previous year’s audit have 
a high likelihood of occurring again in the current year’s audit, because many types 
of misstatements are systemic in nature, and organizations are often slow in mak- 
ing changes to eliminate them. Therefore, an auditor is negligent if the results of the 
preceding year’s audit are ignored during the development of the current year’s audit 
program. For example, if the auditor found significant inventory valuation misstate- 
ments in last year’s audit, the auditor will likely assess inherent risk as high in the 
current year’s audit, and extensive testing will have to be done as a means of determin- 
ing whether the deficiency in the client’s system has been corrected. If, however, the 
auditor found no misstatements for the past several years in conducting tests of an 
audit area, the auditor is justified in reducing inherent risk, provided that changes in 
relevant circumstances have not occurred. 


Initial Versus Repeat Engagement Auditors gain experience and knowledge 
about the likelihood of misstatements after auditing a client for several years. The 
lack of previous years’ audit results causes most auditors to assess a higher inherent 
risk for initial audits than for repeat engagements in which no material misstate- 
ments were previously found. Most auditors set a higher inherent risk in the first 
year of an audit and reduce it in subsequent years as they gain more knowledge 
about the client. 


Related Parties Transactions between parent and subsidiary companies, and those 
between management and the corporate entity, are examples of related party trans- 
actions as defined by accounting standards. Because these transactions do not occur 
between two independent parties dealing at “arm’s length,” a greater likelihood exists 
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that they might be misstated or inadequately disclosed, causing an increase in inher- 
ent risk.We discussed related party transactions in Chapter 8. 


Complex or Nonroutine Transactions Transactions that are unusual for a client, 
or involve lengthy or complex contracts, are more likely to be incorrectly recorded 
than routine transactions because the client often lacks experience recording them. 
Examples include fire losses, major property acquisitions, purchase of complex in- 
vestments, and restructuring changes resulting from discontinued operations. By 
knowing the client’s business and reviewing minutes of meetings, the auditor can as- 
sess the consequences of complex or nonroutine transactions. 


Judgment Required to Correctly Record Account Balances andTransactions Many 
account balances such as certain investments recorded at fair value, allowances for 
uncollectible accounts receivable, obsolete inventory, asset impairments, liability for 
warranty payments, major repairs versus partial replacement of assets, and bank loan 
loss reserves require estimates and a great deal of management judgment related to 
valuation. Because they require considerable judgment, the likelihood of misstate- 
ments increases, and as a result the auditor should increase inherent risk. 


Makeup of the Population Often, individual items making up the total population 
also affect the auditor’s expectation of material misstatement. Most auditors use a 
higher inherent risk for valuation of accounts receivable where most accounts are sig- 
nificantly overdue than where most accounts are current. Examples of items requir- 
ing a higher inherent risk include transactions with affiliated companies, amounts 
due from officers, cash disbursements made payable to cash, and accounts receivable 
outstanding for several months. These situations require greater investigation because 
of a greater likelihood of misstatement than occurs with more typical transactions. 


Factors Related to Fraudulent Financial Reporting and Misappropriation of 
Assets In Chapter 6, we discussed the auditor’s responsibilities to assess the risk of 
fraudulent financial reporting and misappropriation of assets. It is difficult in concept 
and practice to separate fraud risk factors into acceptable audit risk, inherent risk, and 
control risk. For example, management that lacks integrity and is motivated to mis- 
state financial statements is one of the factors in acceptable audit risk, but it may also 
affect control risk. Similarly, several of the other risk factors influencing management 
characteristics are a part of the control environment, as we'll discuss in Chapter 11. 
These include the attitude, actions, and policies that reflect the overall attitudes of top 
management about integrity, ethical values, and commitment to competence. 

To satisfy the requirements of auditing standards, it is more important for the 
auditor to assess the risks and to respond to them than it is to categorize them into a 
risk type. For this reason, many audit firms perform additional procedures to assess 
fraud risk beyond assessing the risk of material misstatements in relevant audit 
objectives. 

The risk of fraud should be assessed for the entire audit as well as by cycle, account, 
and objective. For example, a strong incentive for management to meet unduly aggres- 
sive earnings expectations may affect the entire audit, while the susceptibility of inven- 
tory to theft may affect only the inventory account. For both the risk of fraudulent 
financial reporting and the risk of misappropriation of assets, auditors focus on spe- 
cific areas of increased fraud risk and designing audit procedures or changing the over- 
all conduct of the audit to respond to those risks. The specific response to an identified 
risk of fraud can include revising assessments of acceptable audit risk, inherent risk, 
and control risk. Assessing fraud risk will be the focus of Chapter 10. 


The auditor must evaluate the information affecting inherent risk to assess the risk 
of material misstatements at the audit objective level for cycles, balances, and disclo- 
sures. Some factors, such as an initial versus repeat engagement, will affect many or 
perhaps all cycles, whereas others, such as nonroutine transactions, will affect only 
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Making the Inherent 
Risk Decision 


specific accounts or audit objectives. Although the profession has not established 
standards or guidelines for setting inherent risk, we believe that auditors are generally 
conservative in making such assessments. Assume that in the audit of inventory the 
auditor notes that (1) a large number of misstatements were found in the previous year 
and (2) inventory turnover has slowed in the current year. Auditors will likely set in- 
herent risk at a relatively high level (some will use 100 percent) for each audit objective 
for inventory in this situation. 


Auditors begin their assessments of inherent risk during the planning phase and up- 
date the assessments throughout the audit. Chapter 8 discussed how auditors gather 
information relevant to inherent risk assessment during the planning phase. For ex- 
ample, to obtain knowledge of the client’s business and industry, auditors may tour 
the client’s plant and offices and identify related parties. This and other information 
about the entity and its environment discussed in Chapter 8 pertain directly to assess- 
ing inherent risk. Also, several of the items discussed earlier under factors affecting 
inherent risk, such as the results of previous audits and nonroutine transactions, are 
evaluated separately to help assess inherent risk. As audit tests are performed dur- 
ing an audit, the auditor may obtain additional information that affects the original 
assessment. 


Obtain Information to 
Assess Inherent Risk 


RELATIONSHIP OF RISKS TO EVIDENCE AND FACTORS 
INFLUENCING RISKS 
OBJECTIVE9-8 Figure 9-3 summarizes factors that determine each of the risks, the effect of the three 


component risks on the determination of planned detection risk, and the relationship 
of all four risks to planned audit evidence. “D” in the figure indicates a direct relation- 
ship between a component risk and planned detection risk or planned evidence. “I” 
indicates an inverse relationship. For example, an increase in acceptable audit risk 
results in an increase in planned detection risk (D) and a decrease in planned audit 
evidence (I). Compare Figure 9-3 to Table 9-1 (p. 294) and observe that these two illus- 
trations include the same concepts. 

Auditors respond to risk primarily by changing the extent of testing and types of 
audit procedures, including incorporating unpredictability in the audit procedures 
used. In addition to modifying audit evidence, there are two other ways that auditors 
can change the audit to respond to risks: 


Discuss the relationship of risks 
to audit evidence. 


1. The engagement may require more experienced staff. CPA firms should staff all engage- 
ments with qualified staff. For low acceptable audit risk clients, special care is 
appropriate in staffing, and the importance of professional skepticism should be 
emphasized. Similarly, if an audit area such as inventory has a high inherent risk, it 
is important to assign that area to someone with experience in auditing inventory. 

2. The engagement will be reviewed more carefully than usual. CPA firms need to ensure 
adequate review of the audit files that document the auditor’s planning, evidence 
accumulation and conclusions, and other matters in the audit. When acceptable 
audit risk is low, more extensive review is often warranted, including a review by 
personnel who were not assigned to the engagement. If the risk of material mis- 
statements (the combination of inherent risk and control risk) is high for certain 
audit objectives for an account, the reviewer will likely spend more time making 
sure the evidence was appropriate and correctly evaluated. 
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The risk of material misstatements, control risk, and inherent risk are assessed for 
each audit objective in each segment of the audit. The assessments are likely to vary 
on the same audit from cycle to cycle, account to account, and objective to objective. 
For example, internal controls may be more effective for the existence of cash than for 
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Factors Influencing Risks and Relationship of Risks to 


FIGURE 7-3 Planned Evidence 


FACTORS AUDIT 
INFLUENCING RISKS EVIDENCE 


° Reliance by 
external users Acceptable 

° Likelihood of audit 
financial failure risk 

° Integrity of management 


° Nature of business 
° Results of previous audits 
° Initial versus repeat 
engagement D 
° Related parties 


* Complex or 
nonroutine transactions Inherent 

° Judgment required risk 

° Makeup of population 

° Factors related to 


Planned Planned 
detection audit 
risk evidence 


: sis D 
misstatements arising from 


fraudulent financial 
reporting* 

* Susceptibility of assets to 
misappropriation* 


° Effectiveness of 
internal controls 
° Planned reliance 


Control 
risk 


D = Direct relationship; | = Inverse relationship 
*Fraud risk factors. These may also affect acceptable audit risk and control risk. 


those related to fixed asset accuracy or net realizable value audit objectives. Control 
risk will therefore be lower for the existence of cash than for fixed asset valuation. 
Factors affecting inherent risk, such as susceptibility to misappropriation of assets 
and routineness of the transactions, are also likely to differ from account to account 
or among audit objectives for a single account. For that reason, it is normal to have 
inherent risk vary for different accounts in the same audit. 

Acceptable audit risk is ordinarily assessed by the auditor during planning and 
held constant for each major cycle and account. Auditors normally use the same 
acceptable audit risk for each segment because the factors affecting acceptable audit 
risk are related to the entire audit, not individual accounts. For example, the extent to 
which external users’ decisions rely upon financial statements is usually related to the 
overall financial statements, not just one or two accounts. 

In some cases, however, a lower acceptable audit risk may be more appropriate for 
one account than for others. If an auditor decided to use a medium acceptable audit 
risk for the audit as a whole, the auditor might decide to reduce acceptable audit risk 
to low for inventory if inventory is used as collateral for a short-term loan. 

Some auditors use the same acceptable audit risk for all segments based on their 
belief that at the end of the audit, financial statement users should have the same level 
of assurance for every segment of the financial statements. Other auditors use a differ- 
ent level of assurance for different segments based on their belief that financial state- 
ment users may be more concerned about certain account balances relative to other 
accounts in a given audit. For illustrations in this and subsequent chapters, we use the 
same acceptable audit risk for all segments in the audit. Note, however, that changing 
the risk for different segments is also acceptable. 
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Like control risk and inherent risk, planned detection risk and required audit 
evidence will vary from cycle to cycle, account to account, or audit objective to audit 
objective. This conclusion should not be surprising. As the circumstances of each 
engagement differ, the extent and nature of evidence needed will depend on the 
unique circumstances. For example, inventory might require extensive testing on an 
engagement because of deficient internal controls and the auditor’s concerns about 
obsolescence resulting from technological changes in the industry. On the same 
engagement, accounts receivable may require little testing because of effective inter- 
nal controls, fast collection of receivables, excellent relationships between the client 
and customers, and good audit results in previous years. Similarly, for a given audit of 
inventory, an auditor may assess a higher inherent risk of a realizable value misstate- 
ment because of the higher potential for obsolescence but a low inherent risk of a clas- 
sification misstatement because there is only purchased inventory. 


Chapter 8 discussed the process of allocating the preliminary judgment about mate- 
riality to segments. Although it is common in practice to assess inherent and control 
risks for each balance-related audit objective, it is not common to allocate materiality 
to those objectives. Auditors are able to effectively associate most risks with different 
objectives, and it is reasonably easy to determine the relationship between a risk and 
one or two objectives. For example, obsolescence in inventory is unlikely to affect 
any objective other than realizable value. It is more difficult to decide how much of 
the materiality allocated to a given account should in turn be allocated to one or two 
objectives. Therefore, most auditors do not attempt to do so. 


One major limitation in the application of the audit risk model is the difficulty of 
measuring the components of the model. Despite the auditor’s best efforts in plan- 
ning, the assessments of acceptable audit risk, inherent risk, and control risk, and 
therefore planned detection risk, are highly subjective and are only approximations of 
reality. Imagine, for example, attempting to precisely assess inherent risk by determin- 
ing the impact of factors such as the misstatements discovered in prior years’ audits 
and technology changes in the client’s industry. 

To offset this measurement problem, many auditors use broad and subjective 
measurement terms, such as low, medium, and high. As Table 9-3 shows, auditors can 
use this information to decide on the appropriate amount and types of evidence to 
accumulate. For example, in situation 1, the auditor has decided on a high acceptable 
audit risk for an account or objective. The auditor has concluded a low risk of mis- 
statement in the financial statements exists and that internal controls are effective. 
Therefore, a high planned detection risk is appropriate. As a result, a low level of evi- 
dence is needed. Situation 3 is at the opposite extreme. If both inherent and control 
risks are high and the auditor wants a low acceptable audit risk, considerable evidence 
is required. The other three situations fall between these two extremes. 

It is equally difficult to measure the amount of evidence implied by a given 
planned detection risk. A typical audit program intended to reduce detection risk to 
the planned level is a combination of several audit procedures, each using a different 
type of evidence that is applied to different audit objectives. Auditors’ measurement 
methods are too imprecise to permit an accurate quantitative measure of the com- 
bined evidence. Instead, auditors subjectively evaluate whether sufficient appropriate 
evidence has been planned to satisfy a planned detection risk of low, medium, or high. 
Presumably, measurement methods are sufficient to permit an auditor to determine 
whether more or different types of evidence are needed to satisfy a low planned detec- 
tion risk than for medium or high. Considerable professional judgment is needed to 
decide how much more. 

In applying the audit risk model, auditors are concerned about both over- 
auditing and under-auditing. Most auditors are more concerned about the latter, as 
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TABLE 9-3 Relationships of Risk to Evidence 


Acceptable Inherent Control Planned Amount of Evidence 
Situation Audit Risk Risk Risk Detection Risk Required 


I High Low Low High Low 
2 Low Low Low Medium Medium 
3 Low High High Low High 
4 Medium Medium Medium Medium Medium 
5 High Low Medium Medium Medium 


under-auditing exposes the CPA firm to legal liability and loss of professional reputa- 
tion. Because of the concern to avoid under-auditing, auditors typically assess risks 
conservatively. For example, an auditor might not assess either control risk or inher- 
ent risk below .5 even when the likelihood of misstatement is low. In these audits, a 
low risk might be .5, medium .8, and high 1.0, if the risks are quantified. 


Auditors develop various types of decision aids to help link judgments affecting 
audit evidence with the appropriate evidence to accumulate. One such worksheet 
is included in Figure 9-4 (p. 306) for the audit of accounts receivable for Hillsburg 
Hardware Co. The eight balance-related audit objectives introduced in Chapter 6 are 
included in the columns at the top of the worksheet to help ensure the auditor con- 
siders risks related to all the relevant balance-related assertions. Rows one and two 
are acceptable audit risk and inherent risk. Performance materiality for accounts re- 
ceivable is included at the bottom of the worksheet. The engagement in-charge, Fran 
Moore, made the following decisions in the audit of Hillsburg Hardware Co.: 


° Performance materiality. The preliminary judgment about materiality for the fi- 
nancial statements as a whole was set at $442,000 (approximately 6 percent of 
earnings from operations of $7,370,000). She allocated $265,000 to the audit of 
accounts receivable (see Figure 8-7 on page 264). 

* Acceptable audit risk. Moore assessed acceptable audit risk as medium because 
the company is publicly traded, but is in good financial condition, and has high 
management integrity. Although Hillsburg is a publicly traded company, its 
stock is not widely held or extensively followed by financial analysts. 

¢ Inherent risk. Moore assessed inherent risk as medium for existence and cutoff 
because of concerns over revenue recognition. Moore also assessed inherent 
risk as medium for realizable value. In past years, audit adjustments to the al- 
lowance for uncollectible accounts were made because it was found to be un- 
derstated. Inherent risk was assessed as low for all other objectives. 


Planned detection risk would be approximately the same for each balance-related 
audit objective in the audit of accounts receivable for Hillsburg Hardware Co. if the 
only three factors the auditor needed to consider were acceptable audit risk, inherent 
risk, and performance materiality. The evidence-planning worksheet shows that other 
factors must also be considered before making the final evidence decisions. (These 
are studied in subsequent chapters and will be integrated into the evidence-planning 
worksheet at that time.) 


The audit risk model is primarily a planning model and is, therefore, of limited use 
in evaluating results. No difficulties occur when the auditor accumulates planned 
evidence and concludes that the assessment of each of the risks was reasonable or 
better than originally thought. The auditor will conclude that sufficient appropriate 
evidence has been collected for the audit objectives related to that account or cycle. 
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Evidence-Planning Worksheet to Decide Tests of Details of Balances 
for Hillsburg Hardware Co.—Accounts Receivable 


FIGURE 9-4 


Realizable value 


Detail tie-in 
Existence 
Classification 


Completeness 
Accuracy 


Acceptable audit risk | Medium Medium Medium Medium Medium Medium Medium Medium 


Inherent risk Low Medium Low Low Low Medium Medium Low 


Control risk—Sales 


Control risk— 
Cash receipts 


Control risk— 
Additional controls 


Substantive tests of 
transactions—Sales 


Substantive tests of 
transactions— 
Cash receipts 


Substantive 
analytical procedures 


Planned detection 
risk for tests of 
details of balances 


Planned audit 
evidence for tests of 
details of balances 


Performance materiality $265,000 


However, special care must be exercised when the auditor decides, on the basis 
of accumulated evidence, that the original assessment of control risk or inherent risk 
was understated or acceptable audit risk was overstated. In such a circumstance, the 
auditor should follow a two-step approach. 


1. The auditor must revise the original assessment of the appropriate risk. It violates 
due care to leave the original assessment unchanged if the auditor knows it is 
inappropriate. 

2. The auditor should consider the effect of the revision on evidence requirements, 
without use of the audit risk model. If a revised risk is used in the audit risk model to 
determine a revised planned detection risk, there is a danger of not increasing the 
evidence sufficiently. Instead, the auditor should carefully evaluate the implications 
of the revision of the risk and modify evidence appropriately, outside of the audit risk 
model. 
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and carefully consider the effect of the revision on the additional evidence needed in 
the audit of receivables and the sales and collection cycle. Based on the results of the 
additional tests performed, the auditor should carefully evaluate whether sufficient 
appropriate evidence has been gathered in the circumstances to reduce audit risk to an 
acceptable level. 


RELATIONSHIP OF RISK AND MATERIALITY 
TO AUDIT EVIDENCE 
The concepts of materiality and risk in auditing are closely related and inseparable. OBJECTIVE 9-9 


Risk is a measure of uncertainty, whereas materiality is a measure of magnitude or ph .-- << how materiali eon 
size. Taken together, they measure the uncertainty of amounts of a given magnitude. ig are related and integrated 
For example, the statement that the auditor plans to accumulate evidence such that _ into the audit process. 
there is only a 5 percent risk (acceptable audit risk) of failing to uncover misstatements 
exceeding performance materiality of $265,000 is a precise and meaningful statement. 
If the statement eliminates either the risk or materiality portion, it is meaningless. A 
5 percent risk without a specific materiality measure could imply that a $100 or 
$1 million misstatement is acceptable. A $265,000 overstatement without a specific 
risk could imply that a 1 percent or 80 percent risk is acceptable. 
The relationships among performance materiality and the four risks to planned 
audit evidence are shown in Figure 9-5. This figure expands Figure 9-4 by including 
performance materiality. Observe that performance materiality does not affect any 
of the four risks, and the risks have no effect on performance materiality, but together 
they determine planned evidence. Stated differently, performance materiality is not a 
part of the audit risk model, but the combination of performance materiality and the 
audit risk model factors determines planned audit evidence. 


FIGURE 9-5 Relationship of Performance Materiality and Risks 
to Planned Evidence 


PERFORMANCE MATERIALITY PLANNED 
AND RISKS AUDIT EVIDENCE 


Acceptable 
audit risk 


Inherent Planned Planned 
risk detection risk audit evidence 


D 


Control 
risk 


Performance 
materiality 
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“CONCEPT CHECK 
I. Define the audit risk model and explain each term in the model. 
2. Explain the causes of an increased or decreased planned detection risk. 


SUMMARY 


Because the auditor’s opinion addresses whether the financial statements are free of ma- 
terial misstatements, audit planning hinges on effective assessments of the risk of mate- 
rial misstatements at both the overall financial statement level and at the assertion level. 
While auditors accept some level of uncertainty in performing the audit function, the 
consideration of risk as defined by the audit risk model is necessary for the auditor to ef- 
fectively address those risks in the most appropriate manner. Using the audit risk model 
and performance materiality for each audit objective, the auditor determines the audit 
evidence needed to achieve an acceptable level of audit risk for the financial statements 


as a whole. 


ESSENTIAL TERMS 


Acceptable audit risk—a measure of 
how willing the auditor is to accept that 
the financial statements may be materi- 
ally misstated after the audit is completed 
and an unmodified audit opinion has been 
issued; see also audit assurance 


Audit assurance—a complement to 
acceptable audit risk; an acceptable audit 
risk of two percent is the same as audit 
assurance of 98 percent; also called overall 
assurance and level of assurance 


Audit risk model—a formal model 
reflecting the relationships between 
acceptable audit risk (AAR), inherent risk 
(IR), control risk (CR), and planned detec- 
tion risk (PDR); PDR = AAR|(IR * CR) 


Control risk—a measure of the auditor’s 
assessment of the risk that a material mis- 
statement could occur in an assertion and 
not be prevented or detected on a timely 
basis by the client’s internal controls 


Engagement risk—the risk that the audi- 
tor or audit firm will suffer harm because 
of a client relationship, even though the 


audit report rendered for the client was 
correct 


Inherent risk—a measure of the audi- 
tor’s assessment of the susceptibility of an 
assertion to material misstatement before 
considering the effectiveness of internal 
control 


Nonroutine transaction—a transaction 
that is unusual, either due to size or nature, 
and that is infrequent in occurrence 


Planned detection risk—a measure of 
the risk that audit evidence for a segment 
will fail to detect misstatements that could 
be material, should such misstatements 
exist; PDR = AAR|(IR CR) 


Risk—the acceptance by auditors that 
there is some level of uncertainty in per- 
forming the audit function 


Significant risk—an identified and as- 
sessed risk of material misstatement that, 
in the auditor’s professional judgment, 
requires special audit consideration 


REVIEW QUESTIONS 


9-1 (OBJECTIVE 9-1) Chapter 8 introduced the eight parts of the planning phase of an audit. 
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Which parts involve the evaluation of risk? 


9-2 (OBJECTIVE 9-1) Why is it important for the auditor to consider the risk of material mis- 
statement at the overall financial statement level? 


9-3 (OBJECTIVE 9-1) Identify risk of material misstatement at the assertion level. 
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9-4 (OBJECTIVE 9-1) Assume that you are concerned that your client has recorded revenues 
that did not occur. What audit objective would you assess as having a high risk of material 
misstatement? 


9-5 (OBJECTIVE 9-2) Describe the types of procedures auditors perform as part of their risk 
assessment procedures. 


9-6 (OBJECTIVE 9-2) Distinguish the different types of risk assessment procedures. 


9-7 (OBJECTIVE 9-2) Auditing standards require that the engagement team members engage 
in discussion about the risk of material misstatement. Describe the nature of this required 
discussion and who should be involved. 


9-8 (OBJECTIVE 9-2) Auditing standards require that the engagement team members engage 
in discussion about the susceptibility of the financial statements to the risk of fraud. 
How does this discussion relate to the required discussion about the risk of material 
misstatement? 


9-9 (OBJECTIVE 9-3) Why is it important to distinguish the auditor’s assessment of the 
risk of material misstatement due to fraud from the assessment of the risk of material 
misstatement due to error? 


9-10 (OBJECTIVE 9-3) How should the auditor consider risks related to revenue recognition 
when assessing the risk of material misstatement due to fraud? 


9-11 (OBJECTIVE 9-3) What types of inquiries should the auditor make when considering 
the risk of material misstatement due to fraud? 


9-12 (OBJECTIVE 9-4) What constitutes a significant risk? 


9-13 (OBJECTIVE 9-4) Describe the auditor’s responsibility to identify significant non-routine 
transactions. 


9-14 (OBJECTIVE 9-5) Describe which two factors of the audit risk model relate to the risk of 
material misstatement at the assertion level. 


9-15 (OBJECTIVE 9-5) Explain the causes of an increased or decreased planned detection 
risk. 


9-16 (OBJECTIVES 9-5, 9-7) Define what is meant by audit assurance. Identify the impact of 
related parties on the assessment of inherent risk. 


9-17 (OBJECTIVE 9-7) Explain why inherent risk is set for audit objectives for segments 
(classes of transactions, balances, and presentation and disclosure) rather than for the 
overall audit. What is the effect on the amount of evidence the auditor must accumulate 
when inherent risk is increased from medium to high for an audit objective? 


9-18 (OBJECTIVE 9-7) Explain the effect of extensive misstatements found in the prior year’s 
audit on inherent risk, planned detection risk, and planned audit evidence. 


9-19 (OBJECTIVES 9-5, 9-6) Explain the impact of engagement risk on acceptable audit risk. 


9-20 (OBJECTIVE 9-6) Explain the relationship between acceptable audit risk and the legal 
liability of auditors. 


9-21 (OBJECTIVE 9-5) Explain why there is an inverse relationship between planned detec- 
tion risk and the amount of evidence an auditor collects for a specific audit objective. 


9-22 (OBJECTIVE 9-8) Auditors have not been successful in measuring the components of 
the audit risk model. How is it possible to use the model in a meaningful way without a 
precise way of measuring the risk? 


9-23 (OBJECTIVE 9-9) Explain the circumstances when the auditor should revise the compo- 
nents of the audit risk model and the effect of the revisions on planned detection risk and 
planned evidence. 


9-24 (OBJECTIVE 9-9) Explain how audit risk and materiality are related and why they need 
to be considered together in planning an audit. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


9-25 (OBJECTIVES 9-1, 9-3, 9-4) The following questions concern the assessment of the risk of 
material misstatements. Choose the best response. 


a. Which of the following circumstances most likely would cause the auditor to suspect 

that there are material misstatements in the entity’s financial statements? 

(1) The entity’s management places no emphasis on meeting publicized earnings 
projections. 

(2) Significant differences between the physical inventory count and the accounting 
records are not investigated. 

(3) Monthly bank reconciliations ordinarily include several large outstanding 
checks. 

(4) Cash transactions are electronically processed and recorded, leaving no paper 
audit trail. 


b. Which of the following statements describes why a properly designed and executed 
audit may not detect a material misstatement in the financial statements resulting 
from fraud? 

(1) Audit procedures that are effective for detecting an unintentional misstatement 
may be ineffective for an intentional misstatement that is concealed through 
collusion. 

(2) An audit is designed to provide reasonable assurance of detecting material 
errors, but there is no similar responsibility concerning fraud. 

(3) The factors considered in assessing control risk indicated an increased risk of 
intentional misstatements, but only a low risk of unintentional errors in the 
financial statements. 

(4) The auditor did not consider factors influencing audit risk for account balances 
that have effects pervasive to the financial statements as a whole. 


c. Prior to, or in conjunction with, the information-gathering procedures for an audit, 
audit team members should discuss the potential for material misstatement due to 
fraud. Which of the following best characterizes the mindset that the audit team 
should maintain during this discussion? 

(1) Presumptive 
(2) Judgmental 
(3) Criticizing 
(4) Questioning 

9-26 (OBJECTIVES 9-5, 9-7) The following questions concern the audit risk model. Choose the 

best response. 


a. Some account balances, such as those for pensions and leases, are the result of 
complex calculations. The susceptibility to material misstatements in these types of 
accounts is defined as 
(1) audit risk. 

(2) detection risk. 
(3) inherent risk. 
(4) sampling risk. 

b. As the acceptable level of detection risk decreases, the auditor may do one or more of 
the following except change the 
(1) nature of audit procedures to more effective procedures. 

(2) timing of audit procedures, by perhaps performing them at year-end rather than 
an interim date. 

(3) extent of audit procedures, by perhaps using larger sample sizes. 

(4) assurances provided by audit procedures to a lower level. 


c. Inherent risk and control risk differ from planned detection risk in that they 
(1) arise from the misapplication of auditing procedures. 
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(2) may be assessed in either quantitative or nonquantitative terms. 
(3) exist independently of the financial statement audit. 
(4) can be changed at the auditor’s discretion. 


9-27 (OBJECTIVE 9-8) The following questions deal with audit risk and evidence. Choose the 
best response. 


a. Which of the following does not increase the need for sufficient appropriate audit 
evidence? 
(1) A lower acceptable level of detection risk 
(2) An increase in the assessed control risk 
(3) A lower acceptable audit risk 
(4) A decrease in the assessed inherent risk 


b. As lower acceptable levels of both audit risk and materiality are established, the audi- 
tor should plan more work on individual accounts to 
(1) find smaller misstatements. 
(2) find larger misstatements. 
(3) increase the performance materiality in the accounts. 
(4) increase inherent risk in the accounts. 


c. Based on evidence gathered and evaluated, an auditor decides to increase the 
assessed level of control risk from that originally planned. To achieve an overall 
audit risk level that is substantially the same as the planned audit risk level, the 
auditor could 
(1) decrease detection risk. 

(2) increase materiality levels. 

(3) decrease substantive testing. 

(4) increase inherent risk. 
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DISCUSSION QUESTIONS AND PROBLEMS 


9-28 (OBJECTIVES 9-1, 9-2, 9-3, 9-6, 9-7, 9-9) The following are concepts discussed in Chapter 8 


and this chapter: 
1. Preliminary judgment about 7. Estimated total misstatement in a 
materiality segment 
2. Control risk 8. Planned detection risk 
3. Risk of fraud 9. Estimate of the combined misstatement 
4. Inherent risk 10. Significant risk 
5. Risk of material misstatements 11. Acceptable audit risk 
6. Known misstatement 12. Performance materiality 


Required a. Identify which items are audit planning decisions requiring professional judgment. 

b. Identify which items are audit conclusions resulting from application of audit proce- 
dures and requiring professional judgment. 

c. Under what circumstances is it acceptable to change those items in part a. after the 


audit is started? Which items can be changed after the audit is 95% completed? 


(fd 9-29 (OBJECTIVES 9-1, 9-2) This problem requires you to access PCAOB Auditing Standard 
ve) » No. 12, Identifying and Assessing Risks of Material Misstatements (pcaobus.org). Use this stan- 

dard to answer each of the questions below. For each answer, document the paragraph(s) 
in AS No. 12 supporting your answer. 


Required —a. What types of information does AS No. 12 suggest the auditor should consider when 

obtaining an understanding of the company and its environment? 

b. What types of performance measurements might affect the risk of material 
misstatement? 

c. What specific issues should be included in the discussion among engagement team 
members regarding the risk of material misstatement? 

d. What factors should the auditor consider to determine if a risk is a “significant risk”? 

e. What guidance is provided about revising the risk assessment as the audit continues? 


@@.. 9-30 (OBJECTIVES 9-1, 9-2) Banana, LLP, has served for over 60 years as the auditor of the 
00004 financial statements of ABC Bank. The firm is conducting its audit planning for the cur- 
rent fiscal year and is in the process of performing risk assessment procedures. Based 
on inquiries and other information obtained, the auditors learned that the bank is final- 
izing an acquisition of a smaller community bank located in another region of the state. 
Management anticipates that the transaction will close in the third quarter, and, while 
there will be some challenges in integrating the IT systems of the acquired bank with ABC 
systems, the bank should realize a number of operational cost savings over the long-term. 
During the past year, the bank has expanded its online service options for customers, 
who can now remotely deposit funds into and withdraw funds from checking and savings 
accounts. The system has been well received by customers and the bank hopes to continue 
expanding those services. The challenge for ABC is that they are struggling to retain IT per- 
sonnel given the strong job market for individuals with those skills. 
Credit risk management continues to be a challenge for ABC bank, and regu- 
lators continue to spend a lot of time on credit evaluation issues. The bank has a 
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dedicated underwriting staff that continually evaluates the collectability of loans out- 
standing. Unfortunately, some of the credit review staff recently left the bank to work for 
a competitor. Competition in the community banking space is tough, especially given the 
slow loan demand in the marketplace. 

The bank has expanded its investment portfolio into a number of new types of instru- 
ments subject to fair value accounting. Management has engaged an outside valuation 
expert to ensure that the valuations are properly measured and reported. 

Fortunately, the bank’s capital position is strong and it far exceeds regulatory 
minimums. Capital is available to support growth goals in the bank’s five-year strategic 
plan. 


a. Describe any risks of material misstatement at the financial statement level. 
b. Describe any risks of material misstatement at the assertion level. 
c. Which, if any, risks would be considered a significant risk? 


9-31 (OBJECTIVES 9-5, 9-6) Describe what is meant by acceptable audit risk. Explain why 
each of the following statements is true: 


a. A CPA firm should attempt to achieve the same audit risk for all audit clients when 
circumstances are similar. 

b. A CPA firm should decrease acceptable audit risk for audit clients when external 
users rely heavily on the statements. 

c. A CPA firm should decrease acceptable audit risk for audit clients when engagement 
risk is high. 

d. Different CPA firms should attempt to achieve reasonably similar audit risks for 
clients with similar circumstances. 


9-32 (OBJECTIVE 9-6) Bohrer, CPA, is considering the following factors in assessing audit 
risk at the financial statement level in planning the audit of Waste Remediation Services 
(WRS), Inc.’s financial statements for the year ended December 31, 2016. WRS is a pri- 
vately held company that contracts with municipal governments to close landfills. Audit 
risk at the financial statement level is influenced by the risk of material misstatements, 
which may be indicated by factors related to the entity, management, and the industry 
environment. 


1. This was the first year WRS operated at a profit since 2011 because the municipali- 
ties received increased federal and state funding for environmental purposes. 

2. WRS'’s Board of Directors is controlled by Tucker, the majority shareholder, who also 
acts as the chief executive officer. 

3. The internal auditor reports to the controller and the controller reports to Tucker. 

4. The accounting department has experienced a high rate of turnover of key personnel. 

5. WRS’s bank has a loan officer who meets regularly with WRS’s CEO and controller 
to monitor WRS’s financial performance. 

6. WRS’s employees are paid bi-weekly. 

7. Bohrer has audited WRS for five years. 

8. During 2016, WRS changed its method of preparing its financial statements from the 
cash basis to generally accepted accounting principles. 

9. During 2016, WRS sold one half of its controlling interest in Sanitation Equipment 
Leasing Co. (SEL). WRS retained a significant interest in SEL. 

10. During 2016, litigation filed against WRS in 2003 alleging that WRS discharged pol- 
lutants into state waterways was dropped by the state. Loss contingency disclosures 
that WRS included in prior years’ financial statements are being removed for the 
2016 financial statements. 

11. During December 2016, WRS signed a contract to lease disposal equipment from an 
entity owned by Tucker’s parents. This related party transaction is not disclosed in 
WRS'’s notes to its 2016 financial statements. 

12. During December 2016, WRS increased its casualty insurance coverage on several 
pieces of sophisticated machinery from historical cost to replacement cost. 
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Required 


13. WRS recorded a substantial increase in revenue in the fourth quarter of 2016. 
Inquiries indicated that WRS initiated a new policy and guaranteed several munici- 
palities that it would refund state and federal funding paid to WRS on behalf of the 
municipality if it failed a federal or state site inspection in 2017. 

14. An initial public offering of WRS stock is planned in 2017. 


Required For each of the 14 factors listed above, indicate whether the item would likely increase au- 
dit risk, decrease audit risk, or have no effect on audit risk.* 


9-33 (OBJECTIVES 9-5, 9-8) Following are six situations that involve the audit risk model as it 
is used for planning audit evidence requirements in the audit of inventory. 


Situation 

Risk I 2 3 4 5 6 

Acceptable audit risk High High Low Low High Medium 

Inherent risk Low High High Low Medium Medium 

Control risk Low Low High High Medium Medium 

Planned detection risk — = _ — — — 

Planned evidence = — _ — —_— —_— 
Required a. Explain what low, medium, and high mean for each of the four risks and planned evidence. 


b. Fill in the blanks for planned detection risk and planned evidence using the terms 
low, medium, or high. 

c. Using your knowledge of the relationships among the foregoing factors, state the 
effect on planned evidence (increase or decrease) of changing each of the following 
five factors, while the other three remain constant: 

(1) A decrease in acceptable audit risk 

(2) A decrease in control risk 

(3) A decrease in planned detection risk 

(4) A decrease in inherent risk 

(5) A decrease in inherent risk and an increase in control risk of the same amount 

9-34 (OBJECTIVES 9-5, 9-7, 9-8) John Peter is planning the audit of the investments account for 

audit client ABC Company. ABC invests excess cash at the end of the summer sales season 

through an investment manager who invests in equity and debt securities for ABC's 
account. John has assessed the following risks as low, medium, or high for the relevant 
balance-related audit objectives in the investment account. 


Risk of Material Misstatements 


Balance-Related Acceptable Planned 
Audit Objectives Audit Risk Inherent Risk Control Risk Detection Risk 
Existence Medium Medium Medium 

Completeness Medium Low Medium 

Accuracy Low High Medium 

Classification Medium Low Low 

Cut-off Medium Medium Low 

Detail tie-in Low Medium Low 

Realizable value Low High Medium 

Rights and obligations Medium Medium Low 


a. Describe each of the four identified risks in the columns of the table above. 

b. Fill in the blank for planned detection risk for each balance-related audit objective us- 
ing the terms low, medium, or high. 

c. Which audit objectives require the greatest amount of evidence and which require 
the least? 

d. Through audit testing, John finds the investment manager’s controls over record- 
ing purchases and sales of securities are not as effective as originally assessed. What 
should John do? 


*AICPA adapted. Copyright by American Institute of CPAs. All rights reserved. Used with permission. 


Required 
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9-35 (OBJECTIVE 9-5) Below are ten independent risk factors: 


1. The degree to which external users rely on the statements. 

2. The client fails to detect employee theft of inventory from the warehouse because 
there are no restrictions on warehouse access and the client does not reconcile inven- 
tory on hand to recorded amounts on a timely basis. 

3. The likelihood that a client will have financial difficulties after the audit report is 
issued. 

4. Judgment Required to Correctly Record Account Balances and Transactions. 

5. The assigned staff on the audit engagement lacks the necessary skills to identify 
actual errors in an account balance when examining audit evidence accumulated. 

6. The auditor’s evaluation of management's integrity. 

7. The individual items making up the total population also affect the auditor's expecta- 
tion of material misstatement. 

8. Fire losses, major property acquisitions, purchase of complex investments, and 
restructuring changes resulting from discontinued operations. 

9. The audit program omits several necessary audit procedures. 

10. The client fails to reconcile bank accounts to recorded cash balances. 


Identify which of the following audit risk model components relates most directly to each 
of the ten risk factors: 

* Acceptable audit risk ¢ Inherent risk 

* Control risk ¢ Planned detection risk 


9-36 (OBJECTIVES 9-5, 9-9) Using the audit risk model, state the effect on control risk, inher- 
ent risk, acceptable audit risk, and planned evidence for each of the following independent 
events. In each of the events a. through j., circle one letter for each of the three indepen- 
dent variables and planned evidence: I = increase, D = decrease, N = no effect, and C = can- 
not determine from the information provided. 


a. The client’s management materially decreased long-term contractual debt: 


Control risk IDNC Acceptable audit risk =IDNC 
Inherent risk IDNC Planned evidence IDNC 

b. The client changed from a privately held company to a publicly held company: 
Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


c. The auditor decided to set assessed control risk at the maximum (it was previously 
assessed below the maximum): 


Control risk IDNC Acceptable audit risk = IDNC 
Inherent risk IDNC Planned evidence IDNC 

d. The client acquired a new subsidiary located in Italy: 
Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 

e. The account balance increased materially from the preceding year without apparent 
reason: 
Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


f. You determined through the planning phase that working capital, debt-to-equity 
ratio, and other indicators of financial condition improved during the past year: 
Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


g. This is the second year of the engagement, and there were few misstatements found 
in the previous year’s audit. The auditor also decided to increase reliance on internal 
control: 
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Required 


Control risk IDNC Acceptable audit risk §IDNC 
Inherent risk IDNC Planned evidence IDNC 


h. The client began selling products online to customers through its Web page during 
the year under audit. The online customer ordering process is not integrated with the 
company’s accounting system. Client sales staff print out customer order informa- 
tion and enter that data into the sales accounting system: 

Control risk IDNC Acceptable audit risk = IDNC 
Inherent risk IDNC Planned evidence IDNC 


i. There has been a change in several key management personnel. You believe that 
management is somewhat lacking in personal integrity compared with the previous 
management. You believe it is still appropriate to do the audit: 

Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


j. In discussions with management, you conclude that management is planning to sell 
the business in the next few months. Because of the planned changes, several key 
accounting personnel quit several months ago for alternative employment. You also 
observe that the gross margin percent has significantly increased compared with 
that of the preceding year: 

Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


CASES 


9-37 (OBJECTIVES 9-5, 9-6, 9-7) Whitehead, CPA, is planning the audit of a newly obtained 
client, Henderson Energy Corporation, for the year ended December 31, 2016. Henderson 
Energy is regulated by the state utility commission, and because it is a publicly traded 
company the audited financial statements must be filed with the Securities and Exchange 
Commission (SEC). 

Henderson Energy is considerably more profitable than many of its competitors, 
largely due to its extensive investment in information technologies used in its energy dis- 
tribution and other key business processes. Recent growth into rural markets, however, 
has placed some strain on 2016 operations. Additionally, Henderson Energy expanded 
its investments into speculative markets and is also making greater use of derivative and 
hedging transactions to mitigate some of its investment risks. Because of the complexi- 
ties of the underlying accounting associated with these activities, Henderson Energy added 
several highly experienced accountants within its financial reporting team. Internal audit, 
which has direct reporting responsibility to the audit committee, is also actively involved 
in reviewing key accounting assumptions and estimates on a quarterly basis. 

Whitehead’s discussions with the predecessor auditor revealed that the client has ex- 
perienced some difficulty in correctly tracking existing property, plant, and equipment 
items. This largely involves equipment located at its multiple energy production facilities. 
During the recent year, Henderson acquired a regional electric company, which expanded 
the number of energy production facilities. 

Whitehead plans to staff the audit engagement with several members of the firm who 
have experience in auditing energy and public companies. The extent of partner review of 
key accounts will be extensive. 


Required Based on the above information, identify factors that affect the risk of material misstate- 
ments in the December 31, 2016, financial statements of Henderson Energy. Indicate 
whether the factor increases or decreases the risk of material misstatements. Also, identify 
which audit risk model component is affected by the factor. Use the format below: 


Effect on the Risk of Audit Risk Model 
Factor Material Misstatement Component 
Henderson is a new client Increases Inherent risk 
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FIGURE 9-6 Stanton Enterprises Summary Financial Statements 


Cash 
Trade accounts receivable 
Allowance for uncollectible accounts 
Inventories 
Prepaid expenses 
Total current assets 
Property, plant, and equipment: 
At cost 
Less accumulated depreciation 
Total prop., plant, and equipment 
Goodwill 


Total assets 


Accounts payable 
Bank loan payable 
Accrued liabilities 
Federal income taxes payable 
Current portion of long-term debt 
Total current liabilities 
Long-term debt 
Stockholders’ equity: 
Common stock 
Additional paid-in capital 
Retained earnings 
Total stockholders’ equity 


Total liabilities and stockholders’ equity 


Combined Statement of Income and Retained Earnings 


Sales 

Cost of goods sold 

Gross profit 

Selling, general, and administrative expenses 
Pension cost 

Interest expense 

Total operating expenses 

Income before taxes 

Income tax expense 

Net income 


Beginning retained earnings 
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Balance Sheet 


Preliminary 
12-31-16 


$ 243,689 
3,544,009 
(120,000) 
4,520,902 
29,500 
8,218,100 


12,945,255 

(4,382,990) 
8,562,265 
1,200,000 
$17,980,365 


$ 2,141,552 
150,000 
723,600 

1,200,000 
240,000 
4,455,152 
960,000 


1,250,000 
2,469,921 
8,845,292 
12,565,213 
$17,980,365 


Preliminary 
12-31-16 


$43,994,931 
DANO Dil: 
19,797,719 
10,592,221 
1,117,845 
83,376 


11,793,442 


8,004,277 


1,800,000 


6,204,277 


3,891,015 


10,095,292 


(1,250,000) 
$ 8,845,292 


Audited 
12-31-15 


$ 133,981 
2,224,921 
(215,000) 
3,888,400 
24,700 


6,057,002 


9,922,534 
(3,775,911) 


6,146,623 


345,000 


$12,548,625 


$ 2,526,789 
598,020 
1,759,000 
240,000 


5,123,809 


1,200,000 


1,000,000 
1,333,801 


3,891,015 


6,224,816 


$12,548,625 


Audited 
12-31-15 


$32,258,015 
19,032,229 
13,225,786 
8,900,432 
865,030 
104,220 
9,869,682 
3,356,104 
1,141,000 
2,215,104 
2,675,911 
4,891,015 
(1,000,000) 
$ 3,891,015 


Enterprises Ltd (SS LTD) for the financial year end year ended 31 December 2013. SS LTD 
has its head office in New Delhi and manufacturing plants in Mumbai and Bangalore. It 
sells to a wide range of mostly Indian and overseas mining companies for both Indian and 
overseas operations. The company was listed on the Indian stock exchange when your 
audit firm was appointed auditors. While actual financial statements’ real data has fluctu- 
ated over the subsequent years, the company has built an enviable reputation of quality 
and service. In addition, judging from previous auditors’ information, the auditors have 
not observed any serious errors and problems with the reliability of interim financial 
statements. 


9-38 (OBJECTIVES 9-5, 9-6, 9-7, 9-9) It is 2013 and you are planning the audit of Stanton 


Required a. Identify and support six significant audit risks and identify their major or medium 
risk. Only include identified minor risks if there are insufficient significant risks. 

b. Identify and support two audit strengths. These must be discussed as strengths and 
not as audit risks assessed as low risk. 

c. With reference to your answers to a and b, discuss if the overall audit planning risk 
level is extreme, high, medium, or low. 

d. With reference to your answer to c, identify a quantitative dollar amount for plan- 
ning materiality if any, and support this with a discussion of more than one of the 
commonly used bases. 

e. The evidence planning worksheet to decide tests of details of balances for SS LTD 
accounts receivable is shown in Figure 9-7. Use the information and your assump- 
tions to complete the following rows of the planning worksheet: Acceptable audit 
risk, Inherent risk, and Analytical procedure. Also fill in performance of materiality 
for account receivables at the bottom of the worksheet. Make any assumptions you 
believe are reasonable and appropriate and document them. 


To meet the requirements, use the Financial Statement information Figure 9-6 with the 
following information in the Statement of Financial Position, Statement of Combined 
Statement of Income, and Retained Earnings and Additional Information to complete the 
following requirements. 


INTEGRATED CASE APPLICATION— 
PINNACLE MANUFACTURING: PART II 


9-39 (OBJECTIVES 9-6, 9-7) In Part I of the case, you performed preliminary analytical proce- 
dures for Pinnacle (pp. 257-259). The purpose of Part II is to identify factors influencing 
risks and the relationship of risks to audit evidence. 
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Stanton Enterprises Evidence-Planning Worksheet to Decide Tests 


FIGURE 37 of Details of Balances for Accounts Receivable 


Completeness 
Classification 
Realizable value 


Detail tie-in 
Existence 
Accuracy 


Acceptable audit risk 


Inherent risk 


Control risk—Sales 


Control risk— 
Cash receipts 


Control risk— 
Additional controls 


Substantive tests of 
transactions—Sales 


Substantive tests of 
transactions— 
Cash receipts 


Substantive 
analytical procedures 


Planned detection 
risk for tests of 
details of balances 


Planned audit | 
evidence for tests of 
details of balances 


Performance materiality 


During the planning phase of the audit, you meet with Pinnacle’s management team 
and perform other planning activities. You encounter the following situations that you 
believe may be relevant to the audit: 


1. Your firm has an employee who reads and saves articles about issues that may affect 
key clients. You read an article in the file titled, “EPA Regulations Encouraging Solar- 
Powered Engines Postponed?” After reading the article, you realize that the regulations 
management is relying upon to increase sales of the Solar-Electro division might not 
go into effect for at least ten years. A second article is titled, “Stick to Diesel, Pinnacle!” 
The article claims that although Pinnacle has proven itself within the diesel engine 
industry, they lack the knowledge and people necessary to perform well in the solar- 
powered engine industry. 

2. You ask management for a tour of the Solar-Electro facilities. While touring the ware- 
house, you notice a section of solar-powered engines that do not look like the ones 
advertised on Pinnacle’s Web site. You ask the warehouse manager when those items 
were first manufactured. He responds by telling you, “I’m not sure. I've been here a 
year and they were here when I first arrived.” 
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3. You also observe that new computerized manufacturing equipment has been installed 
at Solar-Electro. The machines have been stamped with the words, “Product of 
Welburn Manufacturing, Detroit, Michigan.” 

4. During discussions with the Pinnacle controller, you learn that Pinnacle employees 
did a significant amount of the construction work for a building addition because of 
employee idle time and to save costs. The controller stated that the work was carefully 
coordinated with the construction company responsible for the addition. 

5. While reading the footnotes of the previous year’s financial statements, you note 
that one customer, Auto-Electro, accounts for nearly 15% of the company’s accounts 
receivable balance. You investigate this receivable and learn the customer has not 
made any payments for several months. 

6. During a meeting with the facilities director, you learn that the board of directors has 
decided to raise a significant amount of debt to finance the construction of a new 
manufacturing plant for the Solar-Electro division. The company also plans to make 
a considerable investment in modifications to the property on which the plant will 
be built. 

7. While standing in line at a vending machine, you see a Pinnacle vice president wearing 
a golf shirt with the words “Todd-Machinery.” You are familiar with the company and 
noticed some of its repairmen working in the plant earlier. You tell the man you like 
the shirt and he responds by saying, “Thank you. My wife and I own the company, but 
we hire people to manage it.” 

8. After inquiry of the internal audit team, you realize there is significant turnover in the 
internal audit department. You conclude the turnover is only present at the higher- 
level positions. 

9. While reviewing Pinnacle’s long-term debt agreements, you identify several restrictive 
covenants. Two requirements are to keep the current ratio above 2.0 and debt-to- 
equity below 1.0 at all times. 

10. The engagement partner from your CPA firm called today notifying you that Brian 
Sioux, an industry specialist and senior tax manager from the firm’s Ontario office, 
will be coming on-site to Pinnacle’s facilities to investigate an ongoing dispute between 
the Internal Revenue Service and Pinnacle. 

11. A member of your CPA firm, who is currently on-site in Detroit at the Welburn divi- 
sion, calls you to see how everything is going while you are visiting Solar-Electro in 
Texas. During your conversation, he asks if you know anything about the recent inter- 
company loan from Welburn to Solar-Electro. 


Required a. Review Part I of the case and the situations in Part II and identify information that 
affects your assessment of acceptable audit risk. Note that only some of the situations 
in Part II will relate to acceptable audit risk. Classify the information based on the 
three factors that affect acceptable audit risk. 


External users’ reliance on financial statements 
Likelihood of financial difficulties 
Management integrity 


b. Assess acceptable audit risk as high, medium, or low considering the items you identi- 
fied in requirement a. (A risky client will be assessed as a low acceptable audit risk.) 
Justify your response. 


c. Identify inherent risks for the audit of Pinnacle using the information from Parts I 
and II. For each inherent risk, identify the account or accounts and the relevant audit 
objectives that may be affected. 


Account or Relevant Audit 
Inherent Risk Accounts Affected Objectives 
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ASSESSING AND 
RESPONDING 
TO FRAUD RISKS 


Accounting Scandal Rocks Public Trust 


The accounting profession was under fire. Throughout the long, hot summer, newspapers were 
filled with new details of a corporate accounting scandal. One of the largest, most respected 
companies in the United States had been caught inflating earnings and assets through blatant 
manipulation of the accounting rules. Thousands of investors and employees had suffered. 
Congressional hearings were called to examine and understand the fraud, and everyone asked, 
“Where were the auditors?” The accounting profession was under immense political pressure 
from reform-minded lawmakers, and the negative publicity surrounding the perceived audit fail- 
ure cast all CPAs in the most unfavorable light. 


The year was 1938. The cor- 
porate accounting scandal was 
McKesson-Robbins, and it argu- 
ably had a greater impact on the 
way audits are performed than 
any subsequent scandal, includ- 
ing Enron and WorldCom. 


In 1924, Philip Musica, a high- 
school dropout with fraud con- 
victions and a prison record, 
reinvented himself as F Donald 
Coster and awarded himself a 
medical degree. “Dr. Coster” 
took control of McKesson-Robbins and embarked on a massive fraud to inflate its share price. 
McKesson-Robbins inflated assets and earnings by $19 million through the reporting of nonex- 
istent inventory and fictitious sales. Coster duped McKesson’s auditors, and the investing pub- 
lic, into believing that the company had a huge drug inventory, worth multimillions of dollars, 
that didn’t exist. Coster created phony purchase orders, sales invoices, and other documents, 
all of which McKesson’s auditors dutifully reviewed as evidence of the imaginary inventory. The 
fraud succeeded because the auditing standards of the day permitted auditors to confine them- 
selves to reviewing documents and talking to management. They were not required to physi- 
cally examine and verify inventories. 


During an emergency board meeting, hastily called after the fraud came to light, word was 
received that Coster had committed suicide. An investment bank partner who served as a 
McKesson outside director, concerned about his responsibilities, responded to the news by 
exclaiming, “Let’s fire him anyway!” 


Sources: |. Michael Ramos, Fraud Detection in a GAAS Audit: SAS No. 99 Implementation Guide, 
AICPA (2003), p. ix; 2. Presentation by PCAOB Board Member Daniel L. Goelzer at Investment 
Company Institute’s 2003 Tax & Accounting Conference, September |5, 2003 (pcaobus.org). 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


10-1 Define fraud and distin- 
guish between fraudulent 
financial reporting and 
misappropriation of assets. 

10-2 Describe the fraud triangle and 
identify conditions for fraud. 

10-3 Understand the auditor’s 
responsibility for assessing 
the risk of fraud and 
detecting material mis- 
statements due to fraud. 

10-4 Identify corporate governance 
and other control environment 
factors that reduce fraud risks. 

10-5 Develop responses to 
identified fraud risks. 

10-6 Recognize specific fraud 
risk areas and develop pro- 
cedures to detect fraud. 

10-7 Understand interview tech- 
niques and other activities 
after fraud is suspected. 

10-8 Describe information about 
the fraud risk assessment that 
must be documented in the 
working papers. 


The classic fraud at McKesson-Robbins illustrates that financial statement fraud is not just a recent occurrence. In 
the wake of that scandal, the auditing profession responded by setting the first formal standards for auditing proce- 
dures. Those standards required confirmation of receivables and observation of physical inventory, procedures that 
are standard today, plus guidance on the auditor’s responsibilities for detecting fraud. 

In response to more recent frauds, Congress passed the Sarbanes—Oxley Act in 2002 and the AICPA developed 
specific auditing standards to deal with fraud risk assessment and detection. In this chapter we will discuss the au- 
ditor’s responsibility to assess the risk of fraud and detect material misstatements due to fraud and describe major 
areas of fraud risk, as well as controls to prevent fraud and audit procedures to detect fraud. 


TYPES OF FRAUD 
OBJECTIVE 10-1 As a broad legal concept, fraud describes any intentional deceit meant to deprive 


ae another person or party of their property or rights. In the context of auditing financial 
Define fraud and distinguish F F : ‘ ; . : 
iliceen Pandilade TiaaACal statements, fraud is defined as an intentional misstatement of financial statements. 
reporting and misappropriation The two main categories are fraudulent financial reporting and misappropriation of 
of assets. assets, which we introduced when defining the auditor’s responsibilities for detecting 
material misstatements in Chapter 6. 


Fraudulent financial reporting is an intentional misstatement or omission of amounts 
or disclosures with the intent to deceive users. Most cases involve the intentional mis- 
statement of amounts, rather than disclosures. For example, WorldCom capitalized as 
fixed assets billions of dollars that should have been expensed. Omissions of amounts 
are less common, but a company can overstate income by omitting accounts payable 
and other liabilities. 

While most cases of fraudulent financial reporting involve an attempt to overstate 
income—either by overstatement of assets and income or by omission of liabilities 
and expenses—companies also deliberately understate income. At privately held 
companies, this may be done in an attempt to reduce income taxes. Companies may 
also intentionally understate income when earnings are high to create a reserve of 
earnings or “cookie jar reserves” that may be used to increase earnings in future 
periods. Such practices are called income smoothing and earnings management. 
Earnings management involves deliberate actions taken by management to meet 
earnings objectives. Income smoothing is a form of earnings management in which 
revenues and expenses are shifted between periods to reduce fluctuations in earnings. 
One technique to smooth income is to reduce the value of inventory and other assets 
of an acquired company at the time of acquisition, resulting in higher earnings when 
the assets are later sold. Companies may also deliberately overstate inventory obsoles- 
cence reserves and allowances for doubtful accounts to counter higher earnings. 

Although less frequent, several notable cases of fraudulent financial reporting 
involved inadequate disclosure. For example, a central issue in the Enron case was 
whether the company adequately disclosed obligations to affiliates known as special- 
purpose entities. E. F. Hutton, a now defunct brokerage firm, was charged with inten- 
tionally overdrawing accounts at various banks to increase interest earnings. These 
overdrafts were included as liabilities on the balance sheet, but the balance sheet 
description of the obligations did not clearly state the nature of the liabilities. 


Fraudulent Financial 
Reporting 


Misappropriation of assets is fraud that involves theft of an entity’s assets. In many 
cases, but not all, the amounts involved are not material to the financial statements. 
However, the theft of company assets is often a management concern, regardless of the 
materiality of the amounts involved, because small thefts can easily increase in size over 
time and they often lead to significant reputational harm once discovered and disclosed. 

The term misappropriation of assets is normally used to refer to theft involving 
employees and others internal to the organization. According to estimates of the 
Association of Certified Fraud Examiners, the average company loses five percent of 


Misappropriation of 
Assets 
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its revenues to fraud, although much of this fraud involves external parties, such as 
shoplifting by customers and cheating by suppliers. 

Misappropriation of assets is normally perpetrated at lower levels of the orga- 
nization hierarchy. In some notable cases, however, top management is involved in 
the theft of company assets. Because of management’s greater authority and control 
over organization assets, embezzlements involving top management can involve 
significant amounts. In one extreme example, the former CEO of Tyco International 
was charged by the SEC with stealing over $100 million in assets. A fraud survey con- 
ducted by the Association of Certified Fraud Examiners found that asset misappro- 
priations are the most common fraud scheme, although the size of the fraud is much 
greater for fraudulent financial reporting. 


CONDITIONS FOR FRAUD 
Three conditions for fraud arising from fraudulent financial reporting and misappro- OBJECTIVE 10-200 


priations of assets are described in the auditing standards. As shown in Figure 10-1, peccribe the fraud Vania 
these three conditions are referred to as the fraud triangle. ene condaene onal 
1. Incentives/Pressures. Management or other employees have incentives or pressures 
to commit fraud. 
2. Opportunities. Circumstances provide opportunities for management or employ- 
ees to commit fraud. 
3. Attitudes/Rationalization. An attitude, character, or set of ethical values exists that 
allows management or employees to commit a dishonest act, or they are in an 
environment that imposes sufficient pressure that causes them to rationalize 
committing a dishonest act. 


An essential consideration by the auditor in uncovering fraud is identifying factors 
that increase the risk of fraud. Table 10-1 (p. 324) provides examples of these fraud 
risk factors for each of the three conditions of fraud for fraudulent financial report- 
ing. In the fraud triangle, fraudulent financial reporting and misappropriation of 
assets share the same three conditions, but the risk factors differ. We'll first address the 
risk factors for fraudulent financial reporting, and then discuss those for misappropri- 
ation of assets. Later in the chapter, the auditor’s use of the risk factors in uncovering 
fraud is discussed. 


Risk Factors for 
Fraudulent Financial 
Reporting 


Incentives/Pressures A common incentive for companies to manipulate financial 
statements is a decline in the company’s financial prospects. For example, a decline 
in earnings may threaten the company’s ability to obtain financing. Companies may 
also manipulate earnings to meet analysts’ forecasts or benchmarks such as prior- 
year earnings, to meet debt covenant restrictions, to achieve a bonus target based 


FIGURE 10-| | The Fraud Triangle 


Incentives/Pressures 
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a \ 0S Examples of Risk Factors for Fraudulent Financial Reporting 


Three Conditions of Fraud 


Incentives/Pressures Opportunities Attitudes/Rationalization 

Management or other employees have incentives Circumstances provide an opportunity for man- An attitude, character, or set of ethical values 
or pressures to materially misstate financial agement or employees to misstate financial exists that allows management or employees 
statements. statements. to intentionally commit a dishonest act, or they 


are in an environment that imposes sufficient 
pressure that causes them to rationalize com- 
mitting a dishonest act. 


Examples of Risk Factors Examples of Risk Factors Examples of Risk Factors 

Financial stability or profitability is threat- Significant accounting estimates involve Inappropriate or ineffective communica- 
ened by economic, industry, or entity subjective judgments or uncertainties tion and support of the entity’s values. 
operating conditions. Examples include that are difficult to verify. Known history of violations of securities 
significant declines in customer demand Ineffective board of director or audit laws or other laws and regulations. 
and increasing business failures in either committee oversight over financial Management's practice of making overly 
the industry or overall economy. reporting. aggressive or unrealistic forecasts to 

Excessive pressure for management to meet High turnover or ineffective accounting, analysts, creditors, and other third 
debt repayment or other debt covenant internal audit, or information technology parties. 
requirements. staff. 

Management or the board of directors’ per- Deficient internal controls. 


sonal net worth is materially threatened by _ Significant related-party transactions. 
the entity’s financial performance. 


on earnings, or to artificially inflate stock prices. In some cases, management may 
manipulate earnings just to preserve their reputation. Figure 10-2 highlights KPMG’s 
survey finding that personal financial incentives, especially a desire to fund an ex- 
travagant lifestyle, and the need to meet pre-specified business performance targets 
are often cited as primary incentives to engage in fraudulent actions. 


Opportunities Although the financial statements of all companies are potentially 
subject to manipulation, the risk is greater for companies in industries where sig- 
nificant judgments and estimates are involved. For example, valuation of inventories 
is subject to greater risk of misstatement for companies with diverse inventories in 
many locations. The risk of misstatement of inventories is further increased if those 
inventories are at risk for obsolescence. 

Turnover in accounting personnel or other deficiencies in accounting and infor- 
mation processes can create an opportunity for misstatement. Many cases of fraudu- 
lent financial reporting went undetected by ineffective audit committee and board of 
director oversight of financial reporting. Weak internal controls was the most often 
cited opportunity, as shown in Figure 10-2. 


Attitudes/Rationalization The attitude of top management toward financial re- 
porting is a critical risk factor in assessing the likelihood of fraudulent financial 
statements, as illustrated by Figure 10-2. If the CEO or other top managers display a 
significant disregard for the financial reporting process, such as consistently issuing 
overly optimistic forecasts, or they are overly concerned about meeting analysts’ earn- 
ings forecasts, fraudulent financial reporting is more likely. Management’s character 
or set of ethical values also may make it easier for them to rationalize a fraudulent act. 
A sense of superiority by executives is the most commonly cited condition related to 
attitude and rationalization. Figure 10-3 summarizes the profile of the fraud perpetra- 
tors in 348 actual fraud cases examined by KPMG. 
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The same three conditions apply to misappropriation of assets. However, in assessing 
risk factors, greater emphasis is placed on individual incentives and opportunities for 
theft. Table 10-2 (p. 326) provides examples of fraud risk factors for each of the three 
conditions of fraud for misappropriation of assets. 


Risk Factors for 
Misappropriation of 
Assets 
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FIGURE 10-2. Most Commonly Cited Fraud Risk Conditions 


Incentives/Pressures 


To seek personal financial gain mostly to fund extravagant lifestyle, not to make “ends meet” 


To meet 
pre-specified 
business targets 


“Because | can” 10% 


Opportunities 


Due to weak internal controls 


By circumventing existing controls 20% 


By colluding with 
others to override 11% 
existing controls 


Attitude/Rationalization 


Felt a sense of superiority 


Anger and fear 10% 


Source: Global Profiles of the Fraudster, KPMG, 2013. 


Incentives/Pressures Financial pressures are a common incentive for employees who 
misappropriate assets. Employees with excessive financial obligations, or those with 
drug abuse or gambling problems, may steal to meet their personal needs. In other 
cases, dissatisfied employees may steal from a sense of entitlement or as a form of 


attack against their employers. 


FIGURE 10-3 Characteristics of Fraud Perpetrators 


Age of Fraudster (in years) Percentage 
36-45 41% 
46-55 35% 
Other 24% 


Gender 
Male 


Female 
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Employed by Organization 
Defrauded 


Source: Who is the Typical Fraudster? KPMG, 2011. 
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Time at Organization 
3-5 years 

6-10 years 

Over 10 years 

Other 


Rank in Organization 


Senior management 


Management 


Other 


Percentage 
29% 
27% 
33% 
11% 


Fraud Committed 
In collusion with others 


Acting alone 


Where Perpetrator 
Works 


Finance 
CEO 
Operations/Sales 


Other 


Percentage 
61% 
39% 


TABLE 10-2 


Three Conditions of Fraud 
Incentives/Pressures 


Management or other employees have incentives 
or pressures to misappropriate material assets. 


Examples of Risk Factors 


Personal financial obligations create pressure 
for those with access to cash or other 
assets susceptible to theft to misappropri- 
ate those assets. 

Adverse relationships between manage- 
ment and employees with access to assets 
susceptible to theft motivate employees 
to misappropriate those assets. Examples 
include the following: 


° Known or expected employee layoffs. 
¢ Promotions, compensation, or other 
rewards inconsistent with expectations. 


Examples of Risk Factors for Misappropriation of Assets 


Opportunities 


Circumstances provide an opportunity for man- 
agement or employees to misappropriate 
assets. 


Examples of Risk Factors 


Presence of large amounts of cash on hand 
or inventory items that are small, of high 
value, or are in high demand. 

Inadequate internal control over assets due to 
lack of the following: 


° Appropriate segregation of duties or 
independent checks. 

¢ An approved vendor list to detect 
unauthorized or fictitious vendors. 

¢ Job applicant screening for employees 
with access to assets. 

° Mandatory vacations for employees with 
access to assets. 


Attitudes/Rationalization 


An attitude, character, or set of ethical values 
exists that allows management or employees 
to intentionally commit a dishonest act, or they 
are in an environment that imposes sufficient 
pressure that causes them to rationalize com- 
mitting a dishonest act. 


Examples of Risk Factors 


Disregard for the need to monitor or reduce 
risk of misappropriating assets. 

Disregard for internal controls by overrid- 
ing existing controls or failing to correct 
known internal control deficiencies. 


MADOFF 
CONVICTED 

IN LARGEST 
INVESTOR FRAUD 
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Opportunities Opportunities for theft exist in all companies. However, oppor- 
tunities are greater in companies with accessible cash or with inventory or other 
valuable assets, especially if the assets are small or easily removed. For example, 
casinos handle extensive amounts of cash with little formal records of cash re- 
ceived. Similarly, thefts of laptop computers are much more frequent than thefts of 
desktop systems. 

Weak internal controls create opportunities for theft. Inadequate separation 
of duties is practically a license for employees to steal. Whenever employees have 
custody or even temporary access to assets and maintain the accounting records 
for those assets, the potential for theft exists. For example, if inventory storeroom 


On March 12, 2009, Bernie Madoff pled guilty to the 
largest investor fraud ever, in a Ponzi scheme with 
losses estimated at almost $21 billion. By way of 
comparison, the massive fraud at WorldCom was 
approximately $11 billion. Madoff was sentenced to a 
prison term of 150 years. 

In a Ponzi scheme, people are enticed to invest 
by above-market returns that are paid from the 
investments of additional investors, rather than 
actual profits on investments. The scheme usu- 
ally collapses under its own weight because it 
depends on a continuing supply of new investors. 
The scheme is named after Charles Ponzi, who 
used the scheme in the early 1920s. Although 
he did not invent the Ponzi scheme, it has be- 
come associated with his name because of the 
scale of his operation. Madoff’s scandal lasted a 
long time, particularly for such a large scheme. 
Investigators believe the fraud may have begun 
in the 1970s, although Madoff maintains that his 
fraudulent activities began in the 1990s. Madoff 


mainly managed money for charities, many of them 
private foundations. Private foundations are re- 
quired by IRS regulations to pay out 5% of their 
funds each year, and Madoff could easily meet these 
required payouts using investments into the fund. 
Madoff was secretive about his trading prac- 
tices and marketed his funds to an exclusive 
clientele. Although concerns were raised over 
the years about the consistency of the returns 
generated, and the SEC investigated Madoff 
several times, his scheme was not revealed until 
the market plunge in 2008 triggered investor 
withdrawals from the firm. The market downturn 
revealed what several critics had alleged, that 
Madoff was running an elaborate Ponzi scheme. 


Sources: |. Robert Frank, Amir Efrati, Aaron Luchetti, and 
Chad Bray, “Madoff Jailed After Admitting Epic Scam,” 

The Wall Street Journal (March 13, 2009); 2. Securities and 
Exchange Commission Litigation Complaint, December I, 
2008 (www.sec.govilitigation). 
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employees also maintain inventory records, they can easily take inventory items and 
cover the theft by adjusting the accounting records. A lack of controls over payments 
to vendors, or payroll systems, can allow employees to create fictitious vendors or 
employees and bill the company for services or time. 

Fraud is more prevalent in smaller businesses and not-for-profit organizations 
because it is sometimes more difficult for these entities to maintain adequate sep- 
aration of duties. However, even large organizations may fail to maintain adequate 
separation in critical areas. Barings Bank collapsed after incurring losses in excess 
of $1 billion from the activities of one trader because of inadequate separation 
of duties. 


Attitudes/Rationalization Management’s attitude toward controls and ethical con- 
duct may allow employees and managers to rationalize the theft of assets. If manage- 
ment cheats customers through overcharging for goods or engaging in high-pressure 
sales tactics, employees may feel that it is acceptable for them to behave in the same 
fashion by cheating on expense or time reports. 


ASSESSING THE RISK OF FRAUD 


Auditing standards require the auditor to assess the risk of material misstatement due 
to fraud, and those standards provide guidance to assist the auditor in making that 
assessment. Auditors must maintain a level of professional skepticism as they con- 
sider a broad set of information, including fraud risk factors, to identify and respond 
to fraud risk. As we discussed in Chapter 6, the auditor has a responsibility to respond 
to fraud risk by planning and performing the audit to obtain reasonable assurance 
that material misstatements, whether due to fraud or errors, are detected. 


As we discussed in Chapter 6, auditing standards require that the audit be planned 
and performed with an attitude of professional skepticism in all aspects of the engage- 
ment, recognizing the possibility that a material misstatement could exist regardless 
of the auditor’s prior experience with the integrity and honesty of client management 
and those charged with governance. In practice, maintaining this attitude of profes- 
sional skepticism can be difficult because, despite some recent high-profile examples 
of fraudulent financial statements, material frauds are infrequent compared to the 
number of audits of financial statements conducted annually. Most auditors will never 
encounter a material fraud during their careers. Also, through client acceptance and 
continuance evaluation procedures, auditors reject most potential clients perceived as 
lacking honesty and integrity. 


Questioning Mind Auditing standards emphasize consideration of a client’s sus- 
ceptibility to fraud, regardless of the auditor’s beliefs about the likelihood of fraud 
and management’s honesty and integrity. During audit planning for every audit, the 
engagement team must discuss the need to maintain a questioning mind throughout 
the audit to identify fraud risks and critically evaluate audit evidence. There is always a 
risk that even an honest person can rationalize fraudulent actions when incentives or 
pressures become extreme. 


Critical Evaluation of Audit Evidence Upon discovering information or other 
conditions that indicate a material misstatement due to fraud may have occurred, 
auditors should thoroughly probe the issues, acquire additional evidence as needed, 
and consult with other team members. Auditors must be careful not to rationalize or 
assume a misstatement is an isolated incident. For example, say an auditor uncovers a 
current-year sale that should properly be reflected as a sale in the following year. The 
auditor should evaluate the reasons for the misstatement, determine whether it was 
intentional or a fraud, and consider whether other such misstatements are likely to 
have occurred. 
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Understand the auditor’s 
responsibility for assessing the 
risk of fraud and detecting 
material misstatements due to 
fraud. 


Professional Skepticism 


Sources of Information 
to Assess Fraud Risks 
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FIGURE 10-4 Sources of Information Gathered to Assess Fraud Risks 


Communications Inquiries of Risk Analytical Other 
Among Audit Team Management Factors Procedures Information 


ee ee ee 


eo y™M 


Identified Risks of Material Misstatements Due to Fraud 


Figure 10-4 summarizes the information used to assess fraud risk. The five sources of 
information to assess these fraud risks on the top of the figure are discussed further in 


this section. 


Communications Among Audit Team Auditing standards require the audit team, 
including the engagement partner and key engagement team members, conduct dis- 
cussions to share insights from more experienced audit team members and to “brain- 
storm” ideas that address the following: 


1. How and where they believe the entity’s financial statements might be suscep- 
tible to material misstatement due to fraud. This should include consideration of 
known external and internal factors affecting the entity that might: 

* create an incentive or pressure for management to commit fraud. 

¢ provide the opportunity for fraud to be perpetrated, including the risk of 
management override of internal controls. 

¢ indicate a culture or environment that enables management to rationalize 
fraudulent acts. 

2. How management could perpetrate and conceal fraudulent financial reporting. 

How anyone might misappropriate assets of the entity. 

4. How the auditor might respond to the susceptibility of material misstatements 
due to fraud. 


Nad 


These discussions about fraud risks will likely take place at the same time as dis- 
cussions about the susceptibility of the entity’s financial statements to other types of 
material misstatement, which were addressed in Chapter 9. When engaging in these 
discussions, the engagement team should set aside beliefs about the honesty and 
integrity of management and those charged with governance, and the team should 
be reminded of the importance of maintaining professional skepticism regarding the 
potential for material misstatement due to fraud throughout the audit. 


Inquiries of Management Auditing standards require the auditor to make specific 
inquiries about fraud in every audit. Inquiries of management and others within the 
company provide employees with an opportunity to tell the auditor information that 
otherwise might not be communicated. Moreover, their responses to the auditor’s 
questions often reveal information on the likelihood of fraud. 

The auditor’s inquiries of management should address whether management has 
knowledge of any fraud or suspected fraud within the company. Auditors should also 


IT PAYS TO Whistle-blowing is the single most effective method setting, the Sarbanes-Oxley Act of 2002 for the 
BLOW THE of detecting corporate and financial fraud. Employee first time created a uniform federal protection 
disclosures are by far the most common source of for financial fraud whistleblowers. Prior to the 
WHISTLE ON fraud detection. One of the major impediments to enactment of the Sarbanes-Oxley whistleblower 
FRAUD the detection of fraud involves the cost of acquiring protections, employees who blew the whistle 
and gathering information indicating that a fraud has were covered by a patchwork of state statutes 
occurred. Insiders have the best access to such infor- and common law remedies, and true protection 
mation and can discover fraud at a much lower cost was sporadic if present at all. The central idea 
when compared to outsiders including market actors of the anti-retaliation provision in Sarbanes-Oxley 
and regulators. In addition to having access to the was to motivate employees to blow the whistle 
information relating to a fraudulent scheme, whistle- by protecting them from retaliation in the 
blowers are often highly trained and sophisticated workplace. 
professionals with the technical expertise to under- 
stand the complex financial transactions at the core Source: SEC, “Legislative Proposals to Address the Negative 
of many instances of securities and financial fraud. Consequences of the Dodd-Frank Whistleblower Provisions” 
In recognition of the important role that (May 11, 2011) (www.sec.gov/comments/s7-33-|0/s73310- 
whistleblowers can play in the financial fraud 313.pdf). 


inquire about management's process of assessing fraud risks, the nature of fraud risks 
identified by management, any internal controls implemented to address those risks, 
and any information about fraud risks and related controls that management has 
reported to the audit committee or others charged with governance. 

The audit committee often assumes an active role in overseeing management’s 
fraud risk assessment and response processes. The auditor must inquire of the audit 
committee or others charged with governance about their views of the risks of fraud 
and whether they have knowledge of any fraud or suspected fraud. For entities with 
an internal audit function, the auditor should inquire about internal audit’s views of 
fraud risks, whether they have performed any procedures to identify or detect fraud 
during the year, and whether they have any knowledge of any actual fraud. 

Auditing standards also require the auditor to make inquiries of others within the 
entity whose duties lie outside the normal financial reporting lines of responsibility. 
When coming into contact with company personnel, such as the inventory ware- 
house manager or purchasing agents, the auditor may inquire about the existence or 
suspicion of fraud. Throughout the audit, inquiries of executives and a wide variety of 
other employees provide opportunities for the auditor to learn about risks of fraud. 
When responses are inconsistent, the auditor should obtain additional audit evidence 
to resolve the inconsistency and to support or refute the original risk assessment. 


Risk Factors Auditing standards require the auditor to evaluate whether fraud risk 
factors indicate incentives or pressures to perpetrate fraud, opportunities to carry out 
fraud, or attitudes or rationalizations used to justify a fraudulent action. Tables 10-1 
(p. 324) and 10-2 (p. 326) outline examples of the fraud risk factors auditors consider. 
The existence of fraud risk factors does not mean fraud exists, but that the likelihood 
of fraud is higher. Auditors should consider these factors along with any other infor- 
mation used to assess the risks of fraud. 


Analytical Procedures As we discussed in Chapter 7, auditors must perform analyti- 
cal procedures during the planning and completion phases of the audit to help identify 
unusual transactions or events that might indicate the presence of material misstate- 
ments in the financial statements. When results from analytical procedures differ from 
the auditor’s expectations, the auditor evaluates those results in light of other informa- 
tion obtained about the likelihood of fraud to determine if fraud risk is heightened. 

In addition to the ratio analysis performed as part of preliminary analytical proce- 
dures described in Chapter 8, the auditor may perform horizontal and vertical analysis 
of the financial statements. In horizontal analysis, the account balance is compared to 
the previous period, and the percentage change in the account balances for the period is 
calculated. Figure 10-5 (p. 330) is an example of horizontal analysis applied to the con- 
densed income statement for Hillsburg Hardware. For example, sales increased $11,860 
(in 000’s) from the prior year, which represents a 9.0% increase ($11,860/$131,226). In 
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FIGURE 10-5 Horizontal Analysis of Income Statement 


Hillsburg Hardware Company 


Horizontal Analysis of Income Statement 
(in thousands) 


Year Ended December 31 
2016 2015 Change % Change 
Net sales $143,086 $131,226 $11,860 9.0% 
Cost of sales 103,241 94,876 8,365 8.8% 
Gross profit 39,845 36,350 3,495 9.6% 


Selling, general, and administrative 32,475 29,656 2,819 9.5% 
expenses 


Operating income 7,370 6,694 676 10.1% 


Other income and expense 
Interest expense 2,409 2,035 374 18.4% 
Gain on sale of assets (720) — (720) N/A 
Total other income/expense (net) 1,689 2,035 (346) 17.0% 
Earnings before income taxes 5,681 4,659 1,022 21.9% 
Provision for income taxes 1,747 1,465 282 19.2% 
Net income $ 3,934 $ 3,194 $ 740 232% 


vertical analysis, the financial statement numbers are converted to percentages. The 
common-size financial statement in Figure 8-4 on page 233 is an example of vertical 
analysis applied to the detailed income statement for Hillsburg Hardware, with each 
income statement amount calculated as a percentage of sales. In vertical analysis of the 
balance sheet, balances are calculated as a percentage of total assets. 

Because occurrences of fraudulent financial reporting often involve manipulation 
of revenue, auditing standards require the auditor to perform analytical procedures 
on revenue accounts. The objective is to identify unusual or unexpected relationships 
involving revenue accounts that may indicate fraudulent financial reporting. By com- 
paring the sales volume based on recorded revenue with actual production capacity, 
for example, the auditor can reveal revenues beyond the entity’s production capabili- 
ties. The auditor may review monthly sales in the general ledger and may also review 
quarterly or monthly sales by product line. By reviewing sales trends, the auditor may 
identify unusual sales activity. For example, at one company the reversals of improp- 
erly recorded sales resulted in negative sales for a month. 


Other Information Auditors should consider all information they have obtained in any 
phase or part of the audit as they assess the risk of fraud. Many of the risk assessment pro- 
cedures that the auditor performs during planning to assess the risk of material misstate- 
ment may indicate a heightened risk of fraud. For example, information about manage- 
ment'’s integrity and honesty obtained during client acceptance procedures, inquiries and 
analytical procedures done in connection with the auditor’s review of the client’s quar- 
terly financial statements, and information considered in assessing inherent and control 
risks may lead to auditor concerns about the likelihood of misstatements due to fraud. 


As illustrated by Figure 10-4 (p. 328), auditors evaluate all the sources of information 
gathered to assess the risk of material misstatement due to fraud as part of audit plan- 
ning. Auditors assess fraud risk at both the overall financial statement level and at 
the assertion level for classes of transactions, account balances, and presentation and 
disclosure. While the assessment of fraud is conducted as part of audit planning, the 
auditor’s assessment of fraud risk should be ongoing throughout the audit, given the 
auditor may learn new information when performing further audit procedures that 
provide new insights about the risk of material misstatement. 


As discussed in Chapter 9, auditing standards require that the auditor presume 
that there is a risk of fraud in revenue recognition, given that fraudulently misstated 
financial statements often include misstated revenue amounts due to the premature 
recognition of revenue transactions or the recording of fictitious revenues. In light of 
this presumption, auditors should evaluate the types of revenue and revenue transac- 
tions, and the assertions related to these transactions, which may increase fraud risk. 
The auditor may conclude that the presumption that revenue recognition represents a 
fraud risk is not applicable for a particular client. If so, the auditor must document that 
conclusion in the working papers. 

When the auditor concludes that there is a risk of material misstatement due to 
fraud, auditing standards require the auditor to treat those risks as significant risks. 
For significant risks, including fraud risks, the auditor should obtain an understand- 
ing of internal control related to such risks, including an evaluation of whether the 
controls are suitably designed and implemented. Corporate governance and other 
control factors that reduce fraud risks are discussed in the next section. 


CORPORATE GOVERNANCE OVERSIGHT TO 
REDUCE FRAUD RISKS 


Management is responsible for implementing corporate governance and control ‘OBJECTIVE 10-40 


procedures to minimize the risk of fraud, which can be reduced through a combina- 4. Ta eae 
tion of prevention, deterrence, and detection measures. Because collusion and false 44 other Ree eer 
documentation make detection of fraud a challenge, it is often more effective and eco- factors that reduce fraud risks. 
nomical for companies to focus on fraud prevention and deterrence. By implementing 
antifraud programs and controls, management can prevent fraud by reducing oppor- 
tunity. By communicating fraud detection and punishment policies, management can 
deter employees from committing fraud. 

Guidance developed by the AICPA identifies three elements to prevent, deter, and 
detect fraud: 


1. Culture of honesty and high ethics 
2. Management’s responsibility to evaluate risks of fraud 
3. Audit committee oversight 


Let’s examine these elements closely, as auditors should have a thorough under- 
standing of each to assess the extent to which clients have implemented fraud-reducing 
activities. 


Research indicates that the most effective way to prevent and deter fraud is to imple- 
ment antifraud programs and controls that are based on core values embraced by the 
company. Such values create an environment that reinforces acceptable behavior and 
expectations that employees can use to guide their actions. These values help create a 
culture of honesty and ethics that provides the foundation for employees’ job respon- 
sibilities. Creating a culture of honesty and high ethics includes six elements. 


Culture of Honesty 
and High Ethics 


Setting the Tone at the Top Management and the board of directors are responsible for 
setting the “tone at the top” for ethical behavior in the company. Honesty and integrity 
by management reinforces honesty and integrity to employees throughout the organiza- 
tion. Management cannot act one way and expect others in the company to behave dif- 
ferently. Through its actions and communications, management can show that dishonest 
and unethical behaviors are not tolerated, even if the results benefit the company. 

A “tone at the top” based on honesty and integrity provides the foundation upon 
which a more detailed code of conduct can be developed to provide more specific 
guidance about permitted and prohibited behavior. Table 10-3 (p. 332) provides an 
example of the key contents of an effective code of conduct. 
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TABLE 10- 3 Example Elements of a Code of Conduct 


Code of Conduct Element Description 


Organizational Code of Conduct The organization and its employees must at all times comply with all applicable laws and regulations, with all busi- 
ness conduct well above the minimum standards required by law. 


General Employee Conduct The organization expects its employees to conduct themselves in a businesslike manner and prohibits unprofes- 
sional activities, such as drinking, gambling, fighting, and swearing, while on the job. 


Conflicts of Interest The organization expects that employees will perform their duties conscientiously, honestly, and in accordance 
with the best interests of the organization and will not use their positions or knowledge gained for private or 
personal advantage. 


Outside Activities, Employment, and All employees share a responsibility for the organization’s good public relations. Employees should avoid activities 
Directorships outside the organization that create an excessive demand on their time or create a conflict of interest. 

Relationships with Clients and Employees should avoid investing in or acquiring a financial interest in any business organization that has a 
Suppliers contractual relationship with the organization. 

Gifts, Entertainment, and Favors Employees must not accept entertainment, gifts, or personal favors that could influence or appear to influence 


business decisions in favor of any person with whom the organization has business dealings. 


Kickbacks and Secret Commissions Employees may not receive payment or compensation of any kind, except as authorized under organizational 
remuneration policies. 


Organization Funds and Other Assets | Employees who have access to organization funds must follow prescribed procedures for recording, handling, and 
protecting money. 


Organization Records and Employees responsible for accounting and record keeping must not make or engage in any false record or 
Communications communication of any kind, whether external or internal. 

Dealing with Outside People and Employees must take care to separate their personal roles from their organizational positions when communicating 
Organizations on matters not involving the organization's business. 

Prompt Communications All employees must make every effort to achieve complete, accurate, and timely communications in all matters 


relevant to customers, suppliers, government authorities, the public, and others within the organization. 


Privacy and Confidentiality When handling financial and personal information about customers and others with whom the organization has 
dealings, employees should collect, use, and retain only the information necessary for the organization’s business; 
internal access to information should be limited to those with a legitimate business reason for seeking that 
information. 


Source: AICPA, “CPA’s Handbook of Fraud and Commercial Crime Prevention.” Copyright by American Institute of CPAs. All rights reserved. Used with permission. 


Creating a Positive Workplace Environment Research shows that wrongdoing 
occurs less frequently when employees have positive feelings about their employer 
than when they feel abused, threatened, or ignored. A positive workplace can generate 
improved employee morale, which may reduce employees’ likelihood of committing 
fraud against the company. 

Employees should also have the ability to obtain advice internally before making 
decisions that appear to have legal or ethical implications. Many organizations, includ- 
ing all U.S. public companies, have a whistleblowing process for employees to report 
actual or suspected wrongdoing or potential violations of the code of conduct or ethics 
policy. Whistleblower hotlines are often directed to or monitored by an ethics officer or 
other trusted individual responsible for investigating and reporting fraud or illegal acts. 


Hiring and Promoting Appropriate Employees To be successful in preventing 
fraud, well-run companies implement effective screening policies to reduce the like- 
lihood of hiring and promoting individuals with low levels of honesty, especially 
those who hold positions of trust. Such policies may include background checks on 
individuals being considered for employment or for promotion to positions of trust. 
Background checks verify a candidate’s education, employment history, and personal 
references, including references about character and integrity. After an employee is 
hired, continuous evaluation of employee compliance with the company’s values and 
code of conduct also reduces the likelihood of fraud. 
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Training All new employees should be trained about the company’s expectations of 
employees’ ethical conduct. Employees should be told of their duty to communicate 
actual or suspected fraud and the appropriate way to do so. In addition, fraud aware- 
ness training should be tailored to employees’ specific job responsibilities with, for 
example, different training for purchasing agents and sales agents. 


Confirmation Most companies require employees to periodically confirm their re- 
sponsibilities for complying with the code of conduct. Employees are asked to state 
that they understand the company’s expectations and have complied with the code, 
and that they are unaware of any violations. These confirmations help reinforce the 
code of conduct policies and also help deter employees from committing fraud or 
other ethics violations. By following up on disclosures and non-replies, internal audi- 
tors or others may uncover significant issues. 


Discipline Employees must know that they will be held accountable for failing to fol- 
low the company’s code of conduct. Enforcement of violations of the code, regardless 
of the level of the employee committing the act, sends clear messages to all employees 
that compliance with the code of conduct and other ethical standards is important 
and expected. Thorough investigation of all violations and appropriate and consistent 
responses can be effective deterrents to fraud. 


Fraud cannot occur without a perceived opportunity to commit and conceal the act. 
Management is responsible for identifying and measuring fraud risks, taking steps to 
mitigate identified risks, and monitoring internal controls that prevent and detect fraud. 


Identifying and Measuring Fraud Risks Effective fraud oversight begins with manage- 
ment’s recognition that fraud is possible and that almost any employee is capable of 
committing a dishonest act under the right circumstances. This recognition increases 
the likelihood that effective fraud prevention, deterrence, and detection programs and 
controls are implemented. The Report to the Nations on Occupational Fraud and Abuse issued 
by the Association of Certified Fraud Examiners highlights the impact of the presence 
of 18 common internal controls on the median losses suffered by organizations for all 
types of fraud and the impact of those controls on the duration of the fraud scheme be- 
fore it was detected. The report compares the size and duration of loss due to fraud for 
organizations where that control was present to organizations where the control was 
absent and finds that frauds perpetrated in organizations with any of the 18 common 
controls resulted in significantly lower losses as compared to the losses in organizations 
that lacked these controls. Figure 10-6 (p. 334) reflects the percentage of reduction in 
losses from, and duration of, frauds that occurred as a result of these antifraud controls. 


Mitigating Fraud Risks Management is responsible for designing and implementing 
programs and controls to mitigate fraud risks, and it can change business activities 
and processes prone to fraud to reduce incentives and opportunities for fraud. For 
example, management can outsource certain operations, such as transferring cash 
collections from company personnel to a bank lockbox system. Other programs and 
controls may be implemented at a company-wide level, such as the training of all em- 
ployees about fraud risks and strengthening employment and promotion policies. 


Monitoring Fraud Prevention Programs and Controls For high fraud risk areas, 
management should periodically evaluate whether appropriate antifraud programs 
and controls have been implemented and are operating effectively. For example, 
management’s review and evaluation of results for operating units or subsidiaries in- 
creases the likelihood that manipulated results will be detected. 

Internal audit plays a key role in monitoring activities to ensure that antifraud 
programs and controls are operating effectively. Internal audit activities can both 
deter and detect fraud. Internal auditors assist in deterring fraud by examining and 
evaluating internal controls that reduce fraud risk. They assist in fraud detection by 
performing audit procedures that may uncover fraudulent financial reporting and 
misappropriation of assets. 
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Audit Committee 
Oversight 
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FIGURE 10-6 Impact of Antifraud Controls on Fraud Deterrence 


Percent Reduction in Percent Reduction in Median 
Control Median Loss from Fraud Duration of Fraud 


Antifraud policy 35.5% 50.0% 
Code of conduct 50.0% 33.3% 


Dedicated fraud department, 39.0% 50.0% 
function or team 


Employee support programs 55.0% 22.2% 


External audit of financial 32.8% 25.0% 
statements 


External audit of internal 42.8% 37.5% 
control over financial reporting 


Formal fraud risk assessments 44.0% 47.9% 
Fraud training for employees 39.0% 50.0% 


Fraud training for managers/ 40.5% 38.1% 
executives 


Hotline 40.5% 50.0% 
Independent audit committee 20.0% 41.7% 
Internal audit department 44.4% 41.7% 
Job rotation/mandatory vacation 33.3% 40.0% 
Management review 51.9% 45.8% 


Management certification of 34.8% 37.5% 
financial statements 


Proactive data monitoring/ 59.7% 50.0% 
analysis 

Rewards for whistleblowers 25.9% 33.3% 
Surprise audits 43.3% 50.0% 


Sources: |. The Fraud Resistant Organization: Tools and Techniques to Deter and Detect Financial Reporting Fraud, The Center for 
Audit Quality, 2014; 2. Report to the Nations on Occupational Fraud and Abuse, Association of Certified Fraud Examiners, 2014. 
Provided courtesy of The Center for Audit Quality. 


The audit committee has primary responsibility to oversee the organization’s financial 
reporting and internal control processes. In fulfilling this responsibility, the audit com- 
mittee considers the potential for management override of internal controls and oversees 
management’s fraud risk assessment process, as well as antifraud programs and con- 
trols. The audit committee also assists in creating an effective “tone at the top” about the 
importance of honesty and ethical behavior by reinforcing management’s zero tolerance 
for fraud. As a subcommittee of the board of directors, the audit committee is ultimately 
accountable for mitigating the risk of fraud, as illustrated by Figure 10-7. 

Audit committee oversight also serves as a deterrent to fraud by senior manage- 
ment. For example, to increase the likelihood that any attempt by senior management 
to involve employees in committing or concealing fraud is promptly disclosed, over- 
sight may include: 


* Direct reporting of key findings by internal auditors to the audit committee 
* Periodic reports by ethics officers about whistleblowing 
¢ Other reports about lack of ethical behavior or suspected fraud 


Because the audit committee plays an important role in establishing a proper tone 
at the top and in overseeing the actions of management, PCAOB auditing standards 
require the auditor of a public company to evaluate the effectiveness of the board and 
audit committee as part of the auditor’s evaluation of the operating effectiveness of 
internal control over financial reporting. As part of the evaluation, the auditor might 
consider the audit committee’s independence from management and the level of 
understanding between management and the audit committee regarding the latter’s 


FIGURE 10-7. Responsibility for Mitigating Fraud Risk 


Principal Antifraud Role 


* Oversight of tone at the top, 
Committee financial reporting, internal and 
external auditor 
Governance Solid knowledge of industry/business 
and ¢ Understanding of fraud risks 
Oversight a 
* Independence and objectivity 
Ability to challenge management, 
the board, and the audit committee 


Assess fraud risks and monitor controls 
Internal 


Audit — 
eee * Independence and objectivity 
Objective * Ability to challenge management, 
Assurance the board, and the audit committee 
¢ Assess fraud risks as part of audit 
planning and execution 
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Management * Strong tone at the top 
Primary Responsibility * Maintenance of effective 
for Financial Reporting interali controls 


* Robust fraud risk management 
Process program 


Financial Reporting Supply Chain 


Source: Deterring and Detecting Financial Reporting Fraud:A Platform for Action, provided courtesy of The Center for Audit 
Quality, 2010. Reprinted with permission. 


responsibilities. An external auditor may gather insights by observing interactions 
between the audit team, the audit committee, and internal audit regarding the level of 
audit committee commitment to overseeing the financial reporting process. PCAOB 
auditing standards note that ineffective oversight by the audit committee may be a 
strong indicator of a material weakness in internal control over financial reporting. 


CONCEPT CHECK 


1. What are the three conditions of fraud often referred to as “the fraud triangle”? 
2. What sources are used by the auditor to gather information to assess fraud risk? 


RESPONDING TO THE RISK OF FRAUD 
When the auditor identifies risks of material misstatements due to fraud, auditing ‘OBJECTIVE 10-500 


standards require the auditor to develop responses to those risks at three levels: over- 
all responses, responses at the assertion level, and responses related to management 
override. Some responses to fraud risks relate to overall engagement management, 
such as the types of personnel assigned to the engagement, while other responses are 
specific to assertions, such as procedures to evaluate the timing of the recording of a 
revenue transaction. Responses are also needed to address the risk of management 
override given it is present in all organizations. 


Develop responses to identified 
fraud risks. 


Auditors can choose among several overall responses to an increased fraud risk. The 
auditor should first discuss the auditor’s findings about fraud risk with manage- 
ment and obtain management's views of the potential for fraud and existing controls 
designed to prevent or detect misstatements. As described in the previous section, 
management may have programs designed to prevent, deter, and detect fraud, as well 
as controls designed to mitigate specific risks of fraud. Auditors should then consider 
whether such antifraud programs and controls mitigate the identified risks of material 
misstatements due to fraud or whether control deficiencies increase the risk of fraud. 


Overall Responses to 
Fraud Risks 
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Responses to Fraud Risk 


at the Assertion Level 


Responses to Address 
Management Override 
of Controls 
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If the risk of misstatement due to fraud is increased, more experienced personnel 
may be assigned to the audit. In some cases, a fraud specialist may be assigned to the 
audit team. Greater emphasis should also be placed on the importance of increased 
professional skepticism, such as greater sensitivity in the selection and extent of docu- 
mentation examined in support of transactions and more corroboration of manage- 
ment explanations about unusual matters affecting the financial statements. 

Auditors should also consider management’s choice of accounting principles. 
Careful attention should be placed on accounting principles that involve subjective 
measurements or complex transactions. Because auditors are required to presume 
fraud risk is present in revenue recognition, they should also evaluate the company’s 
revenue recognition policies. 

Fraud perpetrators are often knowledgeable about audit procedures. For this rea- 
son, auditing standards require auditors to incorporate unpredictability in the audit 
strategy. For example, auditors may visit inventory locations or test accounts that 
were not tested in prior periods. Auditors should also consider tests that address mis- 
appropriation of assets, even when the amounts are not typically material. 


When the auditor identifies fraud risk at the assertion level, the auditor designs appro- 
priate audit procedures to respond to specific fraud risks related to the account being 
audited and type of fraud risk identified. For example, if concerns are raised about rev- 
enue recognition because of cutoff or channel stuffing, the auditor may review the sales 
journal for unusual activity near the end of the period and review the terms of sales. 

The auditor’s response to fraud risk at the assertion level may involve changing 
the nature, timing, and extent of audit procedures. The nature of the procedures may 
need to be modified to obtain audit evidence that is more reliable and relevant. For 
example, the auditor may decide to physically examine certain assets rather than rely 
on inspection of documentation related to those assets. The timing of procedures may 
also need to be modified. For example, the auditor may choose to conduct substan- 
tive testing at the end of the period rather than performing those procedures based on 
interim data. The extent of procedures may also be changed to obtain more evidence 
in response to fraud risk at the assertion level. For example, the auditor may increase 
sample sizes when testing revenue transactions. Later in this chapter, procedures for 
specific fraud risk areas are discussed. 


The risk of management override of controls exists in almost all audits. Because man- 
agement is in a unique position to perpetrate fraud by overriding controls that are 
otherwise operating effectively, auditors must perform procedures in every audit to 
address the risk of management override. Three procedures must be performed in 
every audit. 


Examine Journal Entries and Other Adjustments for Evidence of Possible 
Misstatements Due to Fraud Fraud often results from adjustments to amounts 
reported in the financial statements, even when effective internal controls exist over 
the rest of the recording processes. The auditor should first obtain an understanding 
of the entity’s financial reporting process, as well as controls over journal entries and 
other adjustments, and inquire of employees involved in the financial reporting pro- 
cess about inappropriate or unusual activity in processing journal entries and other 
adjustments. In some organizations, management uses spreadsheet software to make 
adjustments to financial information generated by the accounting system. These “top- 
side adjustments” have been used to manipulate financial statements. Auditing stan- 
dards require testing of journal entries and other financial statement adjustments. The 
extent of testing is affected by the effectiveness of controls and results of the inquiries. 


Review Accounting Estimates for Biases Fraudulent financial reporting is often 
accomplished through intentional misstatement of accounting estimates. Auditing 
standards require the auditor to consider the potential for management bias when 


reviewing current-year estimates. The auditor is required to “look back” at significant 
prior-year estimates to identify any changes in the company’s processes or manage- 
ment’s judgments and assumptions that might indicate a potential bias. For example, 
management's estimates may have been clustered at the high end of the range of ac- 
ceptable amounts in the prior year and at the low end in the current year. 

Accounting standards increasingly require that assets be recorded at fair value. 
Although market value is readily determinable for some assets, determining fair value 
often depends on estimates and judgment, creating opportunities for manipulation. 


Evaluate the Business Rationale for Significant Unusual Transactions Auditing 
standards emphasize understanding the underlying business rationale for signifi- 
cant unusual transactions that might be outside the normal course of business for 
the company. The auditor should gain an understanding of the purposes of signifi- 
cant transactions to assess whether transactions have been entered into to engage in 
fraudulent financial reporting. For example, the company may engage in financing 
transactions to avoid reporting liabilities on the balance sheet. The auditor should 
determine whether the accounting treatment for any unusual transaction is appropri- 
ate in the circumstances, and whether information about the transaction is adequately 
disclosed in the financial statements. 


The auditor’s assessment of the risks of material misstatement due to fraud should be 
ongoing throughout the audit and coordinated with the auditor’s other risk assess- 
ment procedures. Auditors should be alert for the following conditions when doing 
the audit: 


Update Risk Assessment 
Process 


¢ Discrepancies in the accounting records 

* Conflicting or missing audit evidence 

¢ Problematic or unusual relationships between the auditor and management 

* Results from substantive or final review stage analytical procedures that indi- 
cate a previously unrecognized fraud risk 

¢ Responses to inquiries made throughout the audit that are vague or implausible 
or that produce evidence that is inconsistent with other information 


SPECIFIC FRAUD RISK AREAS 
Depending on the client’s industry, certain accounts are especially susceptible to ‘OBJECTIVE 10-60 


manipulation or theft. Specific high-risk accounts are discussed next, including warn- 

: : ; ; Recognize specific fraud risk 
ing signs of fraud. But even when auditors are armed with knowledge of common areas and develop procedures 
fraud symptoms, fraud remains extremely difficult to detect. However, an awareness to detect fraud. 

of common fraud conditions and other fraud detection techniques increases an audi- 

tor’s likelihood of identifying misstatements due to fraud. 


Revenue and related accounts receivable and cash accounts are especially suscep- 
tible to manipulation and theft. A study sponsored by the Committee of Sponsoring 
Organizations (COSO) found that more than half of financial statement frauds 
involve revenues and accounts receivable. Similarly, because sales are often made for 
cash or are quickly converted to cash, cash is also highly susceptible to theft. 


Revenue and Accounts 
Receivable Fraud Risks 


Fraudulent Financial Reporting Risk for Revenue As a result of the frequency of 
financial reporting frauds involving revenue recognition, the AICPA and SEC issued 
guidance dealing with revenue recognition. Auditing standards specifically require 
auditors to identify revenue recognition as a fraud risk in most audits. 

Several reasons make revenue susceptible to manipulation. Most important, 
revenue is almost always the largest account on the income statement; therefore a 
misstatement only representing a small percentage of revenues can still have a large 
effect on income. An overstatement of revenues often increases net income by an 
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Fraud is more difficult to uncover and often goes 
undetected for a longer period of time when there is 
collusion among the perpetrators. Koss Corporation, 
a manufacturer of headphones located in Milwaukee, 
and their auditors found this out the hard way when 
the company was notified by American Express that 
their principal accounting officer, who also served as 
vice president of finance and secretary, had been wir- 
ing funds from Koss Corporation’s account into her 
personal American Express account to fund her lav- 
ish lifestyle. Over a five-year period, she embezzled 
more than $31 million, which she used to purchase 
personal items such as cars, fur coats, and expensive 
jewelry, and to fund travel to exotic locations and 
extensive home improvements. 

The principal accounting officer colluded with 
two other accounting personnel in order to 
conceal the fraud. The three together overrode 
existing internal controls over the processing of 
payments, and concealed the fraud from manage- 
ment and the auditors. The embezzlement was 
hidden in the financial statements by overstating 
assets, expenses, and cost of sales, and understating 


liabilities and sales. When Koss Corp. ultimately 
restated their financial statements, their gross 
profit was actually higher than originally reported. 

The principal accounting officer pled guilty to 
six counts of wire fraud, was sentenced to || years 
in prison, and was required to pay $34 million in 
restitution. It was a classic case where a trusted, 
long-time employee was able to commit and con- 
ceal fraud for an extended period of time. 

Because of the size of the company’s mar- 
ket capitalization, Koss was not subject to the 
Sarbanes-Oxley (SOX) Section 404(b) requirement 
to obtain their auditor’s opinion on the effective- 
ness of internal control over financial reporting. 
Some may argue that this is a prime example 
of why SOX 404(b) audits of internal controls 
over financial reporting should also be required 
for non-accelerated filers. If Koss had been sub- 
ject to an integrated audit, the fraud may have 
been prevented or at least detected sooner. 


Source: Based on Bill Singer, “Sachdeva fraud: Another lost 
soul without a Wales,” Forbes.com (January 14, 2011). 


equal amount, because related costs of sales are usually not recognized on fictitious or 
prematurely recognized revenues. Revenue growth is often a key performance indica- 
tor for analysts and investors, providing an even greater incentive to inflate revenue. 
Another reason revenue is susceptible to manipulation is the difficulty of determining 
the appropriate timing of revenue recognition in many situations. 

Three main types of revenue manipulations are: 


1. Fictitious revenues 
2. Premature revenue recognition 
3. Manipulation of adjustments to revenues 


Fictitious Revenues The most egregious forms of revenue fraud involve creating 
fictitious revenues. You may be aware of several recent cases involving fictitious reve- 
nues, but this type of fraud is not new. The 1931 Ultramares case described in Chapter 5 
(p. 122) involved fictitious revenue entries in the general ledger. 

Fraud perpetrators often go to great lengths to support fictitious revenue. 
Fraudulent activity at Equity Funding Corp. of America, which involved issuing fic- 
titious insurance policies, lasted nearly a decade (from 1964 to 1973) and involved 
dozens of company employees. The perpetrators held file-stuffing parties to create 
the fictitious policies. 


Premature Revenue Recognition Companies often accelerate the timing of revenue 
recognition to meet earnings or sales forecasts. Premature revenue recognition, the 
recognition of revenue before accounting standards requirements for recording rev- 
enue have been met, should be distinguished from cutoff errors, in which transactions 
are inadvertently recorded in the incorrect period. In the simplest form of accelerated 
revenue recognition, sales that should have been recorded in the subsequent period 
are recorded as current period sales. 

One method of fraudulently accelerating revenue is through violating accounting 
rules related to “bill-and-hold” sales. Sales are normally recognized at the time goods 
are shipped, but in a bill-and-hold sale, the goods are invoiced before they are shipped. 
These types of sales can be legitimate depending on the contract terms, but can vio- 
late accounting standards if the required terms are not met. Another method involves 


issuing side agreements that modify the terms of the sales transaction. For example, 
revenue recognition is likely to be inappropriate if a major customer agrees to “buy” a 
significant amount of inventory at year-end, but a side agreement provides for more 
favorable pricing and unrestricted return of the goods if not sold by the customer. In 
some cases, as a result of the terms of the side agreement, the transaction does not 
qualify as a sale under accounting standards. 

Two notable examples of premature revenue recognition involve Bausch and 
Lomb and Xerox Corporation. In the Bausch and Lomb case, items were shipped 
that were not ordered by customers, with unrestricted right of return and promises 
that the goods did not have to be paid for until sold. The revenue recognition issues 
at Xerox were more complex. Capital equipment leases include sales, financing, and 
service components. Because the sales component is recognized immediately, Xerox 
attempted to maximize the amount allocated to this aspect of the transaction. 


Manipulation of Adjustments to Revenues The most common adjustment to rev- 
enue involves sales returns and allowances. A company may hide sales returns from 
the auditor to overstate net sales and income. If the returned goods are counted as part 
of physical inventory, the return may increase reported income. In this case, an asset 
increase is recognized through the counting of physical inventory, but the reduction 
in the related accounts receivable balance is not made. 

Companies may also understate bad debt expense, in part because significant 
judgment is required to determine the correct amount. Companies may attempt 
to reduce bad debt expense by understating the allowance for doubtful accounts. 
Because the required allowance depends on the age and quality of accounts receivable, 
some companies have altered the aging of accounts receivable to make them appear 
more current. 


Warning Signs of Revenue Fraud Many potential warning signals or symptoms in- 
dicate revenue fraud. Two of the most useful are analytical procedures and documen- 
tary discrepancies. 


Analytical Procedures Analytical procedures often signal revenue frauds, especially 
gross margin percentage and accounts receivable turnover. Fictitious revenue over- 
states the gross margin percentage, and premature revenue recognition also overstates 
gross margin if the related cost of sales is not recognized. Fictitious revenues also lower 
accounts receivable turnover, because the fictitious revenues are also included in un- 
collected receivables. Table 10-4 includes comparative sales, cost of sales, and accounts 
receivable data for Regina Vacuum, including the year before the fraud and the two 
fraud years. Notice how both a higher gross profit percentage and lower accounts 
receivable turnover ratio in the most recent two years that include the fraud helped 
signal fictitious accounts receivable. 


Example of the Effect of Fictitious Receivables 


ee on Accounting Ratios Based on Regina Vacuum Company 


Year Ended June 30 
1987 
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Sales $181,123 $126,234 $76,144 
Cost of sales (94,934) (70,756) (46,213) 
Gross profit 86,189 55,478 29,931 
Gross profit percentage 47.6% 43.9% 39.3% 
Year-end accounts receivable 51,076 27,801 14,402 
Accounts receivable turnover* 3.55 4.54 5.29 


* Accounts receivable turnover calculated as Sales/Ending accounts receivable 
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POCKETING 
PARKING CASH 
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Sam Ralston was in charge of a university parking lot. After several years, the university rotated 
He was supposed to place a parking receipt on the Sam to another lot. An astute employee in 
dash of the car when he received cash from the driver, the accounting office noticed that revenues 
but he would often collect the cash and wave the collected from the lot seemed to increase af- 
driver in without a receipt, particularly for sporting ter Sam’s departure. Further investigation 
events. The university considered it too expensive to revealed that average revenues declined at 
have two employees handle parking, and it was dif- the new lot to which Sam had been assigned. 
ficult to count the paid vehicles in a lot because some Confronted with the evidence, Sam confessed 
cars were parked by university employees with passes. and was terminated from employment. 


In some frauds, management generated fictitious revenues to make analytical 
procedures results, such as gross margin, similar to the prior year’s. In frauds like this, 
analytical procedures are typically not useful to signal the fraud, although the manip- 
ulation may affect related ratios such as accounts receivable turnover. 


Documentary Discrepancies Despite the best efforts of fraud perpetrators, fictitious 
transactions rarely have the same level of documentary evidence as legitimate transac- 
tions. For example, in the well-known fraud at ZZZZ Best, insurance restoration con- 
tracts worth millions of dollars were supported by one- or two-page agreements and 
lacked many of the supporting details and evidence, such as permits, that are normally 
associated with these types of contracts. 

Auditors should be aware of unusual markings and alterations on documents, 
and they should rely on original rather than duplicate copies of documents. Because 
fraud perpetrators attempt to conceal fraud, even one unusual transaction in a sample 
should be considered a potential indicator of fraud that should be investigated. 


Misappropriation of Receipts Involving Revenue Although misappropriation of 
cash receipts is rarely as material as fraudulent reporting of revenues, such frauds 
can be costly to the organization because of the direct loss of assets. A typical mis- 
appropriation of cash involves failure to record a sale or an adjustment to customer 
accounts receivable to hide the theft. 


Failure to Record a Sale One of the most difficult frauds to detect is when a sale is not 
recorded and the cash from the sale is stolen. Such frauds are easier to detect when 
goods are shipped on credit to customers. Tracing shipping documents to sales entries 
in the sales journal and accounting for all shipping documents can be used to verify 
that all sales have been recorded. 

It is much more difficult to verify that all cash sales have been recorded, especially 
if no shipping documents exist to verify the completeness of sales, and no customer 
account receivable records support the sale. In such cases, other documentary evi- 
dence is necessary to verify that all sales are recorded. For example, a retail establish- 
ment may require that all sales be recorded on a cash register. Recorded sales can then 
be compared to the total amount of sales on the cash register tape. If the sale is not 
included in the cash register, it is almost impossible to detect the fraud. 


Theft of Cash Receipts After a Sale Is Recorded It is much more difficult to hide the 
theft of cash receipts after a sale is recorded. If a customer’s payment is stolen, regular 
billing of unpaid accounts will quickly uncover the fraud. As a result, to hide the theft, 
the fraud perpetrator must reduce the customer’s account in one of three ways: 


1. Record a sales return or allowance 

2. Write off the customer’s account 

3. Apply the payment from another customer to the customer’s account, which is 
also known as lapping 


Warning Signs of Misappropriation of Revenues and Cash Receipts Relatively 
small thefts of sales and related cash receipts are best prevented and detected by 


Copyright © 2016. Pearson Education Limited. All rights reserved. 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education Limited, 


internal controls designed to minimize the opportunity for fraud. For detecting larger 
frauds, analytical procedures and other comparisons may be useful. 


Inventory is often the largest account on many companies’ balance sheets, and audi- 
tors often find it difficult to verify the existence and valuation of inventories. As a 
result, inventory is susceptible to manipulation by managers who want to achieve cer- 
tain financial reporting objectives. Because it is also usually readily saleable, inventory 
is also susceptible to misappropriation. 


Fraudulent Financial Reporting Risk for Inventory Fictitious inventory has been at 
the center of several major cases of fraudulent financial reporting. Many large com- 
panies have varied and extensive inventory in multiple locations, making it relatively 
easy for the company to add fictitious inventory to accounting records. 

While auditors are required to verify the existence of physical inventories, audit 
testing is done on a sample basis, and not all locations with inventory are typically 
tested. In some cases involving fictitious inventories, auditors informed the client in 
advance which inventory locations were to be tested. As a result, it was relatively easy 
for the client to transfer inventories to the locations being tested. 


Warning Signs of Inventory Fraud Similar to deceptions involving accounts re- 
ceivable, many potential warning signals or symptoms point to inventory fraud. 
Analytical procedures are one useful technique for detecting inventory fraud. 


Analytical Procedures Analytical procedures, especially gross margin percentage and 
inventory turnover, often help uncover inventory fraud. Fictitious inventory under- 
states cost of goods sold and overstates the gross margin percentage. Fictitious inven- 
tory also lowers inventory turnover. Table 10-5 is an example of the effects of fictitious 
inventory on inventory turnover based on the Crazy Eddie fraud. Note that the gross 
profit percentage did not signal the existence of fictitious inventories, but the signifi- 
cant decrease in inventory turnover was a sign of fictitious inventories. 


Cases of fraudulent financial reporting involving accounts payable are relatively com- 
mon although less frequent than frauds involving inventory or accounts receivable. 
The deliberate understatement of accounts payable generally results in an under- 
statement of purchases and cost of goods sold and an overstatement of net income. 
Significant misappropriations involving purchases can also occur in the form of pay- 
ments to fictitious vendors, as well as kickbacks and other illegal arrangements with 
suppliers. 


Fraudulent Financial Reporting Risk for Accounts Payable Companies may engage 
in deliberate attempts to understate accounts payable and overstate income. This can 


Example of the Effect of Fictitious Inventory on Inventory 


Le Turnover Based on Crazy Eddie, Inc. 


Year Ended 
March I, 1987 


Year Ended 
March 2, 1986 


9 Months Ended 
March 3, 1985 


Sales $352,523 $262,268 $136,319 
Cost of sales (272,255) (194,371) (103,421) 
Gross profit 80,268 67,897 32,898 
Gross profit percentage 22.8% 25.9% 24.1% 
Year-end inventories 109,072 59,864 26,543 
Inventory turnover* 2.50 3.20 5.20° 


* Inventory turnover calculated as Cost of sales/Ending inventory. 
7 Inventory turnover calculated based on annualized Cost of sales. 
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be accomplished by not recording accounts payable until the subsequent period or by 
recording fictitious reductions to accounts payable. 

All purchases received before the end of the year should be recorded as liabilities. 
This is relatively easy to verify if the company accounts for prenumbered receiving 
reports. However, if the receiving reports are not prenumbered or the company delib- 
erately omits receiving reports from the accounting records, it may be difficult for 
the auditor to verify whether all liabilities have been recorded. In such cases, analyti- 
cal evidence, such as unusual changes in ratios, may signal that accounts payable are 
understated. 

Companies often have complex arrangements with suppliers that result in reduc- 
tions to accounts payable for advertising credits and other allowances. These arrange- 
ments are often not as well documented as acquisition transactions. Some companies 
have used fictitious reductions to accounts payable to overstate net income. Therefore, 
auditors should read agreements with suppliers when amounts are material and make 
sure the financial statements reflect the substance of the agreements. 


Misappropriations in the Acquisition and Payment Cycle The most common fraud 
in the acquisitions area is for the perpetrator to issue payments to fictitious vendors 
and deposit the cash in a fictitious account. These frauds can be prevented by allow- 
ing payments to be made only to approved vendors and by carefully scrutinizing 
documentation supporting the acquisitions by authorized personnel before payments 
are made. In other misappropriation cases, the accounts payable clerk or other em- 
ployee steals a check to a legitimate vendor. Documentation related to the purchase is 
then resubmitted for payment to the vendor. Such fraud can be prevented by cancel- 
ing supporting documents to prevent their use as support for multiple payments. 


Although some accounts are more susceptible than others, almost every account is 
subject to manipulation. Let’s examine some other accounts with specific risks of 
fraudulent financial reporting or misappropriation. 


Fixed Assets Fixed assets, a large balance sheet account for many companies, are 
often based on subjectively determined valuations. As a result, fixed assets may be 
a target for manipulation, especially for companies without material receivables 
or inventories. For example, companies may capitalize repairs or other operating 
expenses as fixed assets. Such frauds are relatively easy to detect if the auditor exam- 
ines evidence supporting fixed asset additions. Nevertheless, prior cases of fraudu- 
lent financial reporting, such as WorldCom, have involved improper capitalization 
of assets. 

Because of their value and salability, fixed assets are also targets for theft. This is 
especially true for fixed assets that are readily portable, such as laptop computers. To 
reduce the potential for theft, fixed assets should be physically protected whenever 
possible, engraved, or otherwise permanently labeled, and should be periodically 
inventoried. 


Intangible Assets Intangible assets, such as goodwill, patents, and copyrights, are 
based mostly on accounting estimates dependent on subjective assumptions about 
their future benefits to the organization. As a result, their valuations may be subject 
to manipulation by management. For example, valuation of goodwill is dependent on 
key assumptions made by management about any potential impairment. To address 
fraud risks related to intangible assets, auditors often involve specialists, such as a 
business valuation expert, to assist them in the evaluation of audit evidence related to 
management's recorded amounts. 


Payroll Expenses Payroll is rarely a significant risk area for fraudulent financial 
reporting. However, companies may overstate inventories and net income by record- 
ing excess labor costs in inventory. Company employees are sometimes used to con- 
struct fixed assets. Excess labor cost may also be capitalized as fixed assets in these 
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circumstances. Material fringe benefits, such as retirement benefits, are also subject to 
manipulation. 

Payroll fraud involving misappropriation of assets is fairly common, but the 
amounts involved are often immaterial. The two most common areas of fraud are the 
creation of fictitious employees and overstatement of individual payroll hours. The 
existence of fictitious employees can usually be prevented by separation of the human 
resource and payroll functions. Overstatement of hours is typically prevented by use 
of time clocks or approval of payroll hours. 


RESPONSIBILITIES WHEN FRAUD IS SUSPECTED 


Frauds are often detected through the receipt of an anonymous tip, by management 
review, by internal audit, or by accident. Figure 10-8 highlights the most common 
detection methods, with tips being the most frequent method of fraud detection. 
External auditors detect a relatively small percentage of frauds, but are more likely to 
detect fraud when it materially impacts the financial statements. 


Throughout an audit, the auditor continually evaluates whether evidence gathered 
and other observations made indicate material misstatement due to fraud. All mis- 
statements the auditor finds during the audit should be evaluated for any indication 
of fraud. When fraud is suspected, the auditor gathers additional information to deter- 
mine whether fraud actually exists. Often, the auditor begins by making additional 
inquiries of management and others. 


Use of Inquiry Inquiry can be an effective audit evidence gathering technique, as we 
discussed in Chapter 7, and specific inquiries about the risk of fraud are required by 


FIGURE 10-8 | Fraud Detection Methods 
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Source: Report to the Nations on Occupational Fraud and Abuse, Association of Certified Fraud Examiners, 2014. 
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auditing standards. Interviewing allows the auditor to clarify unobservable issues and 
observe the respondent’s verbal and nonverbal responses. Interviewing can also help 
identify issues omitted from documentation or confirmations. The auditor can also 
modify questions during the interview based on the interviewee’s responses. 

Inquiry as an audit evidence technique should be tailored to the purpose for 
which it is being used. Depending on the purpose, the auditor may ask different types 
of questions and change the tone of the interview. Additionally, auditors should also 
apply professional skepticism as they consider how management responds to the 
auditor’s inquiries. One or more of three categories of inquiry can be used, depending 
on the auditor’s objectives. 


Categories of Inquiry An auditor uses informational inquiry to obtain information 
about facts and details that the auditor does not have, usually about past or current 
events or processes. Auditors often use informational inquiry when gathering follow- 
up evidence about programs and controls or other evidence involving a misstatement 
or suspected fraud uncovered during the audit. Auditors can most effectively use infor- 
mational inquiry by posing open-ended questions about details of events, processes, 
or circumstances. 

An auditor uses assessment inquiry to corroborate or contradict prior informa- 
tion. The auditor often starts assessment inquiry with broad, open-ended questions 
that allow the interviewee to provide detailed responses that can later be followed 
up with more specific questions. One common use of assessment inquiry is to cor- 
roborate management responses to earlier inquiries by asking questions of other 
employees. 

Interrogative inquiry is often used to determine if the individual is being decep- 
tive or purposefully omitting disclosure of key knowledge of facts, events, or circum- 
stances. Often, interrogative inquiry is confrontational, given that subjects may be 
defensive, as they cover up their knowledge of specific facts, events, or circumstances. 
When using interrogative inquiry, the auditor often asks specific directed questions 
that seek either a “yes” or “no” response. Interrogative interviewing should typically 
be done by senior members of the audit team who are experienced and knowledge- 
able about the client's affairs. 


Evaluating Responses to Inquiry For inquiry to be effective, an auditor needs to be 
skilled at listening and evaluating responses to questions. Typically, the interviewee’s 
initial response will omit useful information. Effective follow-up questions often lead 
to better information to assess whether fraud exists. Good listening techniques and 
observation of behavioral cues strengthen the auditor’s inquiry techniques, and it 
helps the auditor apply professional skepticism. 


Listening Techniques It is critical for the auditor to use effective listening skills through- 
out the inquiry process to maintain a questioning mindset. The auditor should stay 
attentive by maintaining eye contact, nodding in agreement, or demonstrating other 
signs of comprehension. Auditors should also attempt to avoid preconceived ideas 
about the information being provided. Good listeners also take advantage of silence to 
think about the information provided and to prioritize and review information heard. 


Observing Behavioral Cues An auditor who is skilled in using inquiry evaluates verbal 
and nonverbal cues when listening to the interviewee. Verbal cues, such as those out- 
lined in Table 10-6, may indicate the responder’s nervousness, lack of knowledge, or 
even deceit. In addition to observing verbal cues, the use of inquiry allows the auditor 
to observe nonverbal behaviors. Expert investigators note that subjects who are un- 
comfortable providing a response to an inquiry often exhibit many of the nonverbal 
behaviors shown in Table 10-7. 

Of course, not everyone who exhibits these behaviors is uncomfortable respond- 
ing to the auditor’s inquiry. The key is to identify when the individual’s behavior 
begins to change from his or her normal behavior. Less-experienced auditors should 


TABLE 10-6 


Verbal Cue Examples 


19 66 


Extensive use of modifiers, such as “generally, 
“normally,” etc. 


66 


usually,” “often,” 


Frequent rephrasing by the interviewee of the auditor’s question. 


Observing Verbal Cues During Inquiry 


Implications 


Auditors should probe further to determine whether the use of the modifier indicates 
that there are exceptions to the processes or circumstances being examined. 


Skilled auditors recognize that rephrasing often indicates that the interviewee is uncer- 
tain about his or her response or is attempting to stall for time. 


9 66, 


Filler terms, such as “um,” “wel 


eas 
D 


to tell you the truth,” etc. 


Auditors should be alert for filler terms, given that they often suggest that the inter- 
viewee is hesitant or unable to respond to the inquiry. 


Forgetfulness and acknowledgments of nervousness, such as “I’m a 
bit nervous” or “I just can’t remember.” 


When this continues to occur, auditors should be concerned about the possibility of 
deception. 


Tolerant attitudes, such as “it depends on the circumstances,” and 
overqualified responses, such as “to the best of my memory.” 


Dishonest people are often tolerant toward someone who may have committed fraud. 


Reluctance to end an interview. 


Someone who has been honest generally is ready to terminate an interview. Those 


trying to deceive may try to continue the inquiry process to convince the auditor 
that they are telling the truth. 


Source: Based on “Association of Certified Fraud Examiners (ACFE) Fraud Manual,” The Association of Certified Fraud Examiners (www.acfe.org). Reprinted by 
permission of The Association of Certified Fraud Examiners. 


be cautious when they start to observe unusual behaviors, and they should discuss 
their concerns with senior members of the audit team before doing anything in 
response to those behaviors. 


Other Responsibilities When Fraud Is Suspected When the auditor suspects that 
fraud may be present, auditing standards require the auditor to obtain additional evi- 
dence to determine whether material fraud has occurred. Auditors often use inquiry, 
as previously discussed, as part of that information-gathering process. 


Audit Software Analysis Auditors often use audit software such as ACL or IDEA to de- 
termine whether fraud may exist. For example, software tools can be used to search 
for fictitious revenue transactions by searching for duplicate sales invoice numbers, or 
by reconciling databases of sales invoices to databases of shipping records to ensure 
that all sales are supported by evidence of shipping. Similarly, these tools provide ef- 
ficient searches for breaks in document sequences, which may indicate misstatements 
related to the completeness objective for liabilities and expense accounts. Auditors use 
audit software, including basic spreadsheet tools such as Excel, to sort transactions or 
account balances into subcategories for further audit testing. For example, an auditor 


u.\:] 0 (Sy Observing Nonverbal Cues During Inquiry 


Nonverbal Cue Examples Implications 


Physical Barriers—Interviewees may When the interviewee feels uncomfortable with a specific inquiry, he or she 
may put up nonverbal barriers to try to keep the auditor at a comfortable 


* Block their mouth with their hands, pens, pencils, papers, etc. : 
distance. 


* Cross their arms or legs. 

¢ Use distracting noises, such as finger tapping or drumming. 

¢ Lean away from the auditor, usually toward the door or window, 
in an effort to create spatial distance. 


Signs of Stress—Interviewees under stress may In most people, lying will produce stress, which can manifest itself physically. 


° Show signs of having a dry mouth. 

° Lick lips, swallow, or clear their throats frequently. 
¢ Fidget, tap their foot, or shake a leg. 

* Sweat or become flushed in the face. 

° Avoid eye contact. 
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may use spreadsheet options to sort transactions exceeding a certain size or consisting 
of other unusual characteristics such as nonstandard account numbers or unusual dol- 
lar balances (for example, transactions with rounded dollar amounts may be unusual 
for certain industries). 

Auditors also use basic spreadsheet tools, such as Excel, to perform analytical 
procedures at disaggregated levels. For example, sales can be sorted to disaggregate 
the data by location, by product type, and across time (monthly) for further analyti- 
cal procedure analysis. Unusual trends not observable at the aggregate level may be 
detected when the data is analyzed in greater detail. 


Expanded Substantive Testing Auditors may also expand other substantive procedures 
to address heightened risks of fraud. For example, when there is a risk that sales terms 
may have been altered to prematurely record revenues, the auditor may modify the 
accounts receivable confirmation requests to obtain more detailed responses from 
customers about specific terms of the transactions, such as payment, transfer of cus- 
tody, and return policy terms. In some instances, the auditor may confirm individual 
transactions rather than entire account balances, particularly for large transactions re- 
corded close to year-end. 

Often the risk of fraud is high for accounts that are based on management’s sub- 
jective estimation. To respond to heightened risks that management used inappropri- 
ate assumptions to estimate account balances, such as the allowance for inventory 
obsolescence, the auditor may use specialists to assist in evaluating the accuracy and 
reasonableness of key assumptions. For example, auditors may rely on inventory 
specialists to assess the obsolescence of electronic parts inventories and business 
valuation experts to assess the reasonableness of market value assumptions made for 
certain investments. 


Other Audit Implications Auditing standards require the auditor to consider the impli- 
cations for other aspects of the audit. For example, fraud involving the misappropria- 
tion of cash from a small petty cash fund normally is of little significance to the auditor, 
unless the matter involves higher-level management, which may indicate a more perva- 
sive problem involving management's integrity. This may indicate to the auditor a need 
to reevaluate the fraud risk assessment and the impact on the nature, timing, and extent 
of audit evidence. 

When the auditor determines that fraud may be present, auditing standards 
require the auditor to discuss the matter and audit approach for further investigation 
with an appropriate level of management, even if the matter might be considered 
inconsequential. The appropriate level of management should be at least one level 
above those involved, as well as senior management and the audit committee. If the 
auditor believes that senior management may be involved in the fraud, the auditor 
should discuss the matter directly with the audit committee. 

The discovery that fraud exists also has implications for the public company audi- 
tor’s report on internal control over financial reporting. PCAOB auditing standards state 
that fraud of any magnitude by senior management may have important implications 
for the auditor’s opinion on internal control over financial reporting, which is discussed 
in Chapter 12. This includes fraud by senior management that results in even immaterial 
misstatements. If the fraud by senior management is a material weakness, the auditor's 
report on internal control over financial reporting will contain an adverse opinion. 

Sometimes, auditors identify risks of material misstatements due to fraud that 
have internal control implications. In some cases, the auditor’s consideration of man- 
agement’s antifraud programs and controls identifies deficiencies that fail to mitigate 
these risks of fraud. When auditing the financial statements of a public company, the 
auditor should consider those deficiencies when auditing internal controls over finan- 
cial reporting, which is described in Chapter 12. 

The disclosure of possible fraud to parties other than the client’s senior manage- 
ment and its audit committee ordinarily is not part of the auditor’s responsibility. As 
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described in Chapter 4, such disclosure is prevented by the auditor’s professional code 
of conduct and may violate legal obligations of confidentiality. 

The results of the auditor’s procedures may indicate such a significant risk of 
material misstatement due to fraud that the auditor should consider withdrawing 
from the audit. Withdrawal may depend on management's integrity and the diligence 
and cooperation of management and the board of directors in investigating the poten- 
tial fraud and taking appropriate action. 


DOCUMENTING THE FRAUD ASSESSMENT 


Auditing standards require that auditors document the following matters related to 
the auditor’s consideration of material misstatements due to fraud: 


* Significant decisions made during the discussion among engagement team 
personnel in planning the audit about the susceptibility of the entity’s financial 
statements to material fraud, including how and when the discussion occurred 
and who participated. 

* Procedures performed to obtain information necessary to identify and assess 
the risks of material fraud. 

* Specific risks of material fraud that were identified at both the overall financial 
statement level and the assertion level and a description of the auditor's re- 
sponses to those risks. 

* Reasons supporting a conclusion that there is not a significant risk of material 
improper revenue recognition. 

* Results of the procedures performed to address the risk of management over- 
ride of controls. 

* Other conditions and analytical relationships indicating that additional auditing 
procedures or other responses were required, and the actions taken by the audi- 
tor in response. 

¢ The nature of communications about fraud made to management, the audit 
committee, or others. 


CONCEPT CHECK 


1. What are the three ways auditors respond to fraud risks? 
2. Describe the three main techniques used to manipulate revenue. 


Describe information about the 
fraud risk assessment that must 
be documented in the working 
papers. 


SUMMARY 


This chapter examined the two types of fraud considered by auditors when auditing 
financial statements: fraudulent financial reporting and misappropriations of assets. 
Auditors are responsible for obtaining reasonable assurance that material misstatements 
are detected, whether due to fraud or error. The chapter described the way auditors gather 
information to assess fraud risk in every audit and develop appropriate responses to iden- 
tified fraud risks, after considering the effectiveness of management's antifraud programs 
and controls. Several illustrations of typical fraud techniques highlighted areas subject to 
greater fraud risk and provided examples of effective audit procedures to address those 
risk areas. 

Once auditors suspect fraud, they gather additional evidence, often through inquiry, 
and are responsible for making certain communications about suspected or detected 
fraud to senior management and the audit committee. Auditors of large public companies 
must consider the implications of their fraud risk assessments, including any suspected 
fraud, when arriving at their opinion on the operating effectiveness of internal control 
over financial reporting. 
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REVIEW QUESTIONS 


10-1 (OBJECTIVE 10-1) Define fraudulent financial reporting and give two examples that 
illustrate fraudulent financial reporting. 


10-2 (OBJECTIVE 10-1) Define misappropriation of assets and give two examples of 
misappropriation of assets. 


10-3 (OBJECTIVE 10-2) Give examples of risk factors for fraudulent financial reporting for 
each of the three fraud conditions: incentives/pressures, opportunities, and attitudes/ 
rationalization. 


10-4 (OBJECTIVE 10-2) Describe the fraud triangle and identify conditions for fraud. 


10-5 (oBjectivE 10-3) What should the audit team consider in its planning discussion about 
fraud risks? 


10-6 (OBJECTIVE 10-3) Describe identified risks of material misstatement due to fraud. 


10-7 (OBJECTIVE 10-3) The two components of professional skepticism are a questioning 
mind and a critical assessment of the audit evidence. How do these components help 
an auditor distinguish an unintentional misstatement from an intentional (fraudulent) 
misstatement? 


10-8 (OBJECTIVE 10-4) Describe the purpose of corporate codes of conduct and identify 
three examples of items addressed in a typical code of conduct. 


10-9 (oBjecTIVE 10-4) Identify corporate governance and other control environment fac- 
tors that reduce fraud risks. 


10-10 (OBJECTIVE 10-4) Distinguish management’s responsibility from the audit commit- 
tee’s responsibility for designing and implementing antifraud programs and controls 
within a company. 


10-11 (OBjEcTIVE 10-5) Describe the types of overall responses by auditors to address 
fraud risk. 


10-12 (oBjecTIVE 10-5) What three auditor actions are required to address the potential for 
management override of controls? 
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10-13 (OBJECTIVES 10-3, 10-6) What do auditing standards require the auditor to consider 
when assessing the risk of material misstatements in revenue? 

10-14 (OBJECTIVE 10-6) You go through the drive-through window of a fast food restaurant 
and notice a sign that reads, “Your meal is free if we fail to give you a receipt.” Why would 
the restaurant post this sign? 

10-15 (OBJECTIVE 10-7) Identify interview techniques responding to misstatements that 
may be the result of fraud. 

10-16 (OBJECTIVE 10-7) Identify three verbal and three nonverbal cues that may be observed 
when making inquiries of an individual who is being deceitful. 

10-17 (OBJECTIVE 10-7) You have identified a suspected fraud involving the company’s con- 
troller. What must you do in response to this discovery? How might this discovery affect 
your report on internal control when auditing a public company? 

10-18 (oBjEcTIVE 10-8) Describe the types of information that should be included in the 
auditor’s working papers as evidence of the auditor’s fraud assessment procedures. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


10-19 (OBJECTIVES 10-2, 10-3) The following questions address fraud risk factors and the 
assessment of fraud risk. 


a. Which of the following characteristics is most likely to heighten an auditor’s con- 
cern about the risk of material misstatements due to fraud in an entity's financial 
statements? 

(1) The entity’s industry is experiencing declining customer demand. 

(2) Employees who handle cash receipts are not bonded. 

(3) Internal auditors have direct access to the board of directors and the entity’s 
management. 

(4) The board of directors is active in overseeing the entity’s financial reporting policies. 


b. Which of the following circumstances is most likely to cause an auditor to increase the 
assessment of the risk of material misstatement of the financial statements due to fraud? 
(1) Property and equipment are usually sold at a loss before being fully depreciated. 
(2) Unusual discrepancies exist between the entity’s records and confirmation replies. 
(3) Monthly bank reconciliations usually include several in-transit items. 

(4) Clerical errors are listed on a computer-generated exception report. 


c. Which of the following statements reflects an auditor's responsibility for detecting fraud? 
(1) An auditor is responsible for detecting employee errors and simple fraud, but not for 
discovering fraudulent acts involving employee collusion or management override. 
(2) Anauditor should plan the audit to detect fraud caused by departures from GAAP. 
(3) An auditor is not responsible for detecting fraud unless the application of audit- 
ing standards would result in such detection. 
(4) An auditor should design the audit to provide reasonable assurance of detecting 
errors and fraud that are material to the financial statements. 


10-20 (OBJECTIVES 10-5, 10-7) The following questions concern the auditor’s responses to the 
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possibility of fraud. 
a. When fraud risk factors are identified during an audit, the auditor’s documentation 
should include 
The Risk Factors The Auditor’s Response to 
Identified The Risk Factors Identified 
(1) Yes Yes 
(2) Yes No 
(3) No Yes 
(4) No No 
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b. Ifan independent audit leading to an opinion on financial statements causes the audi- 
tor to believe that a material misstatement due to fraud exists, the auditor should first 
(1) request that management investigate to determine whether fraud has actually 

occurred. 

) make the investigation necessary to determine whether fraud has actually occurred. 
(3) consider the implications for other aspects of the audit and discuss the matter 
with the appropriate levels of management. 

(4) consider whether fraud was the result of a failure by employees to comply with 

existing controls. 


c. Which of the following is least likely to suggest to an auditor that the client’s manage- 
ment may have overridden internal control? 
(1) There are numerous delays in preparing timely internal financial reports. 
(2) Management does not correct internal control weaknesses that it knows about. 
(3) Differences are always disclosed on a computer exception report. 
(4) There have been two new controllers this year. 


10-21 (OBJECTIVE 10-6) The following questions address fraud risks in specific audit areas 
and accounts. 


a. Cash receipts from sales on account have been misappropriated. Which of the fol- 
lowing acts will conceal this embezzlement and be least likely to be detected by the 
auditor? 

(1) Understating the sales journal 

(2) Overstating the accounts receivable control account 
(3) Overstating the accounts receivable subsidiary records 
(4) Understating the cash receipts journal 


b. An auditor discovers that a client’s accounts receivable turnover is substantially lower 
for the current year than for the prior year. This trend may indicate that 
(1) the client recently tightened its credit-granting policies. 
(2) employees have stolen inventory just before year-end. 
(3) fictitious credit sales have been recorded during the year. 
(4) an employee has been lapping receivables in both years. 


c. Which of the following internal controls will best detect the theft of valuable items 
from an inventory that consists of hundreds of different items selling for $1 to $10 
and a few items selling for hundreds of dollars? 

(1) Maintain a perpetual inventory of only the more valuable items, with frequent 
periodic verification of the validity of the perpetual inventory records. 

(2) Have an independent auditing firm examine and report on management's as- 
sertion about the design and operating effectiveness of the control activities 
relevant to inventory. 

(3) Have separate warehouse space for the more valuable items, with sequentially 
numbered tags. 

(4) Require an authorized officer’s signature on all requisitions for the more valuable 
items. 
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DISCUSSION QUESTIONS AND PROBLEMS 


10-22 (OBJECTIVE 10-2) During audit planning, an auditor obtained the following 
information: 


1. High financial stability or profitability is threatened by economic, industry, or entity 
operating conditions. 

2. There is an excessive pressure for management to meet high debt repayment or other 
debt covenant requirements. 

3. Management or the board of directors’ personal net worth is materially threatened 
very hard by the entity’s financial performance. 

4. Significant accounting estimates involve subjective judgments or uncertainties that 
are very difficult to verify. 

5. Board of director or audit committee oversights over financial reporting very 
ineffectively. 

6. There is very high turnover or ineffective accounting, internal audit, or information 
technology staff. 

7. There is very inappropriate or ineffective communication and support of the entity's 
values. 

8. There are many known history of violations of securities laws or other laws and 
regulations. 

9. Management’s practice makes overly very aggressive or unrealistic forecasts to 
analysts, creditors, and other third parties. 


a. Indicate whether the information indicates an increased risk for fraud. Required 
b. If the information indicates an increased risk of fraud, indicate which fraud condition 
(incentives/pressures, opportunities, or attitudes/rationalization) is indicated. 
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10-23 (OBJECTIVES 10-1, 10-2, 10-3, 10-8) Assessing the risk of fraud in a financial statement 
audit is a difficult audit judgment. Auditing standards require the auditor to perform sev- 
eral audit procedures to accumulate information to assess the risk of fraud. You are the 
in-charge auditor responsible for planning the financial statement audit of Spencer, Inc. 
Two new staff auditors are assisting you with the initial audit planning and have asked you 
the following questions. 


Required Briefly summarize your response to these staff auditor questions: 


a. What is the purpose of the audit team’s brainstorming session? 

b. Who should attend the brainstorming session and when should the session be held? 

c. What is the role of the two staff auditors in the brainstorming session? 

d. What is the auditor’s responsibility under auditing standards for detecting fraud? 

e. What must the auditor document in the working papers related to this brainstorming 
session? 


10-24 (OBJECTIVES 10-2, 10-6) The Art Appreciation Society operates a museum for the ben- 
efit and enjoyment of the community. 

When the museum is open to the public, two clerks who are positioned at the 
entrance collect a $5.00 admission fee from each nonmember patron. Members of the 
Art Appreciation Society are permitted to enter free of charge upon presentation of their 
membership cards. 

At the end of each day, one of the clerks delivers the proceeds to the treasurer. The 
treasurer counts the cash in the presence of the clerk and places it in a safe. Each Friday 
afternoon, the treasurer and one of the clerks deliver all cash held in the safe to the bank 
and receive an authenticated deposit slip that provides the basis for the weekly entry in the 
accounting records. 

The Art Appreciation Society board of directors has identified a need to improve its 
internal controls over cash admission fees. The board has determined that the cost of in- 
stalling turnstiles, sales booths, or otherwise altering the physical layout of the museum 
will greatly exceed any benefits. However, the board has agreed that the sale of admission 
tickets must be an integral part of its improvement efforts. 

Smith has been asked by the board of directors of the Art Appreciation Society 
to review the internal control over cash admission fees and provide suggestions for 
improvements. 


Required a. Indicate weaknesses in their processes over cash admission fees that Smith should 
identify, and recommend one improvement for each of the weaknesses identified. 
Organize the answer as indicated in the following illustrative example.* 


Weaknesses in Processes Recommendations 


1. There is no basis for establishing 1. Prenumbered admission tickets 
the number of paying patrons. should be issued upon payment of the 
admission fee. 


b. Indicate which of the weaknesses, if any, increase the likelihood of misappropriation 
of assets. 

c. Indicate which of the weaknesses, if any, increase the likelihood of fraudulent finan- 
cial reporting. 


@@® 10-25 (OBJECTIVES 10-1, 10-2, 10-3, 10-4) The chapter vignette “Asset Misappropriation and 
00004 Collusion at Koss Corporation” on page 338 highlights the fraud at Koss Corporation, 
where the principal accounting officer, Sujata (“Sue”) Sachdeva, embezzled approximately 
$31 million over 5 years to fund her lavish lifestyle. This was a material amount in relation 
to Koss Corporation’s reported net income ($1,976,668 for 2009 and $4,494,289 for 2008). 
The fraud was not detected by the external auditors. Ms. Sachdeva used wire transfers 
from the company’s account to her American Express account, cashier’s checks, manual 
checks, and traveler’s checks drawn on the company’s account to fund her purchases. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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The embezzlement was concealed by overstating assets, expenses, and cost of sales and 
understating liabilities and sales, through the collusion of two employees in the account- 
ing department. At the time Ms. Sachdeva was arrested, more than 22,000 items were 
confiscated from her home that had been purchased using Koss Corporation funds. Below 
are just a few examples taken from the court complaint filed against her of purchases 
Ms. Sachdeva made on her American Express charge card that were later paid for by wire- 
transferring money from Koss Corp. to American Express as payment: 


. $127,400 from A.C. Zuckennan Jewelers; 

. $670,000 from Au Courant, a women’s clothing store; 

. $12,500 from Channel BTQ #16; 

. $14,000 from Georgio-Armani; 

. $40,000 from Holzman’s Furs; 

. $255,000 from Karat 22 Jewelers; 

. $1,358,322 from Valentina Boutique, a women’s clothing store. 


NWWBWNH FH 


a. Is this fraud an example of asset misappropriation or fraudulent financial reporting? 

b. Ms. Sachdeva came from a wealthy family, so the theft was not necessary for her to 
live comfortably. What incentive and attitude/rationalization do you believe drove 
Ms. Sachdeva to embezzle? Would there have been behavioral red flags that should 
have alerted auditors to the fraud? 

c. Koss Corporation designs, manufactures, and sells stereo headphones and related ac- 
cessories. Do you think it would be normal for a manufacturing company to have re- 
curring disbursements to American Express or more than 100 cashier’s checks written 
per year? How could auditors have used audit software to detect these disbursements? 

d. What internal controls could Koss Corporation have had in place to prevent em- 
ployee collusion in the first place or detect the fraud after it began? 

e. Ms. Sachdeva avoided using wire transfers during the month of June because she 
knew this was the month the auditors would review the bank records. What could 
the auditors have done differently to detect the fraud? 

f. Do you believe auditors should be held liable for not detecting fraud when manage- 
ment attempts to hide the fraud and there is employee collusion? Does it matter 
whether the amounts are material or immaterial to the financial statements? 


10-26 (OBJECTIVES 10-1, 10-4, 10-6) The following misstatements are included in the 
accounting records of the Jasmine Manufacturing Company: 


1. Several key-entry mistakes resulted in the exclusion of three invoices. 

2. A customer complained when he received a bill, saying he has already paid. He pro- 
duced a receipt, but there was no record of the payment in the books. 

3. A shipment to a customer was not billed because of the loss of the bill of lading. 

4. Merchandise was shipped to a customer, but no bill of lading was prepared. Because 
billings are prepared from bills of lading, the customer was not billed. 

5. Commercial and residential customers are not differentiated on bills of lading. 

6. Sales generated through the company’s Web site are recorded at the point the cus- 
tomers submit the orders online. 

7. A shipment of goods was recorded as being paid at the end of the year, but was re- 
corded as unpaid at the beginning of the next year. 

8. Several invoices were lost when the office moved to a new location. 


a. Identify whether each misstatement is an error or fraud. 

b. For each misstatement, list one or more controls that should have prevented it from 
occurring on a continuing basis. 

c. For each misstatement, identify evidence the auditor can use to uncover it. 


10-27 (OBJECTIVES 10-2, 10-4, 10-6) Appliances Repair and Service Company bills all 
customers rather than collecting in cash when services are provided. All mail is opened 
by Tom Peter, treasurer. Peter, a CPA holder, is the most qualified person in the company 
who is in the office daily. Therefore, he can solve problems and respond to customers’ 
needs quickly. Upon receipt of cash, he immediately prepares a listing of the cash and a 


Created from undip-ebooks on 2021-01-12 18:55:10. 


Required 


Required 


duplicate deposit slip. Cash is deposited daily. Peter uses the listing to enter the financial 
transactions in the computerized accounting records. He also contacts customers about 
uncollected accounts receivable. Because he is so knowledgeable about the business and 
each customer, he grants credit, authorizes all sales allowances, and charges off uncol- 
lectible accounts. The owner is extremely pleased with the efficiency of the company. He 
can run the business without spending much time there because of Peter’s effectiveness. 
Imagine the owner’s surprise when he discovers that Peter has committed a major theft of 
the company’s cash receipts. He did so by not recording sales, recording improper credits 
to recorded accounts receivable, and overstating receivables. 

Imagine the owner’s surprise when he discovers that Gyders has committed a major 
theft of the company’s cash receipts. He did so by not recording sales, recording improper 
credits to recorded accounts receivable, and overstating receivables. 


Required a. What weaknesses in their processes might have permitted the fraud? 
b. What suggestions do you have for changing the process to reduce the future poten- 
tial for fraud? 


10-28 (OBJECTIVES 10-2, 10-4, 10-6) The Kowal Manufacturing Company employs about 50 
production workers and has the following payroll procedures. 

The factory foreman interviews applicants and on the basis of the interview either 
hires or rejects them. When applicants are hired, they prepare a W-4 form (Employee's 
Withholding Exemption Certificate) and give it to the foreman. The foreman writes the 
hourly rate of pay for the new employee in the corner of the W-4 form and then gives the 
form to a payroll clerk as notice that the worker has been employed. The foreman verbally 
advises the payroll department of rate adjustments. 

A supply of blank time cards is kept in a box near the time clock at the entrance to the 
factory. Each worker takes a time card on Monday morning, fills in his or her name, and 
punches the time clock upon their daily arrival and departure. At the end of the week, the 
workers drop the time cards in a box near the door to the factory. 

On Monday morning, the completed time cards are taken from the box by a payroll 
clerk. One of the payroll clerks then enters the payroll transactions into the computer, 
which records all information for the payroll journal that was calculated by the clerk and 
automatically updates the employees’ earnings records and general ledger. Employees are 
automatically removed from the payroll when they fail to turn in a time card. 

The payroll checks that are not directly deposited into employees’ bank accounts are 
manually signed by the chief accountant and given to the foreman. The foreman distrib- 
utes the checks to the workers in the factory and arranges for the delivery of the checks to 
the workers who are absent. The payroll bank account is reconciled by the chief accoun- 
tant, who also prepares the various quarterly and annual payroll tax reports. 


Required a. List the most important weaknesses in their processes and state the misstatements 
that are likely to result from the weakness. 
b. For each weakness that increases the likelihood of fraud, identify whether the likely 
fraud is misappropriation of assets or fraudulent financial reporting.* 


ji 10-29 (OBJECTIVES 10-2, 10-5, 10-8) This problem requires you to access PCAOB Auditing 
‘OY Standards (pcaobus.org) to answer each of the following questions. You can access 
Ll those standards by viewing content found under the link “Standards.” For each answer, 


document the paragraph(s) in the relevant standard supporting your answer. Review 
PCAOB auditing standards related to the auditor’s consideration of fraud in a financial 
statement audit, to answer questions in parts a. through d. Review PCAOB Auditing 
Standard No. 12, Identifying and Assessing Risks of Material Misstatement, to answer parts 
e.and f. 


Required a. You have determined that there is a fraud risk related to the existence and accuracy of 
inventory. Review the guidance in PCAOB auditing standards to provide examples of 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 


ARa@titice FohintEsAGMDATHARIOACHESSson Education, Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action ?docID=51 85606. 
1-01-12 18:55:10. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education, Limited, 20 6hep@aestl QodoA SSEESIING /AASHOK BEES AID ISDEM GTO ERoHDO BUS Kail 


auditor responses involving changes to the nature, timing, and extent of audit proce- 
dures related to this assessed fraud risk for inventory. 
b. What do PCAOB auditing standards say about how the auditor should assess risk 
related to revenue recognition? 
c. What examples of auditor responses to fraud risk related to revenue recognition are 
provided in PCAOB auditing standards? 
. What kind of documentation is required for the auditor’s consideration of fraud? 
. What kinds of inquiries about fraud risks are required by PCAOB Standard No. 12? 
How does PCAOB Standard No. 12 define “fraud risk factors”? Do all conditions have 
to be present for fraud risk to exist? 


rh @ Oo 


10-30 (OBJECTIVE 10-5) The following audit procedures are included in the audit program of 
ABC Manufacturing, Inc. 

1. Use audit software to examine journal entries in the sales, cash receipts, purchases, 
cash disbursements, payroll, and general journals for any amounts exceeding 
$1 million and for any entries with unusual account coding. Review related support- 
ing documentation for reasonableness. 

2. Examine the estimate for the Allowance for Doubtful Accounts recorded in the prior year 
audited financial statements. Obtain information about receivable write-offs recorded 
during the current fiscal year for receivables included in the prior year audited financial 
statements and obtain other information to perform a hindsight evaluation of the reason- 
ableness of the allowance account included in the prior year audited financial statements. 

3. Continue to observe inventories at ABC’ two main distribution centers, but for this 
year examine inventories at its two smaller warehouses not examined in prior years. 
Management does not expect you to examine those additional warehouses. 

4. During the current year, ABC has entered into a joint venture partnership with a 
company that serves similar customers, but makes an entirely different product than 
ABC. Inquire of management about the business rationale for this transaction. 

5. Review for reasonableness any manual journal entries made by management to 
adjust the computer-generated accounting records. 


a. What is the overarching purpose for performing all of these procedures? 
b. How might each audit procedure in 1 through 5 help the auditor identify fraud risk? 


10-31 (OBJECTIVES 10-2, 10-3, 10-4, 10-6) Fateen Shakran, store supervisor, is responsible for cre- 
ating a summary of the store’s transactions at the end of each day. He is also responsible for 
checking the register tape against the credit slips and cash in the register, and then depositing 
the money in the morning. Fateen recently took on a new role as head bookkeeper, when the 
former one retired. Fateen would occasionally change a transaction on the register and pocket 
the extra money. Now, he waits until the end of the year for the store manager to go on holi- 
day break. He writes a check for himself in the amount of an invoice, then cancels the check 
originally written to pay for the invoice. He cashes the check for himself, and waits a few weeks 
before resubmitting the invoice. When the owner writes the second check, Fateen records this 
in the cash disbursements journal, and then deposits the check. He then files it with all other 
paid invoices. Fateen has been following this practice successfully for several years and feels 
confident that he has developed a foolproof method to earn some extra income. 


a. What is the auditor’s responsibility for discovering this type of embezzlement? 
b. What deficiencies exist in the client’s internal control? 
c. What evidence can the auditor use to uncover the fraud? 


10-32 (OBJECTIVES 10-5, 10-6) The following are various potential frauds in the sales and col- 
lection cycle: 
1. The company engaged in channel stuffing by shipping goods to customers that had 
not been ordered. 
2. The allowance for doubtful accounts was understated because the company altered 
the aging of accounts receivable to reduce the number of days outstanding for delin- 
quent receivables. 
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3. The accounts receivable clerk stole checks received in the mail and deposited them 
in an account that he controlled. He issued credit memos to the customers in the 
amount of the diverted cash receipts. 

4. The company contacted a major customer and asked them to accept a major ship- 
ment of goods before year-end. The customer was told that they could return the 
goods without penalty if they were unable to sell the goods. 

5. A cashier stole cash receipts that had been recorded in the cash register. 

6. The company recorded “bill-and-hold sales” at year-end. Although the invoices 
were recorded as sales before year-end, the goods were stored in the warehouse and 
shipped after year-end. 

7. The company did not record credit memos for returns received in the last month of 
the year. The goods received were counted as part of the company’s year-end physical 
inventory procedures. 

. A cashier stole cash receipts by failing to record the sales in the cash register. 

9. The CFO recorded fictitious credit sales at the end of the year without recording the 

associated cost of sales and reduction in inventory. 


ioe) 


Required a. Indicate whether the fraud involves misappropriation of assets or fraudulent finan- 
cial reporting. 
b. For those frauds that involve misappropriation of assets, state a control that would be 
effective in preventing or detecting the misappropriation. 
c. For those frauds that involve fraudulent financial reporting, state an audit procedure 
that would be effective in detecting the fraud. 


10-33 (OBJECTIVES 10-6, 10-7) The following audit procedures are included in the audit pro- 
gram because of heightened risks of material misstatements due to fraud. 

1. Use audit software to search cash disbursement master files for missing check 
numbers. 

2. Search the accounts receivable master file for account balances with missing or 
unusual customer numbers (e.g., “888888’). 

3. Use audit software to create a list of all credits to the repair and maintenance expense 
account for follow-up testing. 

4. Engage an actuarial specialist to examine management's assumptions about average 
length of employment and average life expectancy of retirees used in pension account- 
ing decisions. 

5. Send confirmations to customers for large sales transactions made in the fourth 
quarter of the year to obtain customer responses about terms related to the transfer 
of title and ability to return merchandise. 

6. Use audit software to search purchase transactions to identify any with nonstandard 
vendor numbers or with vendor names reflecting related parties. 

7. Search sales databases for missing bill of lading numbers. 

8. Use audit software to search for journal entries posted to the sales revenue account 
from a nonstandard source (other than the daily sales journal). 


Required For each audit procedure: 
a. Describe the type of fraud risk that is likely associated with the need for this audit 
procedure. 
b. Identify the related accounts likely affected by the potential fraud misstatement. 
c. Identify the related audit objective(s) that this procedure addresses. 


CASE 


10-34 (OBJECTIVES 10-2, 10-3, 10-4) Yosef, CPA, is engaged for the financial statement audit 
of Gilgamesh Goods, an online antiquities dealer. Gilgamesh Goods has been in business 
since 2005; however, this is the second time Yosef’s firm has dealt with the company. 
Waseem, CPA, is Yosef’s supervisor. 
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YOSEF: Have you had a chance to look over my report for Gilgamesh yet? 
WASEEM: Yes, but I think that your worries about that supplier are unfounded. 


YOSEF: I tried mailing a confirmation of charges to the supplier, but I never heard back. 
There is an answering service for the phone system, but no one returns my call. And they 
always charge the same amount, but there is no record of the exact goods or services they 
provide. 


WASEEM: We noticed the same thing last year, too. But the owner, Saul, put a call through 
for us last year, and the supplier confirmed the amounts. 


YOSEF: | think it’s a bit suspicious. The owner’s salary is average enough, but the fact that 
no one gets bonuses is surprising. 


WASEEM: Maybe, but remember that this is a fairly new business. They’ve invested in the 
company. 

YOSEF: What about the fact that the company doesn’t seem to have a permanent 
address? 


WASEEM: Well, it’s possible that online companies might not need a permanent address. 


YOSEF: Still, I think that we need to bring up the issue with the auditing committee. They 
probably ran into similar issues when they were preparing the internal audit and reviewing 
statements. 


WASEEM: Before you start implying that you think the company is a fake, remember that 
Saul and the store manager are both on the committee. There might be five other people 
in the meetings, but Saul and the store manager have the most power in the group. They’re 
the only ones who are closely checking the books. 


YOSEF: | think that if we present the material to the group, it might feel less confronta- 
tional. Also, we could ask for a meeting with the accountants of the other company, as well 
as a copy of the company’s invoices. That way, we could be absolutely sure it’s just a matter 
of a few discrepancies and misstatements. 


WASEEM: If you cause a stir, I’m sure Saul and the other committee members will agree to 
cooperate and get us the necessary information. But they might not choose our firm for 
next year’s audit, and the company seems to be doing well. We want to keep our clients 


happy. 
YOSEF: | think the integrity of our company should be equally important, though. Besides, 
the employees of the company have a right to know if something is amiss at work. 


WASEEM: Business is booming right now, so the employees would probably be irritated 
that you're trying to frame their employer for fraud. 


YOSEF: | know, but if this continues, they’re the ones who will end up hurt by any reper- 
cussions of the theft. Remember, they have stock and an interest in the company, too. 
I think they have a right to know of this, even if it ends up being nothing. 


a. Describe the fraud risk factors that are indicated in the dialogue above. Required 
b. Describe Waseem’s misconceptions regarding the consideration of fraud in the audit 

of Gilgamesh’s financial statements that are contained in the preceding dialogue, and 

explain why each is a misconception. 
c. Describe an auditor’s audit documentation requirements regarding the assessment of 

the risk of material misstatement due to fraud. 


INTEGRATED CASE APPLICATION— 


PINNACLE MANUFACTURING: PART ITI 
10-35 (OBJECTIVES 10-2, 10-3) In Parts I (pp. 257-259) and II (pp. 294-296) of this case, you 


performed preliminary analytical procedures and assessed acceptable audit risk and 
inherent risk for Pinnacle Manufacturing. 
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The auditor also assesses fraud risk as part of risk assessment procedures performed 
during audit planning. You have been invited by the audit partner on the Pinnacle engage- 
ment to participate in the fraud brainstorming session conducted as part of audit plan- 
ning. The purpose of Part III is to identify fraud risks and the response to these fraud risks 
in the audit of Pinnacle Manufacturing. 


Required _a. Use the fraud triangle and information from Parts I and II of this case to identify 
incentives/pressures, opportunities, and attitudes/rationalizations for Pinnacle to 
engage in fraudulent financial reporting. 

b. Identify one or more fraud risks that you believe exist due to the nature of Pinnacle’s 
industry. Indicate the accounts most likely to be affected by the identified fraud risks. 

c. Auditors must generally identify a fraud risk for revenue recognition. Indicate at least 
two ways that Pinnacle might engage in revenue recognition fraud. Identify the spe- 
cific nature of the potential fraud and an audit procedure that you would perform to 
determine whether fraud is occurring. 

d. In Part I of this case you performed preliminary analytical procedures on Pinnacle’s 
financial statements. Identify changes in account balances or ratios that you believe 
indicate the potential for fraud, and describe the nature of the potential fraud. 

e. Part II of the case includes 11 situations that you encountered in audit planning. For 
each situation, describe whether it indicates a potential fraud risk. For each potential 
fraud risk, identify the related fraud risk triangle element(s). 


ACL PROBLEM 


ACD 10-36 (OBJECTIVE 10-6) This problem requires the use of ACL software, which can be 
accessed through the textbook Web site. Information about downloading and using ACL 
and the commands used in this problem can also be found on the textbook Web site. You 
should read all of the reference material preceding the instructions about “Quick Sort” 
before locating the appropriate command to answer parts a. through e. For this problem, 
use the file labeled “Pcard Transactions” in the ACL_Cypress_Pcards Project. (Pcards, or 
purchasing cards, are issued to certain employees to allow them to make purchases on 
behalf of the company.) The suggested command or other source of information needed 
to solve the problem requirement is included at the end of each question. 


Required a. Compute the total of the Amount column for comparison to the total Pcard pur- 
chases amount as recorded by the client. (Total) 

b. Pcard purchases over $1,000 are required to be reviewed by a supervisor. Print any 
purchases for subsequent follow-up where the total exceeded that amount. (Filter) 

c. Identify the three vendors from which the largest total Pcard purchases were made. 
You will need to save the summary by vendor as a file, by clicking on “Output” within 
the Summarize command, in order to sort the data. (Summarize and Quick Sort) 

d. For the vendor with the largest total amount identified in part c., identify and print 
out any transactions that exceeded $1,000 for subsequent follow-up. (Filter and 
Quick Sort) 

e. You are concerned that some employees may be structuring transactions to keep 
them below the $1,000 threshold for approval. Identify transactions that are between 
$990.00 and $999.99. (Filter) 
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INTERNAL CONTROL 
AND COSO FRAMEWORK 


CHAPTER 


Cyberattacks: A New Reality 


When Michael Lynton, Chief Executive Officer of Sony Pictures, answered his phone at 
6:00 a.m. on a late November 2014 morning, he had no idea of the magnitude of the crisis that 
was developing. Mr. Lynton was informed that Sony’s computer system had been hacked, but 
the extent of the damage was still unclear. Ultimately, Sony would realize they underestimated 
the magnitude of the cyberattack at this early stage, but it became all too clear as events 
unfolded. 


Sony had to shut down all of their computer systems in the California offices of Sony Pictures, 
as well as overseas locations. The company had to resort to manual systems, and had lost 
the ability to communicate via 
e-mail or voice mail. According 
to a New York Times article, 
it became clear that “moun- 
tains of documents had been 
stolen, internal data centers 
had been wiped clean, and 
75 percent of the servers had 
been destroyed.” The hackers 
began releasing information 
to the Internet, including films 
that had not yet been released, 
and thousands of e-mails from 
Mr. Lynton’s account. 


The company’s financial reporting systems were compromised as well. On January 23, 2015, 
Sony Corp. reported that they would be unable to meet the stock-market deadline for report- 
ing their third-quarter earnings because of the November cyberattack. They anticipated that 
a portion of the Sony Pictures computer systems would still be offline until at least February, 
which meant the accountants could not finalize the financial results for one of their subsidiaries. 


The Federal Bureau of Investigation was involved in the investigation and ultimately, U.S. 
authorities concluded the North Korean government was involved in the cyberattack in an 
effort to stop the film “The Interview” from being released to the public. This was a wake-up 
call for companies around the world about the reality and extent of cybersecurity threats. 


Sources: |. Michael Cieply and Brooks Barnes, “Sony Cyberattack, First a Nuisance, Swiftly 
Grew Into a Firestorm,’ The New York Times (December 30, 2014) (www.nytimes.com); 
2. Takashi Mochizuki and Megumi Fujikawa, “Sony Hacking Attacks Delay Earnings Report,” 
The Wall Street Journal (January 23, 2015) (www.wsj.com). 
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LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


I1-I Describe the three primary 
objectives of effective 
internal control. 

11-2 Contrast management's 
responsibilities for maintain- 
ing internal control with 
the auditor’s responsibilities 
for evaluating and report- 
ing on internal control. 

11-3 Explain the five components 
of the COSO internal 
control framework. 

11-4 Explain how general controls 
and application controls reduce 
information technology risks. 

11-5 Identify types of information 
technology systems and their 
impact on internal controls. 
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The opening story involving Sony demonstrates the importance of internal controls and understanding 
potential threats. Deficiencies in internal control can cause significant losses, can delay financial reporting, 
or can result in material misstatements in financial statements. Financial reporting problems at companies 
such as Enron and WorldCom also exposed serious deficiencies in internal control. To address these concerns, 
Section 404 of the Sarbanes—Oxley Act requires management of U.S. public companies to assess and report on 
the effectiveness of their internal control over financial reporting, and auditor reports on the effectiveness of 
internal control are required for larger public companies. Similar legislation has arisen around the world, such 
as Japan’s “J-SOX,” which also mandates management and auditor reporting on internal controls for Japanese 
companies. 

In this chapter and the next, we continue our discussion of planning the audit by focusing on the role of internal 
controls. We first discuss an internal control framework as well as controls unique to computer-based information 
systems. In the next chapter, we discuss how effective internal controls can reduce planned audit evidence in the 
audit of financial statements. To support the assessment of the control risk component of the audit risk model, au- 
ditors must obtain an understanding of internal control and gather evidence to support that assessment. The chart 
in the margin shows where these tasks fit into planning the audit. 


INTERNAL CONTROL OBJECTIVES 
OBJECTIVE HI-l A system of internal control consists of policies and procedures designed to provide 


management with reasonable assurance that the company achieves its objectives and 
Describe the three primary ie : 
Gbisctives of effecdive incarnal goals. These policies and procedures are often called controls, and collectively, they 
ronal: make up the entity’s internal control. Management typically has three broad objec- 
tives in designing an effective internal control system: 


1. Reliability of reporting. This objective relates to internal and external financial 
Accept client and perform reporting as well as nonfinancial reporting; however, in this chapter we focus our 
inieial audit planning discussion on the reliability of external financial reporting. As we discussed in 

| Chapter 6, management is responsible for preparing financial statements for in- 


Understand the client’s vestors, creditors, and other users. Management has both a legal and professional 

pusiness aud indissly responsibility to be sure that the information is fairly presented in accordance 

with reporting requirements of accounting frameworks such as U.S. GAAP and 

Perform preliminary IFRS. The objective of effective internal control over financial reporting is to ful- 
analytical procedures fill these financial reporting responsibilities. 

| 2. Efficiency and effectiveness of operations. Controls within a company encourage 

Set preliminary judgment efficient and effective use of its resources to optimize the company’s goals. An 

of materiality and important objective of these controls is accurate financial and nonfinancial infor- 


terialit : ; : ot : 
aan mation about the company’s operations for decision making. 


| 3. Compliance with laws and regulations. Section 404 requires management of 


Identify significant risks all public companies to issue a report about the operating effectiveness of 
deen es audarenror internal control over financial reporting. In addition to the legal provisions 

of Section 404, public, nonpublic, and not-for-profit organizations are re- 

Agsace juherent risk quired to follow many laws and regulations. Some relate to accounting only 
Ss eae indirectly, such as environmental protection and civil rights laws. Others 


are closely related to accounting, such as income tax regulations and anti- 


Understand internal control bo 
fraud legal provisions. 


and assess control risk 

| Management designs systems of internal control to accomplish all three objec- 
Finalize overall audit tives. The auditor’s focus in both the audit of financial statements and the audit of 
strategy and audit plan internal controls is on controls over the reliability of financial reporting plus those 
controls over operations and compliance with laws and regulations that could materi- 
ally affect financial reporting. 
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MANAGEMENT AND AUDITOR RESPONSIBILITIES 
FOR INTERNAL CONTROL 


Responsibilities for internal controls differ between management and the auditor. 
Management is responsible for establishing and maintaining the entity’s internal 
controls. Management is also required by Section 404 to publicly report on the oper- 
ating effectiveness of those controls. In contrast, the auditor’s responsibilities include 
understanding and testing internal control over financial reporting. Auditors of larger 
public companies are required by the SEC to annually issue an audit report on the op- 
erating effectiveness of those controls. 


Management, not the auditor, must establish and maintain the entity’s internal con- 
trols. This concept is consistent with the requirement that management, not the 
auditor, is responsible for the preparation of financial statements in accordance with 
applicable accounting frameworks such as GAAP or IFRS. Two key concepts underlie 
management’s design and implementation of internal control—reasonable assurance 
and inherent limitations. 


Reasonable Assurance A company should develop internal controls that provide 
reasonable, but not absolute, assurance that the financial statements are fairly stated. 
Internal controls are developed by management after considering both the costs and 
benefits of the controls. Reasonable assurance is a high level of assurance that allows 
for only a low likelihood that material misstatements will not be prevented or detected 
on a timely basis by internal control. 


Inherent Limitations Internal controls can never be completely effective, regardless 
of the care followed in their design and implementation. Even if management can de- 
sign an ideal system, its effectiveness depends on the competency and dependability 
of the people using it. Assume, for example, that a carefully developed procedure for 
counting inventory requires two employees to count independently. If neither of the 
employees understands the instructions or if both are careless in doing the counts, the 
inventory count is likely to be wrong. Even if the count is correct, management might 
override the procedure and instruct an employee to increase the count to improve 
reported earnings. Similarly, the employees might decide to overstate the counts to 
intentionally cover up a theft of inventory by one or both of them. An act of two or 
more employees who conspire to steal assets or misstate records is called collusion. 


Section 404(a) of the Sarbanes—Oxley Act requires management of all public compa- 
nies to issue an internal control report that includes the following: 


« A statement that management is responsible for establishing and maintaining 
an adequate internal control structure and procedures for financial reporting 

« An assessment of the effectiveness of the internal control structure and proce- 
dures for financial reporting as of the end of the company’s fiscal year 


Management must also identify the framework used to evaluate the effectiveness 
of internal control. The internal control framework used by most U.S. companies is 
the Committee of Sponsoring Organizations of the Treadway Commission (COSO) 
Internal Control—Integrated Framework, which was originally published in 1992 and 
updated in 2013. Other internal control frameworks exist around the world, such as 
the Financial Reporting Council of the United Kingdom’s Guidance on Risk Management, 
Internal Control and Related Financial and Business Reporting, and Canada’s Guidance on 
Assessing Control (known as “CoCo”). 

Management's assessment of internal control over financial reporting consists of two 
key aspects. First, management must evaluate the design of internal control over financial 
reporting. Second, management must test the operating effectiveness of those controls. 
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Contrast management’s respon- 
sibilities for maintaining internal 
control with the auditor’s re- 
sponsibilities for evaluating and 
reporting on internal control. 


Management’s 
Responsibilities for 
Establishing Internal 
Control 


Management’s 
Section 404 Reporting 
Responsibilities 


for Understanding 
Internal Control 
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Auditor Responsibilities 


Example Section 404 Management Report on Internal 
Control Over Financial Reporting 


FIGURE I 1-1 


The management of Marble Corporation is responsible for establishing and maintaining adequate internal 
control over financial reporting. Marble’s internal control system was designed to provide reasonable 
assurance to the company’s management and board of directors regarding the preparation and fair 
presentation of published financial statements. 


Marble management assessed the effectiveness of the company’s internal control over financial reporting as 
of December 31, 2016. In making this assessment, it used the criteria set forth by the Committee of 
Sponsoring Organizations of the Treadway Commission (COSO) in Internal Control—Integrated Framework. 
Based on our assessment, we believe that, as of December 31, 2016, the company’s internal control over 
financial reporting is effective based on those criteria. 


Marble’s independent auditors have issued an audit report on our assessment of the company’s internal 
control over financial reporting. This report appears on the following page. 


February 15, 2017 


Fred Narsky, President Karen Wilson, Chief Financial Officer 


Design of Internal Control Management must evaluate whether the controls are 
designed and put in place to prevent or detect material misstatements in the financial 
statements. Management’s focus is on controls that address risks related to all relevant 
assertions for all significant accounts and disclosures in the financial statements. This 
includes evaluating how significant transactions are initiated, authorized, recorded, 
processed, and reported to identify points in the flow of transactions where material 
misstatements due to error or fraud could occur. 


Operating Effectiveness of Controls In addition, management must test the 
operating effectiveness of controls. The testing objective is to determine whether the 
controls are operating as designed and whether the person performing the control 
possesses the necessary authority and qualifications to perform the control effec- 
tively. Management’s test results, which must also be documented, form the basis for 
management’s assertion at the end of the fiscal year about the controls’ operating 
effectiveness. Management must disclose any material weakness in internal control. 
Even if only one material weakness is present, management must conclude that the 
company’s internal control over financial reporting is not effective. 

The SEC requires management to include its report on internal control in its 
annual Form 10-K report filed with the SEC. Figure 11-1 includes an example of man- 
agement’s report on internal control that complies with Section 404 requirements 
and related SEC rules. 


One of the principles in the preface to the clarified AICPA auditing standards is that 
the auditor “identifies and assesses risks of material misstatement, whether due to 
fraud or error, based on an understanding of the entity and its environment, includ- 
ing the entity’s internal control.”! Auditing standards require the auditor to obtain an 
understanding of internal control relevant to the audit on every audit engagement. 
Auditors are primarily concerned about controls over the reliability of financial 
reporting and controls over classes of transactions. We briefly discuss auditor respon- 
sibilities below but provide a more extensive discussion in the next chapter. 


Controls Over the Reliability of Financial Reporting Auditors focus primarily on 
controls related to the first of management’s internal control concerns: reliability of 
financial reporting. Financial statements are not likely to correctly reflect GAAP or 
IFRS if internal controls over financial reporting are inadequate. Unlike the client, the 
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auditor is less concerned with controls that affect the efficiency and effectiveness of 
company operations, because such controls may not influence the fair presentation 
of financial statements. Auditors should not, however, ignore controls affecting in- 
ternal management information, such as budgets and internal performance reports. 
These types of information are often important sources used by management to run 
the business and can be important sources of evidence that help the auditor decide 
whether the financial statements are fairly presented. If the controls over these inter- 
nal reports are inadequate, the value of the reports as evidence diminishes. 


Controls Over Classes of Transactions Auditors emphasize internal control over 
classes of transactions rather than account balances because the accuracy of account- 
ing system outputs (account balances) depends heavily on the accuracy of inputs and 
processing (transactions). For example, if products sold, units shipped, or unit selling 
prices are wrong in billing customers for sales, both sales and accounts receivable 
will be misstated. On the other hand, if controls are adequate to ensure correct bill- 
ings, cash receipts, sales returns and allowances, and write-offs, the ending balance in 
accounts receivable is likely to be correct. Because of the emphasis on classes of trans- 
actions, auditors are primarily concerned with the transaction-related audit objectives 
discussed in Chapter 6 when assessing internal controls over financial reporting. 

Even though auditors emphasize transaction-related controls, the auditor must 
also gain an understanding of controls over ending account balance and presentation 
and disclosure objectives. For example, transaction-related audit objectives typically 
have no effect on two balance-related audit objectives: realizable value and rights and 
obligations. They also are unlikely to have an effect on the four presentation and dis- 
closure objectives. The auditor is likely to evaluate separately whether management 
has implemented internal control for each of these two account balance objectives 
and the four presentation and disclosure objectives. 


Section 404(b) of the Sarbanes—Oxley Act requires that the auditor report on the ef- 
fectiveness of internal control over financial reporting. As discussed in Chapter 1, as 
a result of the Dodd-Frank federal financial reform legislation passed by Congress in 
July 2010, only larger public companies (accelerated filers) are required to obtain an 
audit report on internal control over financial reporting. 

To express an opinion on these controls, the auditor obtains an understanding of 
and performs tests of controls for all significant account balances, classes of transactions, 
and disclosures and related assertions in the financial statements. We will discuss tests of 
controls in Chapter 12 and in considerable detail in several other chapters throughout the 
text. Auditor reporting on internal control is also discussed in Chapter 12. 


Auditor Responsibilities 
for Reporting on 
Internal Control 


CONCEPT CHECK 


|. Describe the three broad objectives management has when designing effective internal 
control. 

2. Section 404(a) of the Sarbanes—Oxley Act requires management to issue a report on 
internal control over financial reporting. Identify the specific Section 404(a) reporting 
requirements for management. 


COSO COMPONENTS OF INTERNAL CONTROL 
COSO’s Internal Control— Integrated Framework was first developed in 1992 and has become ‘OBJECTIVE 11-30 


the most widely accepted internal control framework in the United States and the world. 

: — ‘ ; ; Explain the five components 
Since the original development of the Framework, business and operating environments _¢¢ the COSO internal control 
have become more global, complex, and technologically driven. Stakeholders have be- __ framework. 
come more engaged, seeking greater transparency and accountability for the integrity 
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The Control 
Environment 
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FIGURE II- 2 COSO Internal Control Objectives and Components 


© 2013, COSO. All rights reserved. Used by permission. 


of systems of internal control, including controls related to reporting objectives beyond 
financial reporting, such as corporate responsibility and sustainability. COSO updated 
the Framework in 2013 to make it more relevant in the current business environment. 
The general structure of the Framework remains unchanged, but the updated Framework 
provides a principles-based approach that provides additional guidance on designing and 
implementing effective systems of internal control. 

The COSO Framework describes five components of internal control that man- 
agement designs and implements to provide reasonable assurance that its control 
objectives will be met. Each component contains many controls, but auditors concen- 
trate on those designed to prevent or detect material misstatements in the financial 
statements. The COSO internal control components include the following: 


1. Control environment 4. Information and communication 
2. Risk assessment 5. Monitoring 
3. Control activities 


As illustrated in Figure 11-2, COSO represents the direct relationship between the 
three internal control objectives, the five components of internal control, and the 
organizational structure in the form of a cube. 

Within each of the COSO components, the updated Framework includes a total 
of seventeen broad principles that provide more guidance to support the respective 
component. The COSO principles apply across all types of entities and to each of the 
internal control objectives: reporting, operations, and compliance. All of the seventeen 
principles must be present and functioning for internal controls to be effective. We 
introduce these principles as we discuss each of the five components in greater detail. 


The control environment consists of the actions, policies, and procedures that reflect 
the overall attitudes of top management, directors, and owners of an entity about internal 
control and its importance to the entity. As shown in Figure 11-3, the control environ- 
ment serves as the umbrella for the other four components. Without an effective con- 
trol environment, the other four components are unlikely to result in effective internal 
control, regardless of their quality. The essence of an effectively controlled organization 
lies in the attitude of its board of directors and senior management. If top management 
believes that control is important, others in the organization will sense this commitment 
and respond by conscientiously observing the controls established. If members of the 
organization believe that control is not an important concern to top management, it is 
almost certain that management’s control objectives will not be effectively achieved. 
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FIGURE II-3 Five Components of Internal Control 


Control Environment 


Risk Control Information and 


nae ee Monitorin 
Assessment Activities Communication 8 


The five underlying principles related to the control environment include a com- 
mitment to integrity and ethical values; an independent board of directors that is 
responsible for oversight of internal controls; establishing appropriate structures and 
reporting lines; a commitment to attracting, developing, and retaining competent 
personnel; and holding individuals accountable for internal control responsibilities. 
To understand and assess the control environment, auditors should consider these 
important control subcomponents. 


Integrity and Ethical Values Integrity and ethical values are the product of the entity’s 
ethical and behavioral standards, as well as how they are communicated and reinforced 
in practice. They include management’s actions to remove or reduce incentives and 
temptations that might prompt personnel to engage in dishonest, illegal, or unethical 
acts. They also include the communication of entity values and behavioral standards to 
personnel through policy statements, codes of conduct, and by example. 

Management, through its activities, provides clear signals to employees about 
the importance of internal control. For example, does management take significant 
risks or is it risk averse? Are sales and earnings targets unrealistic, and are employees 
encouraged to take aggressive actions to meet those targets? Can management be 
described as “fat and bureaucratic”; “lean and mean” (dominated by one or a few indi- 
viduals, resulting in an imbalance of power); or “just right”? Understanding these and 
similar aspects of management’s philosophy and operating style gives the auditor a 
sense of management’s attitude about internal control. 


Board of Director or Audit Committee Participation The board of directors is essen- 
tial for effective corporate governance because it has ultimate responsibility to make sure 
management implements proper internal control and financial reporting processes. An 
effective board of directors is independent of management, and its members stay involved 
in and scrutinize management's activities. Although the board delegates responsibility for 
internal control to management, the board must exercise oversight of the design and per- 
formance of controls. In addition, an active and objective board can reduce the likelihood 
that management overrides existing controls. 

To assist the board in its oversight, the board creates an audit committee that is 
charged with oversight responsibility for financial reporting. The audit committee 
is also responsible for maintaining ongoing communication with both external and 
internal auditors, including the approval of audit and nonaudit services done by audi- 
tors for public companies. This allows the auditors and directors to discuss matters 
that might relate to such things as management integrity or the appropriateness of 
actions taken by management. 

The audit committee’s independence from management and knowledge of finan- 
cial reporting issues are important determinants of its ability to effectively evaluate 
internal controls and financial statements prepared by management. The Sarbanes— 
Oxley Act directed the SEC to require the national stock exchanges (NYSE and 
NASDAQ) to strengthen audit committee requirements for public companies listing 
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securities on the exchanges. In response, the exchanges will not list any security from 
a company with an audit committee that: 


1. Isnot comprised solely of independent directors 

2. Is not solely responsible for hiring and firing the company’s auditors 

3. Does not establish procedures for the receipt and treatment of complaints (e.g., 
“whistleblowing”) regarding accounting, internal control, or auditing matters 

4. Does not have the ability to engage its own counsel and other advisors 

5. Is inadequately funded 


Similar provisions exist outside the U.S., such as the European Commission’s 8th 
Directive, which requires each public-interest entity to have an audit committee with 
at least one member who is independent and who has competence in accounting or 
auditing. PCAOB auditing standards require the auditor to evaluate the effectiveness 
of the audit committee’s oversight of the company’s external financial reporting and 
internal control over financial reporting. 

Many privately held companies also create an effective audit committee. For other 
privately held companies, governance may be provided by owners, partners, trustees, 
or a committee of management, such as a finance or budget committee. Individuals 
responsible for overseeing the strategic direction of the entity and the accountability 
of the entity, including financial reporting and disclosure, are called those charged 
with governance by auditing standards. 


Organizational Structure The entity’s organizational structure defines the existing 
lines of responsibility and authority. As shown in the COSO cube in Figure 11-2 
(p. 364), the organizational structure can consist of the entity level, divisions, oper- 
ating units, and functions within those units, and controls operate at each of these 
levels. By understanding the client’s organizational structure, the auditor can learn 
the management and functional elements of the business and perceive how controls 
are implemented. 


Commitment to Competence Competence is the knowledge and skills necessary to 
accomplish tasks that define an individual’s job. Commitment to competence includes 
management’s consideration of the competence levels for specific jobs and how those 
levels translate into requisite skills and knowledge. If employees are competent and 
trustworthy, other controls can be absent, and reliable financial statements will still 
result. Incompetent or dishonest people can reduce the system to a shambles—even 
if there are numerous controls in place. Honest, efficient people are able to perform at 
a high level even when there are few other controls to support them. However, even 
competent and trustworthy people can have shortcomings. For example, they can be- 
come bored or dissatisfied, personal problems can disrupt their performance, or their 
goals may change. Because of the importance of competent, trustworthy personnel 
in providing effective control, the methods by which persons are hired, evaluated, 
trained, promoted, and compensated are an important part of internal control. 


Accountability Management and the board of directors are responsible for commu- 
nicating expectations and holding individuals accountable for internal control duties. 
The effectiveness of this process depends on the other subcomponents discussed 
above. For example, management must set the appropriate tone and put in place 
appropriate structures and reporting lines in order to hold individuals accountable. 
Incentives should be provided for employees to fulfill their internal control duties. 


Risk assessment involves a process for identifying and analyzing risks that may prevent 
the organization from achieving its objectives. The four underlying principles related 
to risk assessment are that the organization should have clear objectives in order to be 
able to identify and assess the risks relating to those objectives; should determine how 
the risks should be managed; should consider the potential for fraudulent behavior; and 
should monitor changes that could impact internal controls. Specific risks related to 


USING KEY RISK 
INDICATORS FOR 
RISK AWARENESS 


COSO has issued thought guidance to assist manage- 
ment and the board in the development of key risk 
indicators (KRIs) to provide early signals of increas- 
ing risk exposures. KRIs help management and the 
board be prepared for and better manage risk events 
that may arise in the future. 

KRlIs should be distinguished from key perfor- 
mance indicators (KPIs). KPls are metrics that 
provide a high-level overview of past performance. 
Such measures may not provide a warning of 
developing risks because they focus on results that 
have already occurred. In contrast, KRls are lead- 
ing indicators of emerging risks. For example, data 
about recent write-offs of accounts receivable is 
a key performance indicator for accounts receiv- 
able collection. In contrast, analysis of financial 
results of major customers could be used as a 
key risk indicator of future collection concerns. 


KRls can provide timely and relevant informa- 
tion for effective risk oversight. Ideally, these 
indicators should be developed by teams that 
include risk management staff and business unit 
managers, and developed in conjunction with 
strategic plans for business units. Developing 
KRIs can result in improved performance by 
reducing losses and identifying risks that can be 
strategically exploited to the company’s benefit. 
Use of KRIs can improve processes by reducing 
the risk of service disruptions and episodes of 
crisis management. Well-developed KRIs reduce 
surprises by placing management and boards 
in a proactive, rather than a reactive stance. 


Source: Mark Beasley, Bruce Branson, and Bonnie Hancock, 
“Developing Key Risk Indicators to Strengthen Enterprise 
Risk Management,” COSO, December 2010 (www.coso.org). 
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information technology (IT) should be considered, as these risks can lead to substantial 
losses if ignored, as demonstrated in the opening vignette related to the cyberattack on 
Sony Pictures. If IT systems fail, organizations can be paralyzed by the inability to retrieve 
information or by the use of unreliable information caused by processing errors. Given 
the significance of IT risks, we discuss these in more detail later in the chapter. 

Risk assessment specifically related to financial reporting involves management's 
identification and analysis of risks relevant to the preparation of financial statements 
in conformity with appropriate accounting standards. For example, if a company 
frequently sells products at a price below inventory cost because of rapid technology 
changes, it is essential for the company to incorporate adequate controls to address 
the risk of overstating inventory. Similarly, failure to meet prior objectives, quality of 
personnel, geographic dispersion of company operations, significance and complex- 
ity of core business processes, introduction of new information technologies, eco- 
nomic downturns, and entrance of new competitors are examples of factors that may 
lead to increased risk. Once management identifies a risk, it estimates the significance 
of that risk, assesses the likelihood of the risk occurring, and develops specific actions 
that need to be taken to reduce the risk to an acceptable level. 


Control Environment 


Risk Control 
Assessment Activities 


Information and 


ee Monitoring 
Communication 


Management's risk assessment differs from but is closely related to the auditor’s 
risk assessment discussed in Chapter 9. While management assesses risks as a part 
of designing and operating internal controls to minimize errors and fraud, auditors 
assess risks to decide the evidence needed in the audit. If management effectively 
assesses and responds to risks, the auditor will typically accumulate less evidence than 
when management fails to identify or respond to significant risks. 


Control activities are the policies and procedures, in addition to those included 
in the other four control components, that help ensure that necessary actions are 
taken to address risks to the achievement of the entity's objectives. There are three 
underlying principles related to control activities: developing control activities that 
mitigate risks to an acceptable level, developing general controls over technology, and 
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establishing appropriate policies, procedures, and expectations. There are potentially 
many such control activities in any entity, including controls performed manually and 
controls built into a computer-based system (automated controls). The control activi- 
ties generally fall into the following five types, which are discussed next: 


1. Adequate separation of duties 

Proper authorization of transactions and activities 
3. Adequate documents and records 
Physical control over assets and records 
Independent checks on performance 


we 


Control Environment 


Monitoring 


Risk Control Information and 
Assessment Activities Communication 


Adequate Separation of Duties Four general guidelines for adequate separation of 
duties to prevent both fraud and errors are especially significant for auditors. 


Separation of the Custody of Assets from Accounting To protect a company from embez- 
zlement, a person who has temporary or permanent custody of an asset should not ac- 
count for that asset. Allowing one person to perform both functions increases the risk of 
that person disposing of the asset for personal gain and adjusting the records to cover up 
the theft. If the cashier, for example, receives cash and is responsible for data entry for cash 
receipts and sales, that person could pocket the cash received and adjust the customer's 
account by failing to record a sale or by recording a fictitious credit to the account. 


Separation of the Authorization of Transactions from the Custody of Related Assets It is 
desirable to prevent persons who authorize transactions from having control over the 
related asset, to reduce the likelihood of embezzlement. For example, the same person 
should not authorize the payment of a vendor’s invoice and also approve the disburse- 
ment of funds to pay the bill. 


Separation of Operational Responsibility from Record-Keeping Responsibility To en- 
sure unbiased information, record keeping is typically the responsibility of a separate 
department reporting to the controller. For example, if a department or division over- 
sees the creation of its own records and reports, it might change the results to improve 
its reported performance. 


Separation of IT Duties from User Departments As the level of complexity of IT sys- 
tems increases, the separation of authorization, record keeping, and custody often 
becomes blurred. For example, sales agents may enter customer orders online. The 
computer authorizes those sales based on its comparison of customer credit limits 
to the master file and posts all approved sales in the sales cycle journals. Therefore, 
the computer plays a significant role in the authorization and record keeping of sales 
transactions. To compensate for these potential overlaps of duties, it is important for 
companies to separate major IT-related functions from key user department func- 
tions. In this example, responsibility for designing and controlling accounting soft- 
ware programs that contain the sales authorization and posting controls should be 
under the authority of IT, whereas the ability to update information in the master 
file of customer credit limits should reside in the company’s credit department out- 
side the IT function. 


Proper Authorization of Transactions and Activities Every transaction must 
be properly authorized if controls are to be satisfactory. If any person in an 
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organization could acquire or expend assets at will, complete chaos would result. 
Authorization can be either general or specific. Under general authorization, 
management establishes policies and subordinates are instructed to implement 
these general authorizations by approving all transactions within the limits set by 
the policy. General authorization decisions include the issuance of fixed price lists 
for the sale of products, credit limits for customers, and fixed reorder points for 
making acquisitions. 

Specific authorization applies to individual transactions. For certain transac- 
tions, management prefers to authorize each transaction. An example is the authori- 
zation of a sales transaction by the sales manager for a used-car company. 

The distinction between authorization and approval is also important. Authori- 
zation is a policy decision for either a general class of transactions or specific trans- 
actions. Approval is the implementation of management’s general authorization 
decisions. An example of a general authorization is management setting a policy 
authorizing the ordering of inventory when less than a three-week supply is on hand. 
When a department orders inventory, the clerk responsible for maintaining the per- 
petual record approves the order to indicate that the authorization policy has been 
met. In other cases, the computer approves the transactions by comparing quantities 
of inventory on hand to a master file of reorder points and automatically submits 
purchase orders to authorized suppliers in the vendor master file. In this case, the 
computer is performing the approval function using preauthorized information con- 
tained in the master files. 


Adequate Documents and Records Documents and records are the records upon 
which transactions are entered and summarized. They include such diverse items as 
sales invoices, purchase orders, subsidiary records, sales journals, and employee time 
reports. Many of these documents and records are maintained in electronic rather 
than paper formats. Adequate documents are essential for correct recording of trans- 
actions and control of assets. For example, if the receiving department completes an 
electronic receiving report when material is received, the accounts payable computer 
application can verify the quantity and description on the vendor’s invoice by com- 
paring them with the information on the receiving report, with exceptions resolved 
by the accounts payable department. 

Certain principles dictate the proper design and use of documents and records. 
Documents and records should be: 


* Prenumbered consecutively to facilitate control over missing documents and 
records and as an aid in locating them when they are needed at a later date. 
Prenumbered documents and records are important for the completeness 
assertion. 

* Prepared at the time a transaction takes place, or as soon as possible thereafter, 
to minimize timing errors. 

* Designed for multiple use, when possible, to minimize the number of different 
forms. For example, a properly designed electronic shipping record can be the 
basis for releasing goods from storage to the shipping department, inform- 
ing billing of the quantity of goods to bill to the customer and the appropriate 
billing date, and updating the perpetual inventory records. 

* Constructed in a manner that encourages correct preparation. This can be done 
by providing internal checks within the form or record. For example, computer 
screen prompts may force online data entry of critical information before the 
record is electronically routed for authorizations and approvals. Similarly, 
screen controls can validate the information entered, such as when an invalid 
general ledger account number is automatically rejected because the account 
number does not match the chart of accounts master file. 
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The size of the trading losses at French bank Société 
Générale were staggering. Jéréme Kerviel, a junior 
trader with a modest base salary of around $70,000, 
had gambled more than the bank's entire net worth 
in high-risk bets involving unauthorized trades re- 
lated to European stock index funds. Kerviel’s role 
was to make trades that bet whether European stock 
markets would rise or fall. Each bet was supposed to 
be offset by a trade in the opposite direction to keep 
risk at a minimum, with the bank making a profit or 
loss based on the difference between the parallel 
bets. However, within months of joining the trading 
desk, he began placing his bets all in one direction, 
rather than hedging the trades as he was expected to 
do. One bet paid off handsomely after an attack on 
the London transport system sent European markets 
into a dive. “Bingo, 500,000 euros,” Kerviel said in an 
interview with investigators. This success led him to 
make even bolder bets. 

Société Générale played up their use of com- 
puter systems to ward off risk. The bank’s equity- 
derivatives unit had not experienced a major incident 


hidden required constant vigilance. He needed to 
continue to delete and re-enter fake trades to avoid 
detection. As a result, Kerviel regularly skipped 
holidays and rarely took vacation. “It is one of the 
rules of controls: a trader who doesn’t take holi- 
days is a trader who doesn’t want his books to be 
seen by others,” Kerviel stated to investigators. 
Finally, a fictitious trade made in the name of 
a German brokerage house triggered an alarm 
in Société Générale’s systems. Under repeated 
questioning, Kerviel revealed that his bets had 
over 50 billion euros (€) at risk for the bank. By 
the time the French bank unwound the bets, it 


had lost €4.9 billion (about $7.4 billion), nearly 
destroying the 145-year-old bank. At Kerviel’s 
trial, one of the bank’s former executives admitted 
that the bank had failed by creating an environ- 
ment where there was “too much trust.” And, 
Kerviel’s former boss commented, “If you’re not 
looking for anything, you don’t find anything.” 


Sources: |. Nicola Clark and Katrin Behnhold, “A Société 


Générale Trader Remains a Mystery as His Criminal Trial Ends,” 
The New York Times (June 25, 2010); 2. David Gauthier-Villars 

and Carrick Mollenkamp, “Portrait Emerges of Rogue Trader at 
French Bank,” The Wall Street Journal (February 2-3, 2008), p. Al. 


in 15 years. “We didn’t think it was possible,” said 
one Société Générale executive discussing the 
losses. Unfortunately, Kerviel knew how to hide his 
trades to avoid detection, but keeping the trades 


A control closely related to documents and records is the chart of accounts, 
which classifies transactions into individual balance sheet and income statement 
accounts. The chart of accounts is helpful in preventing classification errors if it accu- 
rately describes which type of transactions should be in each account. 


Physical Control Over Assets and Records To maintain adequate internal control, 
assets and records must be protected. If assets are left unprotected, they can be stolen. 
If records are not adequately protected, they can be stolen, damaged, altered, or lost, 
which can seriously disrupt the accounting process and business operations. When a 
company is highly computerized, its computer equipment, programs, and data files 
that represent the records of the company must be protected, given they could be 
costly or even impossible to reconstruct. 

The most important type of protective measure for safeguarding assets and records 
is the use of physical precautions. An example is the use of storerooms for inventory to 
guard against theft. When the storeroom is under the control of a competent employee, 
there is further assurance that theft is minimized. Fireproof safes and safety deposit 
vaults for the protection of assets such as currency and securities are other important 
physical safeguards in addition to off-site backup of computer software and data files. 


Independent Checks on Performance The last category of control activities is the 
careful and continuous review of the other four, often called independent checks 
or internal verification. The need for independent checks arises because internal con- 
trols tend to change over time, unless there is frequent review. Personnel are likely to 
forget or intentionally fail to follow procedures, or they may become careless unless 
someone observes and evaluates their performance. Regardless of the quality of the 
controls, personnel can make errors or commit fraud. 

Personnel responsible for performing internal verification procedures must be 
independent of those originally responsible for preparing the data. The least expen- 
sive means of internal verification is the separation of duties in the manner previ- 
ously discussed. For example, when the bank reconciliation is done by a person 
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independent of the accounting records and handling of cash, there is an opportunity 
for verification without incurring significant additional costs. 

Most accounting systems involve technologies where many internal verification 
procedures are automated as part of the system. For example, the computer can prevent 
processing payment on a vendor invoice if there is no matching purchase order number 
or receiving report number for that invoice included in the system. With the extensive 
reliance on the use of technology to perform a number of control activities, there are a 
number of risks related to the overall security and functionality of IT-based services that 
must be managed at a system-wide or enterprise-wide level. Organizations implement 
IT general controls to address those risks, as described later in this chapter. 


The purpose of an entity’s accounting information and communication system 
is to initiate, record, process, and report the entity’s transactions and to maintain 
accountability for the related assets. The underlying principles related to informa- 
tion and communication stress the importance of using relevant, quality informa- 
tion that is communicated both internally and externally as necessary to support 
the proper functioning of internal controls. An accounting information and com- 
munication system has several subcomponents, typically made up of classes of 
transactions such as sales, sales returns, cash receipts, acquisitions, and so on. For 
each class of transactions, the accounting system must satisfy all of the transaction- 
related management assertions identified in Chapter 6. For example, the sales 
accounting system should be designed to ensure that all shipments of goods are 
correctly recorded as sales (completeness and accuracy assertions) and are reflected 
in the financial statements in the proper period (cutoff assertion). The system must 
also avoid duplicate recording of sales and recording a sale if a shipment did not oc- 
cur (occurrence assertion). 


Control Environment 


Risk Control Information and 
Assessment Activities Communication 


Monitoring 


Monitoring activities deal with ongoing or periodic assessment of the quality of in- 
ternal control by management to determine that controls are operating as intended 
and that they are modified as appropriate for changes in conditions. The underlying 
principles related to monitoring include performing periodic evaluations and com- 
municating any identified deficiencies to the appropriate parties responsible for taking 
actions to remediate the deficiencies. The information being assessed comes from a va- 
riety of sources, including studies of existing internal controls, internal auditor reports, 
exception reporting on control activities, reports by regulators such as bank regulatory 
agencies, feedback from operating personnel, and complaints from customers about 
billing charges. 

For many companies, especially larger ones, an internal audit department is 
essential for effective monitoring of the operating performance of internal controls. 
To be effective, the internal audit function must be performed by staff who are inde- 
pendent of both the operating and accounting departments and who report directly 
to a high level of authority within the organization, either top management or the 
audit committee of the board of directors. 

In addition to its role in monitoring an entity’s internal control, an adequate 
internal audit staff can reduce external audit costs by providing direct assistance to 
the external auditor. PCAOB auditing standards define the extent that auditors can 
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Information and 
Communication 


Monitoring 


use the work done by internal auditors when reporting on internal control under 
Section 404. Auditing standards provide guidance to help the external auditor 
obtain evidence that supports the competence, integrity, and objectivity of internal 
auditors, which allows the external auditor to rely on the internal auditor’s work in 
a number of ways. 


Control Environment 


Risk Control 
Assessment Activities 


Information and 


nee Monitoring 
Communication 


COSO’s five components of internal control discussed in the preceding sections, 
and the related principles, are summarized in Table 11-1. Certain control elements 
within the five COSO control components have a pervasive effect on the entity’s system 
of internal control and are referred to as entity-level controls in auditing standards. 
Examples include the board and audit committee element of the control environment, 


the entity’s risk assessment process, and internal audit’s role in monitoring controls. 


CONCEPT CHECK 


1. What are the five components of internal control in the COSO internal control frame- 
work? What is the relationship among these five components? 


2. How do the COSO principles help an organization assess whether internal controls are 
designed and operating effectively? 


TABLE I 1-1! 


Component 


Control environment 


COSO Components of Internal Control and Underlying Principles 


INTERNAL CONTROL 


Description of Component 


Actions, policies, and procedures that reflect the 
overall attitude of top management, directors, 
and owners of an entity about internal control 
and its importance 


Principles 


Integrity and ethical values 

Board of director and audit committee participation 
Organizational structure 

Commitment to competence 

Accountability 


Risk assessment 


Control activities 


Management's identification and analysis of risks 
relevant to the preparation of financial state- 
ments in accordance with appropriate account- 
ing frameworks such as GAAP or IFRS 


Policies and procedures that management has 
established to meet its objectives for financial 
reporting 


Have clear objectives in order to identify risks related to those 
objectives 

Determine how risks should be managed 

Consider the potential for fraud 

Monitor changes 


Develop control activities that mitigate risks to an acceptable level 
Develop general controls over technology 
Establish appropriate policies, procedures, and expectations 


Information and 
communication 


Methods used to initiate, record, process, and 
report an entity’s transactions and to maintain 
accountability for related assets 


Use relevant, quality information to support the functioning of 
internal controls 

Communicate information internally, including objectives and 
responsibilities for internal control 

Communicate with external parties relevant information related 
to internal controls 
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Management’s ongoing and periodic assessment 
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Perform periodic evaluations 
Communicate identified deficiencies to those who can remediate 
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INTERNAL CONTROLS SPECIFIC TO 
INFORMATION TECHNOLOGY 


Technology can strengthen a company’s system of internal control but can also 
provide challenges. To address risks associated with reliance on technology, 
organizations often implement specific IT controls. Auditing standards describe two 
categories of controls for IT systems: general controls and application controls. 

General controls apply to all aspects of the IT function, including IT administra- 
tion; separation of IT duties; systems development; physical and online security over 
access to hardware, software, and related data; backup and contingency planning in 
the event of unexpected emergencies; and hardware controls. Because general con- 
trols often apply on an entity-wide basis and affect many different software applica- 
tions, auditors evaluate general controls for the company as a whole. 

Application controls typically operate at the business process level and apply to 
processing transactions, such as controls over the processing of sales or cash receipts. 
Auditors must evaluate application controls for every class of transactions or account 
in which the auditor plans to reduce assessed control risk, because IT controls will be 
different across classes of transactions and accounts. Application controls are likely to 
be effective only when general controls are effective. 

Figure 11-4 illustrates the relationship between general controls and application 
controls. The oval represents the general controls that provide assurance that all appli- 
cation controls are effective. Effective general controls reduce the types of risks identi- 
fied in the boxes outside the general controls oval in Figure 11-4. 

Table 11-2 (p. 374) describes six categories of general controls and three catego- 
ries of application controls, with specific examples for each category. Let’s examine 
these categories of general and application controls in more detail. 


FIGURE II-4 Relationship Between General and Application Controls 


Risk of unauthorized change Risk of 
to application software system crash 


Cash Receipts 
Application 
Controls 


Sales 
Application 
Controls 


Payroll 
Application 
Controls 


Explain how general controls 
and application controls reduce 
information technology risks. 


Other Cycle 
Application 
Controls 


GENERAL CONTROLS 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Risk of unauthorized 
master file update 


Risk of unauthorized 
processing 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education, Limited, 20 GC hrrpoeestldbdoh CEERAN Alp: COMMA DH). AduDeT OF OAMAPMBA Rial. action 2docl LB B 95606. 
Created from undip-ebooks on 2021-01-12 18:55:10. 


i): ity Categories of General and Application Controls 


Control Type Category of Control Example of Control 

General controls Administration of the IT function Chief information officer or IT manager reports to senior management and board. 
Separation of IT duties Responsibilities for programming, operations, and data control are separated. 
Systems development Teams of users, systems analysts, and programmers develop and thoroughly test software. 
Physical and online security Access to hardware is restricted, passwords and user IDs limit access to software and 


data files, and encryption and firewalls protect data and programs from external parties. 


Backup and contingency planning Written backup plans are prepared and tested regularly throughout the year. 

Hardware controls Memory failure or hard drive failure causes error messages on the monitor. 
Application controls Input controls Preformatted screens prompt data input personnel for information to be entered. 

Processing controls Reasonableness tests review unit-selling prices used to process a sale. 

Output controls The sales department does postprocessing review of sales transactions. 


Similar to the effect that the control environment has on other components of 
internal control, the six categories of general controls have an entity-wide effect on all 
IT functions. Auditors typically evaluate general controls early in the audit because of 
their impact on application controls. 


General Controls 


Administration of the IT Function The board of directors’ and senior manage- 
ment’s attitude about IT affect the perceived importance of IT within an organiza- 
tion. Their oversight, resource allocation, and involvement in key IT decisions each 
signal the importance of IT to the organization. In complex environments, manage- 
ment may establish IT steering committees to help monitor the organization’s tech- 
nology needs. In less complex organizations, the board may rely on regular reporting 
by a chief information officer (CIO) or other senior IT manager to keep management 
informed. In contrast, when management assigns technology issues exclusively to 
lower-level employees or outside consultants, an implied message is sent that IT is 
not a high priority. The result is often an understaffed, underfunded, and poorly con- 
trolled IT function. 


Separation of IT Duties To respond to the risk of combining traditional custody, 
authorization, and record-keeping responsibilities by having the computer perform 
those tasks, well-controlled organizations separate key duties within IT. For example, 
there should be separation of IT duties to prevent IT personnel from authorizing and 
recording transactions to cover the theft of assets. Figure 11-5 shows an ideal sepa- 
ration of duties. Ideally, responsibilities for IT management, systems development, 
operations, and data control should be separated as follows: 


¢ IT management. The CIO or IT manager should be responsible for oversight 
of the IT function to ensure that activities are carried out consistent with the 
IT strategic plan. A security administrator should monitor both physical and 
online access to hardware, software, and data files and investigate all security 
breaches. 

¢ Systems development. Systems analysts are not only responsible for the overall 
design of each application system, but they also coordinate the development, 
acquisition, and changes to IT systems by the IT personnel (who are respon- 
sible for programming the application or acquiring software applications) and 
primary system users outside of IT (such as accounts receivable personnel). 
Programmers develop flowcharts for each new application, prepare computer 
instructions, test the programs, and document the results. 
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Programmers should not have access to input data or computer operations 
to avoid using their knowledge of the system for personal benefit. They should 
be allowed to work only with test copies of programs and data so they can only 
make software changes after proper authorization. 

* Operations. Computer operators are responsible for the day-to-day operations of 
the computer, following the schedule established by the CIO. They also monitor 
computer consoles for messages about computer efficiency and malfunctions. 

A librarian is responsible for controlling the use of computer programs, transac- 
tion files, and other computer records and documentation. The librarian releases 
them to operators only when authorized. For example, programs and transac- 
tion files are released to operators only when a job is scheduled to be processed. 
Similarly, the librarian releases a test copy to programmers only on approval by 
senior management. Network administrators also affect IT operations because 
they are responsible for planning, implementing, and maintaining operations of 
the network of servers that link users to various applications and data files. 

* Data control. Data input/output control personnel independently verify the 
quality of input and the reasonableness of output. For organizations that use 
databases to store information shared by accounting and other functions, da- 
tabase administrators are responsible for the operation and access security of 
shared databases. 


Naturally, the extent of separation of duties depends on the organization’s size and 
complexity. In many small companies, it is not practical to segregate the duties to the 
extent illustrated in Figure 11-5. For example, some entities acquire accounting systems 
from third-party vendors or they access applications through the Internet. As a result, 
they may have few staff dedicated to systems development or the librarian function. 


Systems Development Systems development includes: 


* Purchasing software or developing in-house software that meets the organiza- 
tion’s needs. A key to implementing the right software is to involve a team of 
both IT and non-IT personnel, including key users of the software and internal 
auditors. This combination increases the likelihood that information needs, as 
well as software design and implementation concerns, are properly addressed. 
Involving users also results in better acceptance by key users. 

* Testing all software to ensure that the new software is compatible with existing 
hardware and software and determining whether the hardware and software 
can handle the needed volume of transactions. Whether software is purchased 
or developed internally, extensive testing of all software with realistic data is 


FIGURE II-5 | Segregation of IT Duties 
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critical. Companies typically use one or a combination of the following two test 

approaches: 

1. Pilot testing: A new system is implemented in one part of the organization 
while other locations continue to rely on the old system. 

2. Parallel testing: The old and new systems operate simultaneously in all locations. 


Proper documentation of the system is required for all new and modified soft- 
ware. After the software has been successfully tested and documented, it is transferred 
to the librarian in a controlled manner to ensure only authorized software is ulti- 
mately accepted as the authorized version. 


Physical and Online Security Physical controls over computers and restrictions to 
online software and related data files decrease the risk of unauthorized changes to 
programs and improper use of programs and data files. The information technology 
and internal control processes an organization has in place to protect computers, net- 
works, programs, and data from unauthorized access is often referred to as cyberse- 
curity. Security plans should be in writing and monitored. Security controls include 
both physical controls and online access controls. 


° Physical controls. Proper physical controls over computer equipment restrict access 
to hardware, software, and backup data files. Common examples to physically re- 
strict unauthorized use include keypad entrances, badge-entry systems, security 
cameras, and security personnel. More sophisticated controls only allow physical 
and online access after employee fingerprints are read or employee retinas are 
scanned and matched with an approved database. Other physical controls include 
monitoring of cooling and humidity to ensure that the equipment functions 
properly and installing fire-extinguishing equipment to reduce fire damage. 

* Online access controls. Proper user IDs and passwords control access to software 
and related data files, reducing the likelihood that unauthorized changes are 
made to software applications and data files. Separate add-on security software 
packages, such as firewall and encryption programs, can be installed to im- 
prove a system’s security. (See later in this chapter on p. 380 for a description of 
firewall and encryption programs.) 


As noted in the opening vignette related to Sony Pictures, cybersecurity is becoming 
an increasing focus of management and boards of directors due to the potentially 
severe damage that can occur to an organization in a cyberattack. 


Backup and Contingency Planning Power failures, fire, excessive heat or humidity, 
water damage, or even sabotage can have serious consequences to businesses using IT. 
To prevent data loss during power outages, many companies rely on battery backups 


The buildup surrounding Facebook, Inc’s May 18, 2012, have been programmer failure in designing the systems 
initial public offering set expectations high; however, to be robust enough to handle the volume of orders. 
the opening days of trading led quickly to disappoint- In May 2013, NASDAQ agreed to pay a $10 million 
ment. Just days before its debut, the company’s CFO penalty to the SEC related to the Facebook IPO, and 
decided to boost the number of shares to be offered in April 2015, NASDAQ agreed to a settlement of 

by 25 percent and increased the opening offer price $26.5 million for a class action lawsuit filed by retail 

to $38 per share, believing demand would be high. On investors who suffered damages in the IPO. 

opening day, massive demand for the social network’s 
initial offering actually led to a 30-minute delay in the Sources: |. Jacob Blunge, “Regulators Probe Role of ‘Glitches’ 


start of trading of the stock on the NASDAQ Stock in Market Upheavals,” NASDAQ News (June 27, 2012) 


(www.nasdagq.com); 2. John McCrank, “Nasdaq to settle 
Facebook IPO lawsuit for $26.5 million” (April 23, 2015) 
(www.reuters.com); 3. John McCrank and Jonathan Spicer, 


Market. The technology glitch left individual investors 
puzzled about whether their buy and sell orders had 
actually been executed, when normally those acknowl- “E 2 Baers 
y acebook Investors Left Guessing after NASDAQ Glitch, 
edgments are instantaneous. When U.S. regulators, Reuters (May 21, 2012) (www.reuters.com); 4. Andrew 


including the SEC, initially examined the disruption, Tangel, “NASDAQ Offers Brokerages $40 Million for 
they noted that even though the mishap was blamed Facebook Glitches,” Los Angeles Times (June 6, 2012) 


ona computer malfunction, the underlying cause may (wwwaarticles.latimes.com). 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin A., et al. Auditing and Assurance Services, Global Edition, Pearson Education, Limited, 20 Ghrrpteestldbdoh CBBRAN Alp COMAD A). A doDe Ff OF DLARAMBB Rail. action 2doci3 135606. 


or on-site generators. For more serious disasters, organizations need detailed backup 
and contingency plans such as off-site storage of critical software and data files or 
outsourcing to firms that specialize in secure data storage. 

Backup and contingency plans should also identify alternative hardware that can 
be used to process company data. Companies with small IT systems can purchase 
replacement computers in an emergency and reprocess their accounting records by 
using backup copies of software and data files. Larger companies often contract with 
IT data centers that specialize in providing access to off-site computers and data stor- 
age and other IT services for use in the event of an IT disaster. 


Hardware Controls Hardware controls are built into computer equipment by 
manufacturers to detect and report equipment failures. Auditors are more concerned 
with how the client handles errors identified by the hardware controls than with their 
adequacy. Regardless of the quality of hardware controls, output will be corrected 
only if the client has provided for handling machine errors. 


Application controls are designed for each software application and are intended to help 
a company satisfy the transaction-related management assertions discussed in previous 
chapters. Although some application controls affect one or only a few transaction-related 
assertions, most controls prevent or detect several types of misstatements. Other applica- 
tion controls concern account balance and presentation and disclosure assertions. 

Application controls may be done by computers or client personnel. When they are 
done by client personnel, they are called manual controls. The effectiveness of manual 
controls depends on both the competence of the people performing the controls and 
the care they exercise when doing them. For example, when credit department person- 
nel review exception reports that identify credit sales exceeding a customer’s authorized 
credit limit, the auditor may need to evaluate the person’s ability to make the assessment 
and test the accuracy of the exception report. When controls are done by computers, 
they are called automated controls. Because of the nature of computer processing, 
automated controls, if properly designed, lead to consistent operation of the controls. 

Application controls fall into three categories: input, processing, and output. 
Although the objectives for each category are the same, the procedures for meeting 
the objectives vary considerably. Let’s examine each more closely. 


Input Controls Input controls are designed to ensure that the information entered 
into the computer is authorized, accurate, and complete. They are critical because a 
large portion of errors in IT systems result from data entry errors and, of course, regard- 
less of the quality of information processing, input errors result in output errors. Typical 
controls developed for manual systems are still important in IT systems, such as: 


* Management’s authorization of transactions 
« Adequate preparation of input source documents 
* Competent personnel 


Controls specific to IT include: 


« Adequately designed input screens with preformatted prompts for transaction 
information 

* Pull-down menu lists of available software options 

* Computer-performed validation tests of input accuracy, such as the validation 
of customer numbers against customer master files 

* Online-based input controls for e-commerce applications where external par- 
ties, such as customers and suppliers, perform the initial part of the transaction 
inputting 

* Immediate error correction procedures, to provide for early detection and cor- 
rection of input errors 

¢ Accumulation of errors in an error file for subsequent follow-up by data input 
personnel 
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Application Controls 


Eee Batch Input Controls 


Control Definition Examples 


Financial total Summary total of field amounts for all records in a The total of dollars of all vendor invoices to be paid 
batch that represent a meaningful total such as 
dollars or amounts 


Hash total Summary total of codes from all records in a batch The total of all vendor account numbers for vendor invoices to be paid 
that do not represent a meaningful total 


Record count Summary total of physical records in a batch The total number of vendor invoices to be processed 


For IT systems that group similar transactions together into batches, the use of 
financial batch totals, hash totals, and record count totals helps increase the accuracy 
and completeness of input. Batch input controls are described in Table 11-3. For example, 
the comparison of a record count calculated before data entry of the number of vendor 
invoices to be entered and the number of vendor invoices processed by the system would 
help determine if any invoices were omitted or entered more than once during data entry. 


Processing Controls Processing controls prevent and detect errors while transaction 
data are processed. General controls, especially controls related to systems development 
and security, provide essential control for minimizing processing errors. Specific appli- 
cation processing controls are often programmed into software to prevent, detect, and 
correct processing errors. Examples of processing controls are illustrated in Table 11-4. 


Output Controls Output controls focus on detecting errors after processing is 
completed, rather than on preventing errors. The most important output control is 
review of the data for reasonableness by someone knowledgeable about the output. 
Users can often identify errors because they know the approximate correct amounts. 
Several common controls for detecting errors in outputs include: 


¢ Reconcile computer-produced output to manual control totals 

* Compare the number of units processed to the number of units submitted for 
processing 

* Compare a sample of transaction output to input source documents 

* Verify dates and times of processing to identify any out-of-sequence processing 


For sensitive computer output, such as payroll checks, control can be improved 
by requiring employees to present employee identification before they receive their 
checks or by requiring the use of direct deposit into the employees’ pre-approved 
bank accounts. Also, access to sensitive output stored in electronic files or transmit- 
ted across networks, including the Internet, is often restricted by requiring passwords, 
user IDs, and encryption techniques. 


EE ee Processing Controls 


Type of Processing 
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Control Description Example 

Validation test Ensures that a particular type of transaction Does the transaction code for the processing of a recent purchase 
is appropriate for processing match predetermined inventory codes? 

Sequence test Determines that data submitted for processing are in Has the file of payroll input transactions been sorted in departmental 
the correct order order before processing? 

Arithmetic accuracy test Checks the accuracy of processed data Does the sum of net pay plus withholdings equal gross pay for the entire 

payroll? 

Data reasonableness test | Determines whether data exceed prespecified Does employee's gross pay exceed 60 hours or $1,999 for the week? 
amounts 

Completeness test Determines that every field in a record has been Are employee number, name, number of regular hours, number of over- 
completed time hours, department number, etc., included for each employee? 
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CONCEPT CHECK 
1. Distinguish between general controls and application controls and give two examples 
of each. 


2. Identify the typical duties within an IT function and describe how those duties should be 
segregated among IT personnel. 


IMPACT OF IT INFRASTUCTURE ON INTERNAL CONTROL 


Virtually all entities, including small, family-owned businesses, rely on IT to record 
and process business transactions. As a result of advancements in IT, even relatively 
small businesses use personal computers with commercial accounting software for 
their accounting. As businesses grow and have increased information needs, they typi- 
cally upgrade their IT systems. The accounting function’s use of complex IT networks, 
databases, the Internet (including cloud computing), and centralized IT functions is 
now commonplace. The types of internal controls will vary based on the type and 
complexity of the IT system, and we briefly discuss a few of these systems below. 

The use of networks that link equipment such as desktops, midrange comput- 
ers, mainframes, workstations, servers, and printers is common for most businesses. 
Local area networks (LANs) link equipment within a single or small cluster of 
buildings and are used only within a company. LANs are often used to transfer data 
and programs from one computer or workstation using network system software 
that allows all of the devices to function together. Wide area networks (WANs) link 
equipment in larger geographic regions, including global operations. 

In networks, application software and data files used to process transactions are 
included on several computers that are linked together. Access to the application from 
desktop computers or workstations is managed by network server software or other 
interfaces with cloud computing technology. Even small companies can have several 
computer servers linked together on a network, while larger companies may have 
hundreds of servers in dozens of locations networked together. It is common for net- 
works to consist of various combinations of equipment and procedures, which may 
not have standard security options. Lack of equipment compatibility across a network 
may occur when responsibility for purchasing equipment and software, maintenance, 
administration, and physical security resides with key user groups rather than with 
a centralized IT function. Sometimes network security may be compromised when 
networks consist of equipment with incompatible security features. 

Database management systems allow clients to create databases that include 
information that can be shared across multiple applications. In nondatabase systems, 
each application has its own data file, whereas in database management systems, 
many applications share files. Clients implement database management systems to 
reduce data redundancy, improve control over data, and provide better information 
for decision making by integrating information throughout functions and depart- 
ments. For example, customer data, such as the customer’s name and address, can be 
shared in the sales, credit, accounting, marketing, and shipping functions, resulting 
in consistent information for all users and significant cost reductions. Companies 
often integrate database management systems within the entire organization using 
enterprise resource planning (ERP) systems that integrate numerous aspects of an 
organization’s activities into one accounting information system. ERP systems share 
data across accounting and nonaccounting business functions of the organization. 
For example, customer order data may be used by accounting to record a sale, by pro- 
duction to meet increased production demand, by purchasing to order additional raw 
materials, and by human resources to arrange labor schedules. 

Controls often improve when data are centralized in a database management sys- 
tem by eliminating duplicate data files. However, database management systems also 
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Identify types of information 
technology systems and their 
impact on internal controls. 
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can create internal control risks. Risks increase when multiple users, including indi- 
viduals outside of accounting, can access and update data files. To counter the risks 
of unauthorized, inaccurate, and incomplete data files, companies must implement 
proper database administration and access controls. With the centralization of data in 
a single system, they must also ensure proper backup of data on a regular basis. 

Companies using e-commerce systems to transact business electronically link their 
internal accounting systems to external parties’ systems, such as customers and suppli- 
ers. As a result, a company’s risks depend in part on how well its e-commerce partners 
identify and manage risks in their own IT systems. To manage these interdependency 
risks, companies must ensure that their business partners manage IT system risks before 
conducting business with them electronically. Some of the assurance services discussed 
in Chapter 1 provide objective information about the reliability of a business partner’s IT 
system. The use of e-commerce systems also exposes sensitive company data, programs, 
and hardware to potential interception or sabotage by external parties. To limit these 
exposures, companies use firewalls, encryption techniques, and digital signatures. 

A firewall protects data, programs, and other IT resources from unauthorized 
external users accessing the system through networks, such as the Internet. A firewall is 
a system of hardware and software that monitors and controls the flow of e-commerce 
communications by channeling all network connections through controls that verify 
external users, grant access to authorized users, deny access to unauthorized users, and 
direct authorized users to requested programs or data. Firewalls are becoming increas- 
ingly sophisticated as the frequency and severity of cyberattacks grow. 

Encryption techniques protect the security of electronic communication when 
information is transmitted and when it is stored. Computerized encryption changes a 
standard message or data file into one that is coded (encrypted), requiring the receiver 
of the electronic message or user of the encrypted data file to use a decryption pro- 
gram to decode the message or data. A public key encryption technique is often used, 
where one key (the public key) is used for encoding the message and another key 
(the private key) is used to decode the message. The public key is distributed to all 
approved users of the e-commerce system. The private key is distributed only to inter- 
nal users with the authority to decode the message. 

To authenticate the validity of a trading partner conducting business electroni- 
cally, companies may rely on external certification authorities, who verify the source 
of the public key by using digital signatures. A trusted certification authority issues 
a digital certificate to individuals and companies engaging in e-commerce. The digital 
signature contains the holder’s name and its public key. It also contains the name of 
the certification authority and the certificate’s expiration date and other specified 
information. To guarantee integrity and authenticity, each signature is digitally signed 
by the private key maintained by the certification authority. 

Many clients outsource some or all of their IT needs to an independent organi- 
zation commonly referred to as a computer service center, including application 
service providers (ASPs) and cloud computing environments, rather than main- 
tain an internal IT center. Cloud computing is a computer resource deployment and 
procurement model that enables an organization to obtain IT resources and applica- 
tions from any location via an Internet connection. Depending on the arrangement, 
all or parts of an entity’s IT hardware, software, and data might reside in an IT service 
center shared with other organizations and managed by a third-party vendor. The 
name cloud computing comes from the use of a cloud-shaped symbol in systems dia- 
grams to represent complex IT infrastructures. 

Smaller companies often outsource their payroll function because payroll is rea- 
sonably standard from company to company, and many reliable providers of payroll 
services are available. Companies also outsource their e-commerce systems to exter- 
nal Web site service providers, including those that offer cloud computing services as 


described above. Like all outsourcing decisions, companies decide whether to out- 
source IT ona cost-benefit basis. 

When outsourcing to a computer service center, the client submits input data, 
which the service center processes for a fee and then returns the agreed-upon output 
and the original input. For payroll, the company submits data from time records, pay 
rates, and W-4s to the service center. The service center returns payroll checks, jour- 
nals, and input data each week and W-2s at the end of each year. The service center is 
responsible for designing the computer system and providing adequate controls to 
ensure that the processing is reliable. 

Outsourcing can provide challenges from an internal control perspective. 
Management is responsible for the design and operating effectiveness of internal con- 
trols, and this includes controls that are outsourced to a service provider. The ethics 
and integrity of service providers, as well as the design and functioning of their inter- 
nal controls, need to be considered by management when selecting a service provider, 
and evaluated regularly. 


SUMMARY 


This chapter focused on internal controls, including internal controls related to computer- 
based information systems, and the COSO Framework. We use this framework as a basis 
for discussing the auditor’s responsibilities related to internal controls in the next chapter. 
To rely on a client’s internal controls to report on internal control over financial report- 
ing and to reduce planned audit evidence for audits of financial statements, the auditor 
must first obtain an understanding of each of the five components of internal control. 
Knowledge about the design of the client’s control environment, risk assessment, control 
activities, information and communication, and monitoring activities and information 
about whether internal control components have been implemented assist the auditor in 
assessing control risk for each transaction-related audit objective. 


ESSENTIAL TERMS 


Collusion—an act of two or more em- 
ployees who conspire to steal assets or 
misstate records 


Application controls—controls _ typi- 
cally at the business process level that ap- 
ply to processing transactions, such as the 


inputting, processing, and outputting of — Control activities—policies and proce- 
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sales or cash receipts 


Application service providers (ASPs)— 
third-party entities that manage and sup- 
ply software applications or software- 
related services to customers through the 
Internet 


Automated controls—application con- 
trols done by the computer 


Chart of accounts—a listing of all the en- 
tity’s accounts that classifies transactions 
into individual balance sheet and income 
statement accounts 


Cloud computing environments— 
a computer resource deployment and 
procurement model that enables an orga- 
nization to obtain IT resources and appli- 
cations at an IT service center shared with 
other organizations from any location via 
an Internet connection 
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dures, in addition to those included in the 
other four components of internal control, 
that help ensure that necessary actions are 
taken to address risks in the achievement of 
the entity’s objectives; they typically include 
the following five specific control activities: 
(1) adequate separation of duties, (2) proper 
authorization of transactions and _activi- 
ties, (3) adequate documents and records, 
(4) physical control over assets and records, 
and (5) independent checks on performance 


Control environment—the actions, pol- 
icies, and procedures that reflect the over- 
all attitudes of top management, directors, 
and owners of an entity about internal 
control and its importance to the entity 


COSO principles—trepresent the fun- 
damental concepts related to each of the 
five components of internal control; all 
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principles must be functioning for con- 
trols to be effective 


Cybersecurity—the information tech- 
nology and internal control processes 
an organization has in place to protect 
computers, networks, programs, and data 
from unauthorized access 


Database management systems— 
hardware and software systems that allow 
clients to establish and maintain databases 
shared by multiple applications 


Digital signatures—electronic certificates 
that are used to authenticate the validity 
of individuals and companies conducting 
business electronically 


Encryption techniques—computer pro- 
grams that change a standard message or 
data file into one that is coded, then de- 
coded using a decryption program 


Enterprise resource planning (ERP) 
systems—systems that integrate numer- 
ous aspects of an organization’s activities 
into one accounting information system 


Entity-level controls—controls that 
have a pervasive effect on the entity’s sys- 
tem of internal control; also referred to as 
company-level controls 


Firewall—a system of hardware and soft- 
ware that monitors and controls the flow 
of e-commerce communications by chan- 
neling all network connections through a 
control gateway 


General authorization—companywide 
policies for the approval of all transactions 
within stated limits 


General controls— controls that relate to 
all parts of the IT function and affect many 
different software applications 


Hardware controls—controls built into 
the computer equipment by the manufac- 
turer to detect and report equipment failure 


Independent checks—internal control 
activities designed for the continuous in- 
ternal verification of other controls 


Information and communication— 
the set of manual and/or computerized pro- 
cedures that initiate, record, process, and 
report an entity’s transactions and maintain 
accountability for the related assets 


Input controls—controls designed by an 
organization to ensure that the informa- 
tion to be processed by the computer is 
authorized, accurate, and complete 


Internal control—a process designed to 
provide reasonable assurance regarding 
the achievement of management’s objec- 
tives in the following categories: (1) reli- 
ability of reporting, (2) effectiveness and 
efficiency of operations, and (3) compli- 
ance with applicable laws and regulations 


Local area networks (LANs)—networks 
that connect computer equipment, data 
files, software, and peripheral equipment 
within a local area, such as a single building 
or a small cluster of buildings, for intracom- 
pany use 


Manual controls—application controls 
done by people 
Monitoring—management’s ongoing 
and periodic assessment of the quality of 
internal control performance to determine 
that controls are operating as intended and 
are modified when needed 


Output controls—controls designed to 
ensure that computer-generated data are 
valid, accurate, complete, and distributed 
only to authorized people 


Parallel testing—a company’s computer 
testing approach that involves operating 
the old and new systems simultaneously 


Pilot testing—a company’s computer 
testing approach that involves implement- 
ing a new system in just one part of the 
organization while maintaining the old 
system at other locations 


Processing controls—controls designed to 
ensure that data input into the system are 
accurately and completely processed 


Risk assessment—management’s identi- 
fication and analysis of risks relevant to 
the preparation of financial statements in 
accordance with an applicable accounting 
framework 


Separation of duties—separation of the 
following activities in an organization: 
(1) custody of assets from accounting, 
(2) authorization from custody of assets, 
(3) operational responsibility from record 
keeping, and (4) IT duties from outside 
users of IT 


Service center—an organization that 
provides IT services for companies on an 
outsourcing basis 


Specific authorization—case-by-case 
approval of transactions not covered by 
companywide policies 


Those charged with governance—the 
person(s) with responsibility for oversee- 
ing the strategic direction of the entity and 
its obligations related to the accountability 
of the entity, including overseeing the fi- 
nancial reporting and disclosure process 


Wide area networks (WANs)— 
networks that connect computer equip- 
ment, databases, software, and peripheral 
equipment that reside in many geographic 
locations, such as client offices located 
around the world 


REVIEW QUESTIONS 


11-1 (OBJECTIVE 11-1) Describe which of the three categories of broad objectives for inter- 
nal controls are considered by the auditor in an audit of both the financial statements and 
internal control over financial reporting. 


11-2 (OBJECTIVE 11-2) Many companies around the world are required to test the operating 
effectiveness of its internal controls. What is the key objective in performing such tests? 


11-3 (OBJECTIVE 11-2) Chapter 8 introduced the eight parts of the planning phase of audits. 
Which part is understanding internal control and assessing control risk? What parts pre- 
cede and follow that understanding and assessing control risk? 


11-4 (OBJECTIVE 11-2) When performing an integrated audit of a public company, what 
are the auditor’s responsibilities related to internal control as required by PCAOB 
standards? 


11-5 (OBJECTIVE 11-2) What two aspects of internal control must the auditor assess when 
performing procedures to obtain an understanding of internal control? 


11-6 (OBJECTIVES 11-2, 11-3) More companies around the world have adopted the COSO 
framework to evaluate the effectiveness of internal controls. What updates have been 
made in the COSO framework in 2013 to enhance its acceptability? 


11-7 (OBJECTIVE 11-3) What is meant by the control environment? What is the relationship 
between the control environment and the other four components of internal control? 


11-8 (OBJECTIVE 11-3) List the types of specific control activities and provide one specific 
illustration of a control in the sales area for each control activity. 


11-9 (OBJECTIVE 11-3) List the four general guidelines for adequate separation of dutiesto 
which auditors need to pay attention to assess the risks of material misstatement due to 
fraud and errors. Give an appropriate example for each of the guideline. 


11-10 (oBjecTIVE 11-3) Explain the difference between general authorization, specific 
authorization and approval. Identify whether the following situation should be considered 
as general authorization, specific authorization or approval: 


1. Policy to ask for the purchasing director’s instruction upon buying a new equipment 
2. Policy to re-order raw materials when the inventory level drops below 200 units. 


Purchase clerk places a purchase order to buy raw materials based on the policy above. 


11-11 (oBjective 11-3) Explain what is meant by independent checks on performance and 
give five specific examples. 


11-12 (oBjective 11-3) Saturn Bank is a financial institution headquartered in London. 
Saturn Bank started its operations in the European countries since late 1970s and ex- 
panded to Asian region such as Hong Kong, Japan and Korea. Recently, Saturn Bank has 
been subject to investigations by several regulatory bodies on potential money laundering 
matters. The management, including a number of newly joined board members, decided 
to implement a new system on highlighting potential suspicious transactions. What ma- 
jor factors may be relevant when Saturn Bank assesses its risk in the implementation of 
the COSO internal control framework? 
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11-13 (OBJECTIVE 11-3) Describe why auditors generally evaluate entity-level controls be- 
fore evaluating transaction-level controls. 

11-14 (oBjective 11-4) Explain how client internal controls can be improved through the 
proper installation of IT. 
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11-15 (oBjective 11-4) Identify risks for extensive IT-based accounting systems. 


11-16 (oBjective 11-4) Explain what cybersecuity is and identify the two types of security 
controls in an IT environment. 

11-17 (oBjectIVE 11-4) Explain how the effectiveness of general controls impacts the effec- 
tiveness of automated application controls. 


11-18 (OBJECTIVE 11-5) Compare the risks associated with network systems and database 
systems to those associated with centralized IT functions. 


11-19 (OBJECTIVE 11-5) An audit client is creating an online, Web-based sales ordering sys- 
tem for customers to purchase products using personal credit cards for payment. Identify 
three risks related to an online sales system that management should consider. For each 
risk, identify an internal control that could be implemented to reduce that risk. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


11-20 (OBJECTIVES 11-1, 11-2, 11-3) The following are general questions about internal con- 
trol. Choose the best response. 


a. Which of the following would not be considered an inherent limitation of the poten- 
tial effectiveness of an entity’s internal control structure? 
(1) Incompatible duties (3) Mistakes in judgment 
(2) Management override (4) Collusion among employees 


b. Actions, policies, and procedures that reflect the overall attitude of management, 
directors, and owners of the entity about internal control relate to which of the fol- 
lowing internal control components? 

(1) Control environment (3) Risk assessment 
(2) Information and communication (4) Monitoring 


c. Vendor account reconciliations are performed by three clerks in the accounts pay- 
able department on Friday of each week. The accounts payable supervisor reviews 
the completed reconciliations the following Monday to ensure they have been 
completed. The work performed by the supervisor is an example of which COSO 


component? 
(1) Control activities (3) Risk assessment 
(2) Information and communication (4) Monitoring 


11-21 (OBJECTIVES 11-4, 11-5) The following questions concern the characteristics of IT sys- 
tems and their impact on internal controls. Choose the best response. 


a. Which of the following is an advantage of a computer-based system for transaction 
processing over a manual system? A computer-based system 
(1) does not require as stringent a set of internal controls. 
(2) will produce a more accurate set of financial statements. 
(3) will be more efficient in generating financial statements. 
(4) eliminates the need to reconcile control accounts and subsidiary ledgers. 


b. Which of the following is an example of an application control? 

(1) The client uses access security software to limit access to each of the accounting 
applications. 

(2) Employees are assigned a user ID and password that must be changed every quarter. 

(3) The sales system automatically computes the total sale amount and posts the to- 
tal to the sales journal master file. 

(4) Systems programmers are restricted from doing applications programming 
functions. 


c. Which of the following is generally not considered a category of IT general controls? 
(1) Controls that determine whether a vendor number matches the pre-approved 
vendors in the vendor master file 
(2) Controls that restrict system-wide access to programs and data 
(3) Controls that oversee the acquisition of application software 
(4) Controls that oversee the day-to-day operation of IT applications 
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DISCUSSION QUESTIONS AND PROBLEMS 


11-22 (OBJECTIVES 11-3, 11-4) Following are descriptions of ten internal controls. 

1. The company uses benchmark data to assess losses from theft. The company then 
compares its own data with those of other companies. 

2. The company adopts the use of narratives and data flow diagrams to document the 
procedures relating to the company’s financial reporting. 

3. The audit committee is committed to establish procedures for whistleblowing any ac- 
counting, internal control and auditing matters from employees, customers and suppliers. 

4. The accounting department performs a three-way match by comparing data between 
the purchase order, goods received note and invoice to ensure mathematical accuracy. 

5. The company establishes a number of key performance indicators for many financial 
processes. The management then regularly tracks the performance to established 
targets for evaluation. 

6. The company follows strictly a full system development life cycle when it develops 
in-house software. This covers implementation, security and conversion issues of the 
software. 

7. The company publishes bi-monthly newsletter on its intra-net. The newsletter in- 
cludes a column on matters relating to the company’s code of conduct which empha- 
size the importance of integrity. 

8. The company has developed a financial and internal control reporting package. The 
accounting department will generate the reports monthly and submit to the direc- 
tors for review. 

9. An internal audit department has been established to conduct separate evaluations 
on the company’s internal controls. 

10. The company constantly reviews websites, social media and trade publications in 
order to observe changes in the external market. The management then assesses the 
impact to the company’s operations. 


Indicate which of the five COSO internal control components is best represented byeach Required 
internal control. 

a. Control environment d. Information and communication 

b. Risk assessment e. Monitoring 

c. Control activities 
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11-23 (OBJECTIVES 11-3, 11-4) The following are internal controls related to various cycles. 
1. Sales invoices are matched with shipping documents by the computer system and an 
exception report is generated. 
2. Receiving reports are prenumbered and accounted for on a daily basis. 
3. Sales invoices are independently verified before being sent to customers. 
4. Payments by check are received in the mail by the receptionist, who lists the checks 
and restrictively endorses them. 
. Labor hours for payroll are reviewed for reasonableness by the computer system. 
6. Checks are signed by the company president, who compares the checks with the 
underlying supporting documents. 
. Unmatched shipping documents are accounted for on a daily basis. 
8. The computer system verifies that all payroll payments have a valid employee identi- 
fication number assigned by the human resources department at the time of hiring. 
9. The accounts receivable master file is reconciled to the general ledger on a monthly basis. 


Ww 


N 


Required a. For each internal control, identify the type(s) of specific control activity (or activities) to 
which it applies (such as proper authorization and adequate documents and records). 
b. For each internal control, identify the transaction-related management assertion(s) 
to which it applies. 


11-24 (oBjective 11-3) The following are misstatements that have occurred in Merry 
Accessories Ltd., a trading company selling handbags and accessories: 

1. The order clerk placed purchase orders for accessories items; however, it was discov- 
ered that only purchase orders above $3,000 required authorization. The order clerk 
regularly placed order for personal goods up to value of $3,000. 

2. When goods were received, the warehouse department verified the quantity to the sup- 
pliers’ despatch note and checked the quality of the goods received. The warehouse de- 
partment, however, did not check against the purchase order as no copy of the purchase 
order was ever sent to the warehouse department. It was discovered that three batches 
of handbags, which the company did not order, were received and subsequently paidfor. 

3. Purchase invoices were input daily by the purchase ledger clerk. No application con- 
trol was ever applied over the input process. It was discovered that several mistakes 
were made during the input process and suppliers were paid incorrectly. 

4. The finance director is only provided with the total amount of payments to be made 
on the payment list for payment approval. It was then discovered that some of the 
payees were fictitious suppliers. 

5. The sales ledger clerk was having a long holiday during Christmas times. Upon 
return in January, the clerk entered all the unrecorded sales during his leave as 
January’s sales for convenience sake. 

6. During the sales ledger clerk’s holiday, one of salespersons, a close friend of the sales 
ledger clerk,helped inputting the sales to the accounting system. It was then discov- 
ered that two cash sales transactions marked with “recorded” were not input to the 
system. 

7. When processing orders, the sales clerk entered a discount manually into the invoice. 
As the sales clerk was a newly recruited member, it was noted that the employee 
either forgot to enter the discount or entered an incorrect level of discount 


Required a. For each misstatement, identify one or more types of controls that were absent. 
b. For each misstatement, identify the transaction-related management assertions that 
have not been met. 
c. For each misstatement, suggest a control that may have prevented or detected the 
misstatement. 


11-25 (OBJECTIVE 11-3) The division of the following duties is meant to provide the best 
possible controls for the Meridian Paint Company, a small wholesale store: 
tl. Approve credit for customers included in the customer credit master file. 
2. Input shipping and billing information to bill customers, record invoices in the sales 
journal, and update the accounts receivable master file. 
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3. 
4. 


T5. 
6. 
ee 
T8. 
9. 
10. 
11. 
112. 
13. 
14. 
15. 
16. 
17. 


18. 


Open the mail and prepare a prelisting of cash receipts. 

Enter cash receipts data to prepare the cash receipts journal and update the accounts 
receivable master file. 

Prepare daily cash deposits. 

Deliver daily cash deposits to the bank. 

Assemble the payroll time cards and input the data to prepare payroll checks and up- 
date the payroll journal and payroll master files. 

Sign payroll checks. 

Assemble supporting documents for general and payroll cash disbursements. 

Sign general cash disbursement checks. 

Input information to prepare checks for signature, record checks in the cash dis- 
bursements journal, and update the appropriate master files. 

Mail checks to suppliers and deliver checks to employees. 

Cancel supporting documents to prevent their reuse. 

Update the general ledger at the end of each month and review all accounts for unex- 
pected balances. 

Reconcile the accounts receivable master file with the control account and review ac- 
counts outstanding more than 90 days. 

Prepare monthly statements for customers by printing the accounts receivable mas- 
ter file; then mail the statements to customers. 

Reconcile the monthly statements from vendors with the accounts payable master 
file. 

Reconcile the bank account. 


You are to divide the accounting-related duties 1 through 18 among Robert Smith, James 
Cooper, and Mohini Singh. All of the responsibilities marked with a dagger (t) are assumed 
to take about the same amount of time and must be divided equally between Smith and 
Cooper. Both employees are equally competent. Singh, who is president of the company, 
is not willing to perform any functions designated by a dagger and will perform only a 
maximum of two of the other functions.* 


11-26 (oBjectives 11-3, 11-4) The following are misstatements that can occur in the sales 
and collection cycle: 


1. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


b. 


a. 


A customer number on a sales invoice was transposed and, as a result, charged to 
the wrong customer. By the time the error was found, the original customer was no 
longer in business. 


. A former computer operator, who is now a programmer, entered information for a 


fictitious sales return and ran it through the computer system at night. When the 
money came in, he took it and deposited it in his own account. 


. A nonexistent part number was included in the description of goods on a shipping 


document. Therefore, no charge was made for those goods. 


. A customer order was filled and shipped to a former customer, which had already 


filed for bankruptcy. 


. The sales manager approved the price of goods ordered by a customer, but he wrote 


down the wrong price. 


. A computer operator picked up a computer-based data file for sales of the wrong 


week and processed them through the system a second time. 


. For a sale, a data entry operator erroneously failed to enter the information for the 


salesman’s department. As a result, the salesman received no commission for that sale. 


. Several remittance advices were batched together for inputting. The cash receipts 


clerk stopped for coffee, set them on a box, and failed to deliver them to the data 
input personnel. 


Identify the transaction-related management assertion(s) to which the misstatement 
pertains. 
Identify one automated control that would have likely prevented each misstatement. 


* Based on AICPA question paper, American Institute of Certified Public Accountants. 
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Required 


Required 


ee. 11-27 (OBJECTIVES 11-3, 11-4) Pure Pharmaceuticals, a company engaging in research on 

oe i drugs, is having operations in the United Kingdom, Asia-Pacific region and the USA. The 
firm is considering adoptingcloud computingservices which enable the organization to 
obtain its computing resources and applications from any location via an Internet con- 
nection. To be more specific, staff members are then able to receive emails stored in the 
cloud and share research projects with staff members working in another office easily. In 
such adoption, Pure Pharmaceuticals has to search for a cloud service provider, a third- 
party vendor providing application delivery, hosting, monitoring, and other services 
through cloud computing. You are the firm’s consultant and you are requested to provide 
advice to the board of directors before such adoption. 


Required a. Perform a risk assessment on the adoption of cloud computing to the firm’s opera- 
tions, including both the opportunities and the risks involved. 

b. Discuss if there would be any possible change to the existing IT organizational struc- 
ture after the adoption of cloud computing. 

c. How does adoption of cloud computing affect the control environment of the 
organization? What are the roles of the board of directors in the adoption of cloud 
computing? 

d. Discuss the general IT controls that may be expected in cloud computing environment. 


11-28 (oBjectIVE 11-4) During your audit of Wilcoxon Sports, Inc., a retail chain of stores, 
you learn that a programmer made an unauthorized change to the sales application pro- 
gram even though no work on that application had been approved by IT management. In 
order for the sales application program to work, the programmer had to make modifica- 
tions to the operating software security features. The unauthorized change forced the 
sales program to calculate an automatic discount for a customer who happens to be the 
brother-in-law of the programmer. The customer and programmer split the savings from 
the unauthorized discount. The programmer modified the program and returned it to the 
librarian, who placed it into the files for live production use. No other information was 
forwarded to the librarian. 


Required 1. What recommendation do you have for management of Wilcoxon Sports, Inc., to 
prevent this from recurring? 
2. Explain why you believe the suggested internal control improvements will prevent 
problems in the future. 


Ge... II-29 (opjectives 11-3, 11-4) Your new audit client, Hardwood Lumber Company, has a 
a computerized accounting system for all financial statement cycles. During planning, you 
visited with the information systems vice president and learned that personnel in informa- 
tion systems are assigned to one of four departments: systems programming, applications 
programming, operations, or data control. Job tasks are specific to the individual and no 
responsibilities overlap with other departments. Hardwood Lumber relies on the operat- 
ing system software to restrict online access to individuals. The operating system allows 
an employee with “READ” capabilities to only view the contents of the program or file. 
“CHANGE” allows the employee to update the contents of the program or file. “RUN” 
allows the employee to use a program to process data. Programmers, both systems and 
applications, are restricted to a READ-only access to all live application software program 
files but have READ and CHANGE capabilities for test copies of those software program 
files. Operators have READ and RUN capabilities for live application programs. Data con- 
trol clerks have CHANGE access to data files only and no access to software program files. 
The person in charge of operations maintains access to the operating software security 
features and is responsible for assigning access rights to individuals. The computer room 
is locked and requires a card-key to access the room. Only operations staff have a card-key 
to access the room, and security cameras monitor access. A TV screen is in the informa- 
tion systems vice president’s office to allow periodic monitoring of access. The TV pres- 
ents the live picture and no record is maintained. The librarian, who is in the operations 
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department, is responsible for maintaining the library of program files. The librarian has 
READ and CHANGE access rights to program files. Backup copies of program files are 
stored on an external drive, and data files are maintained on a backup server. The external 
drive and backup server are located in a room adjacent to the computer room. 


a. Identify the strengths of Hardwood Lumber Company’s computerized accounting system. 
b. What recommendations for change can you suggest to improve Hardwood’s infor- 
mation systems function? 


11-30 (OBJECTIVES 11-3, 11-4) Companies and government agencies across the globe are 
increasing their expenditures on cybersecurity; yet, incidents on cyberattacks have still 
been proliferating in the media. It appears that risk management over cybersecurity 
poses significant challenge on nearly all organizations involving different parties rang- 
ing from the board of directors, managers, individual employees to internal auditors. The 
Committee of Sponsoring Organizations of the Treadway Commission (COSO) issued 
various thought papers as guidance on assessing and mitigating risks, two of which are 
COSO in the Cyber Age and Leveraging COSO Across the Three Lines of Defense. Visit the COSO 
Web site (www.coso.org), and refer to the “Guidance” tab. Read the two thought papers to 
answer the following questions: 


a. The three lines of defense addresses how specific duties related to risk and control 
could be assigned and coordinated within an organization. What are the three lines 
of defense? In general, how would you link the first line of defense to the five compo- 
nents of internal control? 

b. Information security is a significant component in addressing cyber risks. Under 
which line of defense will you classify information security? Explain your choice. 

c. Briefly describe how control environment and monitoring help address cyber risks. 


Other than COSO, what other standards and frameworks may be relevant to help organi- 
zations address cyber risks? 


Required 


Required 


11-31 (OBJECTIVE 11-3) The Cotton Company, a retail store dealing in expensive linens and 
clothing, has a staff of about 20 salesclerks. The sales are done in cash or credit, using the 
store’s own billing rather than credit cards. Most of the larger sales are on credit. 

Each salesclerk has his own sales book with prenumbered, three-copy, multicolored 
sales slips attached, but perforated. Only a central cash register is used, run by the store 
manager. He’s been working for Zafir Diab, the store owner, for over 15 years. The cash 
register is physically positioned to monitor the entire store and the front door. 

All transactions are recorded in the salesclerks’ sales books. The original and second 
copies for each sale are given to the cashier. The third copy is retained by the salesclerk in 
the sales book. When the sale is for cash, the customer pays the salesclerk, who marks all 
three copies “paid” and takes the money to the supervisor. 

The supervisor compares the clothing to the description on the invoice and the price 
on the sales tag. He also rechecks the clerk’s calculations. Any corrections are approved by 
the salesclerk. The clerk changes his sales book at that time, and the items are packaged 
and given to the customer. 

A credit sale must be approved by the supervisor from an approved credit list after the 
salesclerk prepares the three-part invoice. Next, the supervisor enters the sale in his cash 
register as a credit or cash sale. The second copy of the invoice, which has been validated 
by the cash register, is given to the customer. Diab must approve of any credit sales that 
exceed $500. 

At the end of the day, the salesclerks give their books to the supervisor, and the super- 
visor compares the totals to the cash register tape. He then creates a summary of the day’s 
transactions. The cash is deposited in the bank the next morning by Diab, and he receives 
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a deposit slip, which he gives to the accounts receivable clerk. If Diab is unable to deposit 
the money, the supervisor goes instead. The cashier’s copies of the invoices are also given 
to the accounts receivable clerk along with a summary of the day’s receipts. 

Khalid, the accounts receivable clerk, reviews the sales books and the register tape. He 
inputs all sales invoice information into the firm’s computer, which provides a complete 
printout of all input and summaries. The accounting summary includes sales by the sales- 
clerk, cash sales, credit sales, and total sales. Khalid compares this output with the summary 
and reconciles all differences. 

The computer updates accounts receivable, inventory, and general ledger master files. 
After the update procedure has been run on the computer, Khalid’s assistant files all sales 
included in the sales printout. Khalid uses these files to create bills that are mailed to the 
customers. 

The mail is opened each morning by Diab’s secretary. She gives all correspondence to 
Diab and all payments to the supervisor. The supervisor totals the amounts and adds this 
cash to the register for later deposit. He gives the total to Khalid to update customer accounts 
on the computer. Khalid uses this list and all the remittances to record cash receipts and 
update accounts receivable, again by computer. He reconciles the total receipts on the pre- 
list to the deposit slip and to her printout. At the same time, he compares the deposit slip 
received from the bank for cash sales to the cash receipts journal. He has online access to the 
store’s bank account, which he accesses monthly to pay the store’s bills online. 

The computer generates a weekly aged trial balance of accounts receivable. A separate 
listing of all unpaid bills is also automatically prepared, and both are given to Mr. Diab. He 
approves all write-offs of uncollectible items and forwards the list to Khalid, who writes 
them off. 

Each month Khalid mails computer-generated statements to customers. Complaints 
and disagreements are resolved by Mr. Diab, who then informs Khalid in writing of any 
write-downs or misstatements that require correction. 

The computer system also automatically totals the journals and posts the totals to the 
general ledger. A general ledger trial balance is printed out, from which Khalid prepares 
financial statements. Khalid also prepares monthly bank reconciliations and reconciles 
the general ledger to the aged accounts receivable trial balance. 

Because of the importance of inventory control, Khalid prints out the inventory 
perpetual totals monthly, on the last day of each month. Salesclerks count all inventory 
after store hours on the last day of each month for comparison with the perpetuals. An 
inventory shortage report is provided to Mr. Diab. The perpetuals are adjusted by Khalid 
after Mr. Diab has approved the adjustments. 


Required a. For each sales transaction-related audit objective, identify one or more existing 
controls. 
b. For each cash receipts transaction-related audit objective, identify one or more existing 
controls. 
c. What are some possible deficiencies in the store’s system? How would you, as the 
auditor, suggest ways to improve their system? 
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ASSESSING CONTROL 
RISK AND REPORTING 


ON INTERNAL CONTROLS . e 


Just Because The Computer Did The Work Doesn’t 
Mean It’s Right 


Allen, the senior auditor, is assigned to work on an audit of a subsidiary of an international UK 
financial institution, Robot Banks in Singapore. Robot recently merged with another Singapore 
subsidiary of another international UK financial institution, Apache Banks. Robot Banks decided 
to roll out a new system that consolidated all loan data onto one system. 


During the audit planning phase, Allen overhead a conversation between two employees in 
Robot’s office cafeteria. “How was your weekend?” one guy asked the other. “Terrible, | had 
to come in during the week- 
end to perform reconciliations 
between the old and the new 
trade systems. The worst thing 
is nobody knows why some fig- 
ures were not captured in the 
new system. There are defi- 
nitely a lot of issues!” 


“Oh no,” Allen thought to him- 
self, “it means the audit on rev- 
enue recognition of loans will 
have to be tested extensively.” 
Normally, the merger of two 
subsidiaries would mean more 
extensive testing of account 
balances. The addition of rolling out a new system would mean that Allan would not only have 
to ramp up the number of audit tests, but will be unlikely to rely on summary or computed 
data generated by the computer system. He would have to go back to the source documenta- 
tion when performing his audit tests. “At least all the data from Robot is fully electronic, so 
| can perform audit analytics on the data from the two original systems,” Allen thoughtfully 
said to himself. “Because audit analytics means | don’t have to select samples above a pre- 
determined amount, | can review all transactions and weed out the ‘odd’ transactions. I'll then 
have to look into those ‘odd’ transactions. It’ll be a little like putting students to a common 
test. For those who pass, no further work is needed. For those who fail, more probing will be 
needed to understand why they failed and how they can pass in the future.” 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


12-1 Obtain and document an 
understanding of internal 
control. 

12-2 Assess control risk by linking 
key controls and control 
deficiencies to transaction- 
related audit objectives. 

12-3 Describe the process of 
designing and perform- 
ing tests of controls. 

12-4 Understand how control risk 
impacts detection risk and the 
design of substantive tests. 

12-5 Understand requirements 
for auditor reporting 
on internal control. 

12-6 Describe the differences 
in evaluating, reporting, 
and testing internal control 
for nonpublic and smaller 
public companies. 

12-7 Describe how the complexity 
of the IT environment impacts 
control risk assessment and 
testing. 


OBTAIN AND DOCUMENT UNDERSTANDING 
OF INTERNAL CONTROL 


Obtain and document an under- 
standing of internal control. 


Accept client and perform 
initial audit planning 


as re 


Understand the client’s 
business and industry 


Perform preliminary 
analytical procedures 


Set preliminary judgment 
of materiality and 
performance materiality 


Identify significant risks 
due to fraud or error 


Assess inherent risk 


Understand internal control 
and assess control risk 


Finalize overall audit 
strategy and audit plan 
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In the previous chapter, we discussed the components of the COSO internal control 
framework and how companies integrate technology into their system of internal 
controls. In this chapter, we discuss how auditors obtain and document their under- 
standing of internal controls and assess control risk as part of the audit planning 
process. The opening story about Manion’s overreliance on the accuracy of the 
computer-produced accounts receivable aging illustrates the importance of testing 
controls and also the efficiency and effectiveness of using audit software. People often 
assume “the information is correct because the computer produced it.” Unfortunately, 
auditors sometimes depend on the untested accuracy of computer-generated output 
because they forget that computers perform only as well as they are programmed. 
Before concluding that information is reliable, auditors must understand and test 
computer-based controls in the same way they need to understand and test manual 
controls. 

For financial statement audits, auditors need to understand controls that are rel- 
evant to the audit in order to identify and assess the risks of material misstatements. 
For integrated audits of large, publicly traded companies, the level of understanding 
of internal control and the extent of testing need to be sufficient to issue an opinion 
on the effectiveness of internal control over financial reporting in addition to assess- 
ing the risks of material misstatement as part of the audit planning process. Thus, 
the level of understanding required for the audit of internal control exceeds what is 
required for an audit of only the financial statements. 

Figure 12-1 provides an overview of the process of understanding internal control 
and assessing control risk. The figure shows that there are four steps in the process. 
Each of these four steps is discussed in this chapter. 


Process for Understanding Internal Control 
and Assessing Control Risk 


FIGURE 12-1 


Obtain and document 
understanding of 
internal control 

design and operation 


Assess control risk 


Design, perform, 
and evaluate 
tests of controls 


Decide planned 
detection risk and 
substantive tests 
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Auditing standards require auditors to obtain and document their understanding 
of internal control for every audit. This understanding is necessary for both the 
audit of internal controls over financial reporting and the audit of financial state- 
ments. Management’s documentation is a major source of information in gaining this 
understanding. 

As part of the auditor’s risk assessment procedures, the auditor uses procedures to 
obtain an understanding, which involve gathering evidence about the design of inter- 
nal controls and whether they have been implemented, and then using that information 
as a basis for assessing control risk and for the integrated audit. The auditor generally 
uses four of the eight types of evidence described in Chapter 7 to obtain an understand- 
ing of the design and implementation of controls: inspection, inquiry of entity person- 
nel, observation of employees performing control processes, and reperformance by 
tracing one or a few transactions through the accounting system from start to finish. 

Auditors commonly use three types of documents to obtain and document their 
understanding of the design of internal control: narratives, flowcharts, and internal 
control questionnaires. Because Section 404 of the Sarbanes-Oxley Act requires 
management to assess and document the design effectiveness of internal control 
over financial reporting, they have usually already prepared this documentation. 
Narratives, flowcharts, and internal control questionnaires, used by the auditor sepa- 
rately or in combination to document internal control, are discussed next. 


Narrative A narrative is a written description of a client’s internal controls. A 
proper narrative of an accounting system and related controls describes four things: 


1. The origin of every document and record in the system. For example, the descrip- 
tion should state where customer orders come from and how sales invoices are 
generated. 

2. All processing that takes place. For example, if sales amounts are determined by 
a computer program that multiplies quantities shipped by standard prices con- 
tained in price master files, that process should be described. 

3. The disposition of every document and record in the system. The filing or electronic 
archiving of documents, sending them to customers, or destroying them should 
be described. 

4. An indication of the controls relevant to the assessment of control risk. These typically 
include separation of duties (such as separating recording cash from handling 
cash), authorizations and approvals (such as credit approvals), and internal verifi- 
cation (such as comparison of unit selling prices to sales contracts). 


Flowchart An internal control flowchart is a diagram of the client’s documents and 
their sequential flow in the organization. An adequate flowchart includes the same 
four characteristics identified for narratives. 

Well-prepared flowcharts are advantageous primarily because they provide a 
concise overview of the client’s system, including separation of duties, which helps 
auditors identify controls and deficiencies in the client’s system. Flowcharts have two 
advantages over narratives: typically they are easier to read and easier to update. It is 
unusual to use both a narrative and a flowchart to describe the same system because 
both present the same information. 


Internal Control Questionnaire An internal control questionnaire asks a series 
of questions about the controls in each audit area as a means of identifying internal 
control deficiencies. Most questionnaires require a “yes” or a “no” response, with “no” 
responses indicating potential internal control deficiencies. By using a questionnaire, 
auditors cover each audit area reasonably quickly. The two main disadvantages of 
questionnaires are their inability to provide an overview of the system and their inap- 
plicability for some audits, especially smaller ones. 

Figure 12-2 (p. 394) illustrates part of an internal control questionnaire for the 
sales and collection cycle of Hillsburg Hardware Co. Notice how the questionnaire 
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incorporates the six transaction-related audit objectives A through F as each applies 
to sales transactions (see shaded portions). The same is true for all other audit areas. 
These methods are also used to obtain an understanding of IT general controls. 
The auditor interviews IT personnel and key users; examines system documenta- 
tion such as flowcharts, user manuals, program change requests, and system testing 
results; and reviews detailed questionnaires completed by IT staff. In most cases, 


FIGURE 12-2 Partial Internal Control Questionnaire for Sales 
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Client _ Hillsburg Hardware Co. Audit Date 12/31/16 
Auditor MSW __ Date Completed 9/30/16 Reviewed by FR Date Completed 10/1/16 


Objective (white box) and Question Answer Remarks 
Sales Yes No N/A 


A. Recorded sales are for shipments actually 
made to existing customers. 


|. Is customers’ credit approved by a responsible J By Chulick, the president 
official and is access to change credit limit master 
files restricted? 


. Is the recording of sales supported by authorized J Pam Dilley examines 


shipping documents and approved customer underlying documentation 
orders? ° 


. Is there adequate separation of duties between 
billing, recording sales, and handling cash receipts? 


4. Are sales invoices prenumbered and accounted for? Prenumbered but not 
accounted for. Additional 
substantive testing required. 


B. Existing sales transactions are recorded. 


|. Is a record of shipments maintained? 


2. Are shipping documents controlled from the office 
in a manner that helps ensure that all shipments 
are billed? 

. Are shipping documents prenumbered and 
accounted for? 


C. Recorded sales are for the amount of goods 
shipped and are correctly billed and recorded. 


. Is there independent comparison of the quantity 
on the shipping documents to the sales invoices? 


. Is an authorized price list used and is access to 
change the price master file restricted? 


. Are monthly statements sent to customers? 


D. Sales transactions are properly included in the 
master files and are correctly summarized. 


|. Does the computer automatically post 
transactions to the accounts receivable 
master file and general ledger? 

2. Is the accounts receivable master file reconciled By Erma, the accountant 
with the general ledger on a monthly basis? 


E. Recorded sales transactions are properly 
classified. 


|. Is there independent comparison of recorded WA All sales are on account 


sales to the chart of accounts? and there is only one 


sales account. 
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auditors should use several of these approaches in understanding general controls 
because each offers different information. For example, interviews with the chief 
information officer and systems analysts provide useful information about the opera- 
tion of the entire IT function, the extent of software development and hardware 
changes made to accounting application software, and an overview of any planned 
changes. Reviews of program change requests and system test results are useful to 
identify program changes in application software. Questionnaires help auditors iden- 
tify specific internal controls. 

The use of questionnaires and flowcharts together is useful for understanding 
the client’s internal control design and identifying internal controls and deficien- 
cies. Flowcharts provide an overview of the system, while questionnaires offer use- 
ful checklists to remind the auditor of many different types of internal controls that 
should exist. 


In addition to understanding the design of the internal controls, the auditor must also 
evaluate whether the designed controls are implemented. In practice, the understand- 
ing of the design and the implementation are often done simultaneously. Following 
are common methods. 


Update and Evaluate Auditor’s Previous Experience with the Entity Most audits 
of a company are done annually by the same CPA firm. After the first year’s audit, 
the auditor begins with a great deal of information from prior years about the client’s 
internal control. It is especially useful to determine whether controls that were not 
previously operating effectively have been improved. 


Make Inquiries of Client Personnel Auditors should ask management and other 
personnel to explain their duties. Careful questioning of appropriate personnel helps 
auditors evaluate whether employees understand their duties and do what is described 
in the client’s control documentation. 


Examine Documents and Records The five components of internal control all 
involve the creation of many documents and records. By examining completed docu- 
ments, records, and computer files, the auditor can evaluate whether information 
described in flowcharts, narratives, and questionnaires has been implemented. 


Observe Entity Activities and Operations When auditors observe client personnel 
carrying out their normal accounting and control activities, including their prepara- 
tion of documents and records, it further improves the auditors’ understanding and 
knowledge that controls have been implemented. 


Perform Walkthroughs of the Accounting System In a walkthrough, the auditor 
selects one or a few documents of a transaction type and traces them from initia- 
tion through the entire accounting process. At each stage of processing, the auditor 
makes inquiries, observes activities, and examines completed documents and records. 
Walkthroughs conveniently combine observation, inspection, and inquiry to assure 
that the controls designed by management have been implemented. 


Evaluating Internal 
Control Implementation 


ASSESS CONTROL RISK 


The auditor obtains an understanding of the design and implementation of internal 
control to make a preliminary assessment of control risk as part of the auditor’s 
overall assessment of the risk of material misstatements. As described in Chapter 9, 
the auditor uses this preliminary assessment of control risk to plan the audit for each 
material class of transactions. However, in some instances the auditor may learn that 
the control deficiencies are significant such that the client’s financial statements 
may not be auditable. For example, if management lacks integrity or the accounting 
records are deficient, most auditors will not accept the engagement. 
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After obtaining an understanding of internal control, the auditor makes a preliminary 
assessment of control risk as part of the auditor’s overall assessment of the risk of 
material misstatement. This assessment is a measure of the auditor’s expectation that 
internal controls will prevent material misstatements from occurring or detect and 
correct them if they have occurred. 

The starting point for most auditors is the assessment of entity-level controls. By 
their nature, entity-level controls, such as many of the elements contained in the con- 
trol environment, risk assessment, and monitoring components, have an overarching 
impact on most major types of transactions in each transaction cycle. For example, an 
ineffective board of directors or management’s failure to have any process to identify, 
assess, or manage key risks has the potential to undermine controls for most of the 
transaction-related audit objectives (for an example, see the vignette below related 
to Livent, Inc.). Thus, auditors generally assess entity-level controls before assessing 
transaction-specific controls. 

Similarly, auditors should evaluate the effectiveness of IT general controls before 
evaluating automated application controls or manual controls dependent on IT out- 
put. Ineffective general controls create the potential for material misstatements across 
all system applications, regardless of the quality of individual application controls. 
For example, if the auditor observes that data files are inadequately safeguarded, the 
auditor may conclude that there is a significant risk of loss of data for every class of 
transaction that relies on that data to conduct application controls. On the other 
hand, if general controls are effective, the auditor may be able to place greater reliance 
on application controls whose functionality is dependent on IT. 

Once auditors determine that entity-level controls, including general controls, are 
designed and placed in operation, they next make a preliminary assessment for each 
transaction-related audit objective for each major type of transaction in each trans- 
action cycle. For example, in the sales and collection cycle, the types of transactions 
usually involve sales, sales returns and allowances, cash receipts, and the provision 
for and write-off of uncollectible accounts. The auditor also makes the preliminary 
assessment for controls affecting audit objectives for balance sheet accounts and pre- 
sentations and disclosures in each cycle. 


Many auditors use a control risk matrix to assist in the control risk assessment 
process at the transaction level. The purpose is to provide a convenient way to orga- 
nize assessing control risk for each audit objective. Figure 12-3 illustrates the use of 
a control risk matrix for sales transaction audit objectives of Hillsburg Hardware Co. 
While Figure 12-3 only illustrates the control risk matrix for transaction-related audit 


Senior executives at Livent, Inc., the Toronto the- 
ater owner and producer of Broadway-style shows 
including Show Boat, Ragtime, and Phantom of the 


assets from expenses. Their techniques included 
alteration of computer programs to lower expenses 
without a trace in order to hide the fraud from 


Opera, took their theatrics to a new level when they 
allegedly engaged in a pervasive fraud to materially 
distort their financial statements over an eight-year 
period. According to charges filed by the Securities 
and Exchange Commission, the former chairman and 
CEO and the former president together coaxed sev- 
eral of their longtime company associates, including 
the CFO and IT manager, to participate in a multifac- 
eted scheme to manipulate profits. 

In addition to orchestrating vendor kickback 
schemes to siphon off millions of dollars and 
numerous customer side-agreements to falsify 
revenues, senior management manipulated the 
accounting records to shift costs of shows to fixed 


Livent auditors. In addition, they created “phantom” 
accounting records showing the adjustments so se- 
nior management could track the fraudulent entries 
and know the company’s true financial condition. 
Ultimately, their distortions were revealed, and the 
executives faced charges both in the United States 
and Canada. Livent filed for bankruptcy and was sub- 
sequently sold to a team headed by a former Walt 
Disney Company executive. 


Sources: |. Securities and Exchange Commission, Litigation 
Release No. 16022, Washington, DC, January 1999; 2. Canadian 
Broadcasting Company, “Livent Founders Charged with Fraud,” 
Arts Now, Toronto, October 10, 2002. 


FIGURE 12-3 Control Risk Matrix for Hillsburg Hardware Co.— Sales 


SALES TRANSACTION-RELATED AUDIT OBJECTIVES 


included in the accounts receivable 


master file and are correctly 
summarized (posting and 


summarization). 
Sales are recorded on the correct 


Recorded sales are for shipments 
actually made to nonfictitious 
Recorded sales are for the amount 
of goods shipped and are correctly 
billed and recorded (accuracy). 
dates (timing). 


customers (occurrence). 
Sales transactions are correctly 


Sales transactions are correctly 
classified (classification). 


Existing sales transactions are 


recorded (completeness). 


INTERNAL CONTROL 


Oo 


Credit is approved automatically by computer by 
comparison to authorized credit limits (C1). 


Recorded sales are supported by authorized shipping iS ie 
documents and approved customers orders (C2). 


Separation of duties exists among billing, recording of GE (S Ee 
sales, and handling of cash receipts (C3). 


Shipping documents are forwarded to billing daily and are billed G iS 
the subsequent day (C4). 


Shipping documents are prenumbered and accounted for Cc iS 
weekly (C5). 


Batch totals of quantities shipped are compared with quantities G G Cc 
billed (C6). 


Unit selling prices are obtained from the price list master E 
file of approved prices (C7). 


CONTROLS 


Sales transactions are internally verified (C8). iS 


Statements are mailed to customers each month (C9). (GS iG S 


Computer automatically posts transactions to the accounts Cc 
receivable subsidiary records and to the general ledger 


(C10). 


Accounts receivable master file is reconciled to the general Cc 
ledger on a monthly basis (CI 1). 


There is a lack of internal verification for the possibility of D 
sales invoices being recorded more than once (D1). 


There is a lack of control to test for timely recording (D2). D 


| DEFICIENCIES | 


Assessed control risk Med. Low Low Low Low Med. 


*Because there are no cash sales, classification is not a problem. 
C = Control; D = Control Deficiency. 


Note: This matrix was developed using an internal control questionnaire, part of which is included in Figure |2-2 (p. 394), as well as flowcharts 
and other documentation of the auditor’s understanding of internal control. 
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objectives, auditors use a similar control risk matrix format to assess control risk for 
balance-related and presentation and disclosure-related audit objectives. The control 
risk matrix can include both manual and automated application controls. We now 
discuss the preparation of the matrix. 


Identify Audit Objectives The first step in the assessment is to identify the audit 
objectives for classes of transactions, account balances, and presentation and disclosure 
to which the assessment applies. For example, this is done for classes of transactions by 
applying the specific transaction-related audit objectives introduced earlier, which were 
stated in general form, to each major type of transaction for the entity. For example, the 
auditor makes an assessment of the occurrence objective for sales and a separate assess- 
ment of the completeness objective. Transaction-related audit objectives are shown for 
sales transactions for Hillsburg Hardware at the top of Figure 12-3 (p. 397). 


Identify Existing Controls Next, the auditor uses the information discussed in the 

previous section on obtaining and documenting an understanding of internal control 

to identify the controls that contribute to accomplishing transaction-related audit 

objectives. One way for the auditor to do this is to identify controls to satisfy each 

objective. For example, the auditor can use knowledge of the client’s system to identify 

controls that are likely to prevent errors or fraud in the occurrence transaction-related 

audit objective. The same thing can be done for all other objectives. It is also helpful 

for the auditor to use the five control activities (separation of duties, proper autho- 

pe aa rization, adequate documents and records, physical control over assets and records, 

understanding of and independent checks on performance) as reminders of controls. For example: Is 

internal control there adequate separation of duties and how is it achieved? Are transactions properly 

ar se authorized? Are prenumbered documents properly accounted for? Are key master 

files properly restricted from unauthorized access? Is an independent verification of 
processes performed? 

The auditor should identify and include only those controls that are expected to 


Assess control risk 


Design, perform, 


ind evaliae have the greatest effect on meeting the transaction-related audit objectives. These are 

tests of controls often called key controls. The reason for including only key controls is that they will 

be sufficient to achieve the transaction-related audit objectives and also provide audit 

Pesan Moniek efficiency. Examples of key controls for Hillsburg Hardware are shown in Figure 12-3. 
etection risk an 

substantive tests Associate Controls with Related Audit Objectives Each control satisfies one or 


more related audit objectives. This can be seen in Figure 12-3 for transaction-related 
audit objectives. The body of the matrix is used to show how each control contrib- 
utes to the accomplishment of one or more transaction-related audit objectives. 
In this illustration, a C was entered in each cell where a control partially or fully 
satisfied an objective. A similar control risk matrix would be completed for balance- 
related and presentation and disclosure-related audit objectives. For example, the 
mailing of statements to customers satisfies three objectives in the audit of Hillsburg 
Hardware, which is indicated by the placement of a C on the row in Figure 12-3 
describing that control. 


Identify and Evaluate Control Deficiencies, Significant Deficiencies, and Material 
Weaknesses Auditors must evaluate whether key controls are absent in the design 
of internal control over financial reporting as a part of evaluating control risk and the 
likelihood of financial statement misstatements. Auditing standards define three lev- 
els of the absence of internal controls: 


1. Control deficiency. A control deficiency exists if the design and implementa- 
tion or operation of controls does not permit company personnel to prevent or 
detect misstatements on a timely basis in the normal course of performing their 
assigned functions. A design deficiency exists if a necessary control is missing, is not 
properly designed, or is not properly implemented. An operation deficiency exists if 
a well-designed control does not operate as designed or if the person performing 
the control is insufficiently qualified or authorized. 
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Significant deficiency. A significant deficiency exists if one or more control 
deficiencies exist that are less severe than a material weakness (defined next), but 
are important enough to merit attention by those responsible for oversight of the 
company’s financial reporting. 

Material weakness. A material weakness exists if a significant deficiency, by 
itself or in combination with other significant deficiencies, results in a reasonable 
possibility that internal control will not prevent or detect material financial state- 
ment misstatements on a timely basis. 

To determine if a significant internal control deficiency or deficiencies are a 
material weakness, they must be evaluated along two dimensions: likelihood and 
significance. The horizontal line in Figure 12-4 depicts the likelihood of a mis- 
statement resulting from the significant deficiency, while the vertical line depicts 
its significance. If there is more than a reasonable possibility (likelihood) that a 
material misstatement (significance) could result from the significant deficiency 
or deficiencies, then it is considered a material weakness. 


A five-step approach can be used to identify deficiencies, significant deficiencies, and 
material weaknesses: 


IE 
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Identify existing controls. Because deficiencies and material weaknesses are the ab- 
sence of adequate controls, the auditor must first know which controls exist. The 
methods for identifying controls have already been discussed. 

Identify the absence of key controls. Internal control questionnaires, flowcharts, 
and walkthroughs are useful tools to identify where controls are lacking and the 
likelihood of misstatement is therefore increased. It is also useful to examine the 
control risk matrix, such as the one in Figure 12-3, to look for objectives where 
there are no or only a few controls to prevent or detect misstatements. 

Consider the possibility of compensating controls. A compensating control is one 
elsewhere in the system that offsets the absence of a key control. A common 
example in a small business is the active involvement of the owner. When a com- 
pensating control exists, there is no longer a significant deficiency or material 
weakness. 

Decide whether there is a significant deficiency or material weakness. The likelihood 
of misstatements and their potential materiality are used to evaluate if there are 
significant deficiencies or material weaknesses. 

Determine potential misstatements that could result. This step is intended to iden- 
tify specific misstatements that are likely to result because of the significant 
deficiency or material weakness. The importance of a significant deficiency or 
material weakness is directly related to the likelihood and materiality of potential 
misstatements. 


FIGURE 12-4 Evaluating Significant Control Deficiencies 


SIGNIFICANCE 
Material 


Material Weakness 
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Reasonably Possible 


Immaterial 


Source: Michael Ramos, “Section 404 Compliance in the Annual Report,” Journal of Accountancy, October 2004, pp. 43-48. 
Copyright by American Institute of CPAs. All rights reserved. Used with permission. 
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FIGURE 12-5 Deficiencies in Internal Control 
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|. Prenumbered Duplicate Potentially Use audit software 
sales invoices sales material to search for 
are not recorded duplicate sales 
accounted for. invoice numbers. 
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Figure 12-5 for Hillsburg Hardware includes two control deficiencies. Neither 
deficiency was considered a material weakness; the first weakness, which is related to 
prenumbered sales invoices, was considered a significant deficiency. 


Associate Control Deficiencies with Related Audit Objectives The same as for 
controls, each significant deficiency or material weakness can apply to one or more 
related audit objectives. In the case of Hillsburg Hardware in Figure 12-3 (p. 397), 
there are two control deficiencies, and each applies to only one transaction-related 
objective. The control deficiencies are indicated in the body of the figure by a D in the 
appropriate objective column. 


Assess Control Risk for Each Related Audit Objective After controls and control 
deficiencies are identified and associated with transaction-related audit objectives, 
the auditor can assess control risk for transaction-related audit objectives. This is the 
critical decision in the evaluation of internal control. The auditor uses all of the in- 
formation discussed previously to make a subjective control risk assessment for each 
objective. There are different ways to express this assessment. Some auditors use a 
subjective expression such as high, moderate, or low. Others use numerical probabili- 
ties such as 1.0, 0.6, or 0.2. 

Again, the control risk matrix is a useful tool for making the assessment. Referring 
to Figure 12-3, the auditor assessed control risk for each objective for Hillsburg’s sales 
by reviewing each column for pertinent controls and control deficiencies and ask- 
ing, “What is the likelihood that a material misstatement would not be prevented or 
detected, or corrected if it occurred, by these controls, and what is the effect of the 
deficiencies or weaknesses?” If the likelihood is low, then control risk is low, and so 


forth. Figure 12-3 for Hillsburg Hardware shows that all objectives are assessed as low 
except occurrence and timing, which are medium. 

This assessment is not the final one. Before making the final assessment at the 
end of an audit, the auditor will test controls and perform substantive tests. These 
procedures can either support the preliminary assessment or cause the auditor to 
make changes. In some cases, management can correct deficiencies and material 
weaknesses before the auditor does significant testing, which may permit a reduction 
in control risk. 

After a preliminary assessment of control risk is made for sales and cash receipts, 
the auditor can complete the three control-risk rows of the evidence-planning work- 
sheet that was introduced in Chapter 9 on page 282. If tests of controls results do 
not support the preliminary assessment of control risk, the auditor must modify the 
worksheet later. Alternatively, the auditor can wait until tests of controls are done to 
complete the three control-risk rows of the worksheet. An evidence-planning work- 
sheet for Hillsburg Hardware with the three rows for control risk completed is illus- 
trated in Figure 15-6 on page 504. 


TESTS OF CONTROLS 
We’ve examined how auditors link controls and control deficiencies to related audit ‘OBJECTIVE 12-3 


objectives to assess control risk for each objective. Now we'll address how auditors 

: Describe the process of 
test those controls that are used to support a control risk assessment. For example, designing and performing 
each key control in Figure 12-3 that the auditor intends to rely on to support acontrol tests of controls. 
risk below the maximum must be supported by sufficient tests of controls. We will 
deal with tests of controls for both audits of internal control for financial reporting 
and audits of financial statements. 


Assessing control risk requires the auditor to consider the design, implementation, 
and operation of controls to evaluate whether they will likely be effective in meet- 
ing related audit objectives. During the understanding phase, the auditor will have 
already gathered some evidence in support of both the design of the controls and their 
implementation by using procedures to obtain an understanding (see pages 368-371). 
In most cases, the auditor will not have gathered enough evidence to reduce assessed 
control risk to a sufficiently low level. The auditor must therefore obtain additional 
evidence about the operating effectiveness of controls throughout all, or at least most, 
of the period under audit. The procedures to test effectiveness of controls in support 
of a reduced assessed control risk are called tests of controls. 

If the results of tests of controls support the design and operation of controls as 
expected, the auditor uses the same assessed control risk as the preliminary assess- 
ment. If, however, the tests of controls indicate that the controls did not operate effec- 
tively, the assessed control risk must be reconsidered. For example, the tests may indi- 
cate that the application of a control was curtailed midway through the year or that 
the person applying it made frequent misstatements. In such situations, the auditor 
uses a higher assessed control risk, unless compensating controls for the same related 
audit objectives are identified and found to be effective. For integrated audits, the audi- 
tor must also consider the impact of those controls that are not operating effectively 
on the auditor’s report on internal control. 


Purpose of Tests 
of Controls 


The auditor is likely to use four types of procedures to support the operating effective- 
ness of internal controls. Management's testing of internal control will likely include 
the same types of procedures. The four types of procedures are as follows: 


Procedures for Tests 
of Controls 
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1. Make inquiries of appropriate client personnel. Although inquiry is not a highly 
reliable source of evidence about the effective operation of controls, it is still 
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Obtain and document 
understanding of 
internal control 

design and operation 


Assess control risk 


Design, perform, 
and evaluate 
tests of controls 


Decide planned 
detection risk and 
substantive tests 


Extent of Procedures 
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appropriate. For example, to determine that unauthorized personnel are denied 
access to computer files, the auditor may make inquiries of the person who con- 
trols the computer library and of the person who controls online-access security- 
password assignments. 

2. Examine documents, records, and reports. Many controls leave a clear trail of docu- 
mentary evidence (both electronic and paper) that can be used to test controls. 
Suppose, for example, that when a customer order is received, it is used to create 
a customer sales order, which is approved for credit. (See the first and second 
key controls in Figure 12-3 on page 397.) Then the customer order is attached to 
the sales order as authorization for further processing. The auditor can test the 
control by examining the documents to make sure that they are complete and 
properly matched and that required signatures or initials are present. 

3. Observe control-related activities. Some controls do not leave an evidence trail, 
which means that it is not possible at a later date to examine evidence that the 
control was executed. For example, separation of duties relies on specific persons 
performing specific tasks, and there is typically no documentation of the separate 
performance. (See the third key control in Figure 12-3.) For controls that leave no 
documentary evidence, the auditor generally observes them being applied at vari- 
ous points during the year. 

4. Reperform client procedures. There are also control-related activities for which 
there are related documents and records, but their content is insufficient for the 
auditor’s purpose of assessing whether controls are operating effectively. For 
example, assume that prices on sales invoices are obtained from the master price 
list, but no indication of the control is documented on the sales invoices. (See the 
seventh key control in Figure 12-3.) In these cases, it is common for the auditor to 
reperform the control activity to see whether the proper results were obtained. 
For this example, the auditor can reperform the procedure by tracing the sales 
prices to the authorized price list in effect at the date of the transaction. If no mis- 
statements are found, the auditor can conclude that the procedure is operating as 
intended. 


The extent to which tests of controls are applied depends on the preliminary assessed 
control risk. If the auditor wants a lower assessed control risk, more extensive tests 
of controls are applied, both in terms of the number of controls tested and the extent 
of the tests for each control. For example, if the auditor wants to use a low assessed 
control risk, a larger sample size for inspection, observation, and reperformance pro- 
cedures should be applied. 

The extent of testing also depends on the frequency of the operation of the con- 
trols, and whether it is manual or automated. For example, some financial reporting 
controls only operate at the end of the fiscal year, or quarterly, as opposed to operat- 
ing on a daily basis. The auditor will test year-end controls, but will also test a sample 
of controls that operate quarterly or monthly. For manual controls, the auditor will 
select a sample of transactions and test whether the control is operating effectively. 
As an example, if the client manually compares a purchase order, receiving report, 
and vendor’s invoice before approving payment to a vendor, an auditor may select a 
sample of recorded purchases throughout the year and verify the documents were 
properly matched and approved for payment. Because manual controls are performed 
by people, they are always subject to random error or manipulation. For automated 
controls, as long as the computer is programmed accurately and that program 
remains unchanged, automated controls will consistently perform as programmed 
until the software application is changed. Using the purchases example, the match- 
ing of the purchase order, receiving report, and vendor’s invoice can be automated 
and the computer can generate a list of exceptions, rather than an employee manually 
comparing. As a result, when there are effective general controls and an automated 
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application control, the auditor may be able to justify testing only one transaction and 
may not need to select a sample of transactions to verify. Therefore, the extent of test- 
ing will vary. The auditor will use one of several approaches to determine whether the 
design and implementation of automated controls are appropriate and that they are 
operating effectively. These approaches are discussed further later in the chapter when 
we discuss controls in more complex IT environments. 


Reliance on Evidence from the Prior Year’s Audit When auditors plan to use 
evidence about the operating effectiveness of internal control obtained in prior audits, 
auditing standards require tests of the controls’ effectiveness at least every third year. 
If auditors determine that a key control has been changed since it was last tested, they 
should test it in the current year. This applies to both manual and automated con- 
trols. When there are a number of controls tested in prior audits that have not been 
changed, auditing standards require auditors to test some of those controls each year 
to ensure there is a rotation of controls testing throughout the three-year period. 


Testing of Controls Related to Significant Risks As described in Chapter 9, signifi- 
cant risks are those risks that the auditor believes require special audit consideration. 
When the auditor’s risk assessment procedures identify significant risks, the auditor is 
required to test the operating effectiveness of controls that mitigate these risks in the 
current year audit, if the auditor plans to rely on those controls to support a control 
risk assessment below 100%. The greater the risk, the more audit evidence the auditor 
should obtain that controls are operating effectively. 


Testing Less Than the Entire Audit Period Recall that management's report on in- 
ternal control deals with the effectiveness of internal controls as of the end of the fiscal 
year. PCAOB auditing standards require the auditor to perform tests of controls that are 
adequate to determine whether controls are operating effectively at year-end. The timing 
of the auditor’s tests of controls will therefore depend on the nature of the controls and 
when the company uses them. For controls that are applied throughout the accounting 
period, it is usually practical to test them at an interim date. The auditor will then deter- 
mine later if changes in controls occurred in the period not tested and decide the impli- 
cation of any change. Controls dealing with financial statement preparation occur only 
quarterly or at year-end and must therefore also be tested at quarter-end and year-end. 


There is a significant overlap between tests of controls and procedures to obtain an 
understanding. Both include inquiry, inspection, and observation. There are two pri- 
mary differences in the application of these common procedures. 


1. In obtaining an understanding of internal control, the procedures to obtain an 
understanding are applied to all controls identified during that phase. Tests of 
controls, on the other hand, are applied only when the assessed control risk has 
not been satisfied by the procedures to obtain an understanding. 

2. Procedures to obtain an understanding are performed only on one or a few trans- 
actions or, in the case of observations, at a single point in time. Tests of controls 
are performed on larger samples of transactions (perhaps 20 to 100), and often, 
observations are made at more than one point in time. 


For key controls, tests of controls other than reperformance are essentially an 
extension of procedures to obtain an understanding. Therefore, assuming the audi- 
tors plan to obtain a low assessed control risk from the beginning of the audit, they 
will likely combine both types of procedures and perform them simultaneously. 
Table 12-1 (p. 404) illustrates this concept in more detail. One option is to perform 
the audit procedures separately, as shown in Table 12-1, where minimum proce- 
dures to obtain an understanding of design and operation are performed, followed 
by additional tests of controls. An alternative is to combine both columns and do 
them simultaneously. The same amount of evidence is accumulated in the second 
approach, but more efficiently. 
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Relationship of Assessed Control Risk and 
Extent of Procedures 


TABLE 12-1 


Assessed Control Risk 


High Level: Procedures to Lower Level: 
Type of Procedure Obtain an Understanding Tests of Controls* 
Inquiry Yes—extensive Yes—some 
Inspection Yes—with transaction walkthrough Yes—using sampling 


Observation Yes—with transaction walkthrough Yes—at multiple times 


Reperformance No Yes—using sampling or audit software 


*Note: In an integrated audit for a public company, the auditor will likely combine procedures to obtain an understanding 
with tests of controls and perform them simultaneously. 


The determination of the appropriate sample size for tests of controls is an impor- 
tant audit decision. That topic is covered in Chapter 15. 


Understanding Internal Controls in Outsourced Systems When clients use a ser- 
vice center for processing transactions, such as a payroll service provider or a broker 
for processing investment transactions, the auditor faces a difficulty when obtaining 
an understanding of the client’s internal controls for these transaction areas. Many of 
the controls reside at the service center, and the auditor cannot assume that the con- 
trols are adequate simply because it is an independent enterprise. Auditing standards 
require the auditor to consider the need to obtain an understanding and test the ser- 
vice center’s controls if the service center application involves processing significant 
financial data. For example, many of the controls for payroll transaction-related audit 
objectives reside within the software program maintained and supported by the pay- 
roll services company, not the audit client. 

When obtaining an understanding of and testing the service center’s controls, 
the auditor should use the same criteria that was used in evaluating a client’s internal 
controls. The depth of the auditor’s understanding depends on the complexity of the 
system and the extent to which the control is relied upon to reduce control risk. The 
depth of understanding also depends on the extent to which key controls over trans- 
action-related audit objectives reside at the service center for audits of internal control 
for public companies. If the auditor concludes that active involvement at the service 
center is the only way to conduct the audit, it may be necessary to obtain an under- 
standing of internal controls at the service center and test controls using test data and 
other tests of controls. 


Reliance on Service Center Auditors In recent years, it has become increasingly 
common for service centers to engage a CPA firm to obtain an understanding and 
test internal controls of the service center (often referred to as “service organization 
controls” or “SOC”) and issue a SOC report for use by all customers and their indepen- 
dent auditors. The purpose of this independent assessment is to provide service center 
customers reasonable assurance about the adequacy of the service center’s general 
and application controls and to eliminate the need for redundant audits by customers’ 
auditors. If the service center has many customers and each requires an understanding 
of the service center’s internal control by its own independent auditor, the inconve- 
nience and cost to the service center can be substantial. 

Attestation standards provide guidance to auditors who issue reports on the inter- 
nal control of service organizations (service auditors), while auditing standards provide 
guidance to auditors of user organizations (user auditors) that rely on the service audi- 
tor’s report. Service auditors may issue two types of reports: 


¢ Report on management’s description of a service organization’s system and the 
suitability of the design of controls (referred to as a Type 1 report) 


¢ Report on management’s description of a service organization’s system and the 
suitability of the design and operating effectiveness of controls (referred to as a 
Type 2 report) 


A Type 1 report helps auditors obtain an understanding of internal control to plan 
the audit. However, auditors also require evidence about the operating effectiveness of 
controls to assess control risk, especially when auditing internal control over financial 
reporting for public companies. This evidence can: 


* Be based on the service auditor’s Type 2 report, which includes tests of the oper- 
ating effectiveness of controls 

* Come from tests of the user organization’s controls over the activities of the 
service organization 

* Be created when the user auditor does appropriate tests at the service organization 


Obtain and document 
understanding of 
internal control 

design and operation 


If the user auditor decides to rely on the service auditor’s report, appropriate 
inquiries should be made about the service auditor’s reputation. Auditing standards 
state that the user auditor should not make reference to the report of the service audi- 
tor in the opinion on the user organization’s financial statements. 


Assess control risk 


CONCEPT CHECK 


I. Describe the four steps performed by the auditor when obtaining an understanding of 
internal control and assessing control risk. 


Design, perform, 
and evaluate 
tests of controls 


2. What is the purpose of a control risk matrix? 


Decide planned 
detection risk and 
substantive tests 


3. What four types of procedures are used by auditors to test whether internal controls 
are operating effectively? 


DECIDE PLANNED DETECTION RISK AND 
DESIGN SUBSTANTIVE TESTS 


We've focused on how auditors assess control risk for each related audit objective OBJECTIVE 12-40 


and support control risk assessments with tests of controls. The completion of these 
activities is sufficient for the audit of internal control over financial reporting, even 
though the report will not be finalized until the auditor completes the audit of finan- 
cial statements. 

The auditor uses the control risk assessment and results of tests of controls 
to determine planned detection risk and related substantive tests for the audit of 


Understand how control risk 
impacts detection risk and the 
design of substantive tests. 


PCAOB 
IDENTIFIES 
DEFICIENCIES 

IN AUDITS 

OF INTERNAL 
CONTROL OVER 
FINANCIAL 


REPORTING 
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The PCAOB frequently issues practice alerts to high- 
light new or noteworthy circumstances or to summa- 
rize findings from their inspection process. In October 
2013, the PCAOB issued Staff Audit Practice Alert 
No. II, titled “Considerations for Audits of Internal 
Control over Financial Reporting.” This practice alert 
discusses common themes identified during inspec- 
tions of integrated audit engagements. The most 
common audit deficiencies related to audits of internal 
controls include a failure in identification and testing 
of controls intended to address the risk of material 
misstatement; improperly assessing management 
review controls; a failure to properly update interim 
testing of controls; insufficient testing of controls over 
system-generated data; a failure to perform the ap- 
propriate tests when relying on the work of others; 
and a failure to properly assess the severity of identi- 
fied control deficiencies. In many cases, the PCAOB 


concluded that insufficient evidence was obtained to 
form an opinion on the effectiveness of internal con- 
trols over financial reporting. The PCAOB also points 
out that a failure to properly assess control risk will 
often result in a failure to collect sufficient appropriate 
evidence for the financial statement audit. 

Audit practice alerts typically result in a national- 
level response by the audit firms. Audit firms, par- 
ticularly the largest firms, will increase their internal 
training related to the matters identified by the 
PCAOB, increase their level of testing on all inte- 
grated audits, and increase documentation in the au- 
dit workpapers to demonstrate to the PCAOB that 
they are striving to improve audit quality. 


Source: PCAOB Audit Practice Alert No. ||, “Considerations 
for Audits of Internal Control over Financial Reporting,” 
October 24, 2013 (pcaobus.org). 


financial statements. The auditor does this by linking the control risk assessments to 
the balance-related audit objectives for the accounts affected by the major transaction 
types and to the four presentation and disclosure audit objectives. The appropriate 
level of detection risk for each balance-related audit objective is then decided using the 
audit risk model. The relationship of transaction-related audit objectives to balance- 
related audit objectives and the selection and design of audit procedures for substan- 
tive tests of financial statement balances are discussed and illustrated in Chapter 13. 


AUDITOR REPORTING ON INTERNAL CONTROL 
‘OBJECTIVE 12-500 As part of understanding internal control and assessing control risk, the auditor is 


required to communicate certain matters to those charged with governance. This 
Understand requirements for ‘et . A wick dati a 1 | f : 
audicon reporting onaneemal information and other recommendations about controls are also often communi- 
control. cated to management. 


Communications to Those Charged with Governance The auditor must communi- 
cate significant deficiencies and material weaknesses in writing to those charged with 


Communications to governance as soon as the auditor becomes aware of their existence. The communica- 
Those Charged with tion is usually addressed to the audit committee and to management. Timely commu- 
Governance and nications may provide management an opportunity to address control deficiencies 
Management Letters before management’s report on internal control must be issued. In some instances, 


deficiencies can be corrected sufficiently early such that both management and the 
auditor can conclude that controls are operating effectively as of the balance sheet 
date. Regardless, these communications must be made no later than 60 days following 
the audit report release. An example of a report used in the audit of a nonpublic com- 
pany is provided in Figure 12-6. 

Management Letters In addition to these matters, auditors often identify less sig- 
nificant internal control-related issues, as well as opportunities for the client to make 
operational improvements. These should also be communicated to the client. The 
form of communication is often a separate letter for that purpose, called a manage- 
ment letter. Although management letters are not required by auditing standards, 
auditors generally prepare them as a value-added service of the audit. 


Based on the auditor’s assessment and testing of internal control, the auditor is 
required to prepare an audit report on internal control over financial reporting for 
accelerated filer public companies subject to Section 404(b) reporting requirements. 
As described in Chapter 3, the auditor may issue separate or combined audit reports 
on the financial statements and on internal control over financial reporting. An 
example of a separate report is illustrated in Figure 3-4 on page 53. 

The scope of the auditor’s report on internal control is limited to obtaining rea- 
sonable assurance that material weaknesses in internal control are identified. Thus, 
the audit is not designed to detect deficiencies in internal control that individually, 
or in the aggregate, are less severe than a material weakness. The distinction between 
deficiencies, significant deficiencies, and material weaknesses was discussed earlier. 


Section 404 Reporting 
Requirements 


Unqualified Opinion The auditor will issue an unqualified opinion on internal con- 


Deseooninlen: trol over financial reporting when two conditions exist: 


¢ There are no identified material weaknesses as of the end of the fiscal year. 
¢ There have been no restrictions on the scope of the auditor’s work. 
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Adverse Opinion When one or more material weaknesses exist, the auditor must 
express an adverse opinion on the effectiveness of internal control. The most com- 
mon cause of an adverse opinion in the auditor’s report on internal control is when 
management identified a material weakness in its report. 
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FIGURE 12-6 Letter Regarding Significant Deficiencies in Internal Control 


JOHNSON AND SEYGROVES 
Certified Public Accountants 
2016 Village Boulevard 
Troy, Michigan 48801 


February 12, 2017 


Audit Committee 

Airtight Machine Company 
1729 Athens Street 

Troy, MI 48801 


In planning and performing our audit of the financial statements of Airtight Machine Company as of and 
for the year ended December 31, 2016, in accordance with auditing standards generally accepted in the 
United States of America, we considered Airtight Machine Company’s internal control over financial 
reporting (internal control) as a basis for designing audit procedures that are appropriate in the circum- 
stances for the purpose of expressing our opinion on the financial statements, but not for the purpose of 
expressing an opinion on the effectiveness of Airtight Machine Company’s internal control. Accordingly, 
we do not express an opinion on the effectiveness of the company’s internal control. 


Our consideration of internal control was for the limited purpose described in the preceding paragraph 
and was not designed to identify all deficiencies in internal control that might be significant deficiencies 
or material weaknesses. However, as discussed below, we identified certain deficiencies in internal 
control that we consider to be significant deficiencies. 


A deficiency in internal control exists when the design or operation of a control does not allow manage- 
ment or employees, in the normal course of performing their assigned functions, to prevent, or detect 
and correct, misstatements on a timely basis. A significant deficiency is a control deficiency, or combina- 
tion of control deficiencies, that adversely affects the entity’s ability to initiate, authorize, record, 
process, or report financial data reliably in accordance with generally accepted accounting principles that 
is less severe than a material weakness, yet important enough to merit attention by those charged with 
governance. We consider the following deficiency to be a significant deficiency in internal control: 


There is a lack of independent verification of the key entry of the customer’s name, product number, 
quantity shipped, prices used, and the related mathematical extensions on sales invoices and credit 
memos. As a consequence, errors in these activities could occur and remain uncorrected, adversely 
affecting both recorded net sales and accounts receivable. This deficiency is significant because of the 
large size of the average sale at Airtight Machine Company. 


This communication is intended solely for the information and use of management and the board of 
directors and is not intended to be and should not be used by anyone other than these specified parties. 


Very truly yours, 


Johnson and Seygroves, CPAs 


Johnson and Seygnoves 


Qualified or Disclaimer of Opinion A scope limitation requires the auditor to ex- 
press a qualified opinion or a disclaimer of opinion on internal control over financial 
reporting. This type of opinion is issued when the auditor is unable to determine if 
there are material weaknesses, due to a restriction on the scope of the audit of internal 
control over financial reporting or other circumstances where the auditor is unable to 
obtain sufficient appropriate evidence. 

The auditor’s opinion on the effectiveness of internal controls is as of the end of 
the fiscal year. The auditor is attesting to the effectiveness of internal controls as of 
that date rather than attesting to the effectiveness of controls throughout the fiscal 
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year. If a material weakness is identified prior to the end of the fiscal year, the auditor 
can still issue an unqualified opinion if the material weakness has been remediated 
and the revised control has been tested to ensure it is designed, implemented, and 
operating effectively. 

Because the audit of the financial statements and the audit of internal control 
over financial reporting are integrated, the auditor must consider the results of audit 
procedures performed to issue the audit report on the financial statements when 
issuing the audit report on internal control. For example, assume the auditor identi- 
fies a material misstatement in the financial statements that was not initially identi- 
fied by the company’s internal controls. The following four responses to this finding 
are likely: 


1. Because there is a material error in the financial statements, the auditor should 
consider whether the misstatement indicates the existence of a material weak- 
ness. Determining if the misstatement is in fact a material weakness or a sig- 
nificant deficiency involves judgment and depends on the nature and size of the 
misstatement. 

2. The auditor can issue an unqualified opinion on the financial statements if the 
client adjusts the statements to correct the misstatement prior to issuance. 

3. Management is likely to change its report on internal control to assert that the 
controls are not operating effectively. 

4. The auditor must issue an adverse opinion on internal control over financial 
reporting if the deficiency is considered a material weakness. 


Figure 12-7 illustrates the definition of material weakness and opinion para- 
graphs from an auditor’s separate report on internal control when the auditor 
expresses an adverse opinion on the effectiveness of internal control over finan- 
cial reporting because of the existence of a material weakness. If the material 
weakness has not been included in management’s assessment, the report should 
note that a material weakness has been identified but not included in manage- 
ment’s assessment. 


Partial Section 404 Auditor Report on Internal Control when 
Material Weaknesses Exist (bold added)* 


FIGURE 12-7 


REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM 


[Definition of material weakness paragraph] 


A material weakness is a deficiency, or combination of deficiencies, in internal control over financial 
reporting, such that there is a reasonable possibility that a material misstatement of the company’s 
interim or annual financial statements will not be prevented or detected on a timely basis. 


[Opinion paragraph] 


In our opinion, because of the effect of the material weakness described above on the achieve- 
ment of the objectives of the control criteria, Kincannon Company has not maintained 
effective internal control over financial reporting as of December 31, 2016, based on criteria established 
in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the 
Treadway Commission (2013 Framework). 


Kellum & Kellum, LLP 
Brentwood, Tennessee 


February 2, 2017 


*The introductory, scope, definition of internal control, inherent limitations of internal control, and reference to the opinion 
on the financial statements paragraphs use standard wording and are not included. The explanatory paragraph describing the 
nature of the weakness is also not included. 


EVALUATING, REPORTING, AND TESTING INTERNAL 
CONTROL FOR NONPUBLIC AND SMALLER 
PUBLIC COMPANIES 


Most of the concepts in this chapter apply equally to audits of large public companies OBJECTIVE 12-60 


(accelerated filers), smaller public companies, and nonpublic companies. The follow- ae 
ing identifies and discusses the most important differences in evaluating, reporting, — gvatuating, reporting, and 
and testing internal control for nonpublic companies and smaller public companies testing internal control for 


that are not subject to Section 404(b) audits of internal control. nonpublic and smaller public 


: : ; : : ; companies. 
1. Reporting requirements. In audits of nonpublic companies and non-accelerated fil- < 


ers, there is no requirement for an audit of internal control over financial report- 
ing. The auditor, therefore, focuses on internal control only to the extent needed 
to assess the risks of material misstatements and do a quality audit of financial 
statements. The AICPA Auditing Standards Board recently moved the guidance 
from the attestation standards to auditing standards that applies when nonpublic 
entities engage the auditor to conduct an examination of the design and operat- 
ing effectiveness of internal controls over financial reporting that is integrated 
with the audit of the financial statements. The approach for an integrated audit 
of a nonpublic company under the attestation standards is consistent with the 
approach to an integrated audit of a public company under PCAOB auditing 
standards. 

2. Extent of required internal controls. A company’s size has a significant effect on 
the nature of internal control and the specific controls that are implemented. 
Obviously, it is more difficult to establish adequate separation of duties in a small 
company. It is also unreasonable to expect a small firm to have internal audi- 
tors. However, if the various components of internal control are examined, it 
becomes apparent that most are applicable to both large and small companies. 
Even though it may not be common to formalize policies in manuals, it is cer- 
tainly possible for a small company to have (1) competent, trustworthy personnel 
with clear lines of authority; (2) proper procedures for authorization, execution, 
and recording of transactions; (3) adequate documents, records, and reports; 
(4) physical controls over assets and records; and, (5) to a limited degree, inde- 
pendent checks on performance. 

3. Extent of understanding needed. Auditing standards require that the auditor obtain 
a sufficient understanding of internal control to assess the risk of material mis- 
statement at the overall financial statement level and at the relevant assertion 
level. These risks are assessed in order to design effective audit procedures. In 
practice, the procedures to gain an understanding of internal control vary consid- 
erably from client to client. For smaller companies, if the auditor determines that 
controls are not designed or implemented properly, or not operating effectively, 
the auditor assesses control risk at maximum and designs and performs detailed 
substantive procedures. For larger nonpublic clients, the understanding of con- 
trols can be the same as that for public companies. 

4. Assessing control risk. The most important difference in a nonpublic company 
in assessing control risk is the assessment of control risk at maximum for any 
or all control-related objectives when internal controls for the objective or 
objectives are nonexistent or ineffective. Because of the expectation that public 
companies should have effective internal controls for all significant transac- 
tions and accounts, there is an initial presumption that control risk is low in 
the audit of public company financial statements. Thus, it is unlikely that a 
public company auditor will make a preliminary assessment of control risk at 
maximum. 
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Differences in Scope of Controls Tested in an Audit of 


FIGURE [2-6 Internal Control and an Audit of Financial Statements 


Internal Controls Over Financial Reporting 


Internal Controls Used to Assess Control 
Risk Below Maximum 


Controls that must be tested in an Controls that must be tested in an 
audit of internal controls audit of financial statements 


5. Extent of tests of controls needed. The auditor will not perform tests of controls 
when the auditor assesses control risk at maximum, either because of inad- 
equate controls, or because the audit can be completed more efficiently by 
not relying on and testing controls. When control risk is assessed below the 
maximum, the auditor designs and performs a combination of tests of controls 
and substantive procedures to obtain reasonable assurance that the financial 
statements are fairly stated. The difference in the extent of testing is displayed 
graphically in Figure 12-8. 


CONCEPT CHECK 


|. Why are the financial statement audit findings relevant to the auditor’s opinion on the 
effectiveness of internal controls over financial reporting? 


2. Explain the difference in the requirements for reporting on the effectiveness of internal 
controls over financial reporting for integrated audits versus financial statement—only 
audits. 


IMPACT OF IT ENVIRONMENT ON CONTROL RISK 
ASSESSMENT AND TESTING 


‘OBJECTIVE 12-70 The impact of general controls and application controls on audits is likely to vary 


depending on the level of complexity in the IT environment. Even in a less complex 
Describe how the complexity IT _ di ; ‘ll ible f bain Fl di f 
etched crwinontcntinnacts environment, the auditor is still responsible for obtaining an understanding o 
contralirclcaceccementand general and application computer controls because such knowledge is useful in iden- 
testing. tifying risks that may affect the financial statements. However, the extent of testing 
will depend on the assessment of control risk, as discussed earlier. In this section, we 
discuss auditing in a more complex IT environment and the opportunities and chal- 
lenges this provides for auditors. 


As organizations expand their use of IT, internal controls are often embedded in 
applications that are available only electronically. When traditional source docu- 
ments such as invoices, purchase orders, billing records, and accounting records 
such as sales journals, inventory listings, and accounts receivable subsidiary 
records exist only electronically, auditors must change their approach to auditing. 
This approach is often called auditing through the computer. Auditors use three 


Auditing in More 
Complex IT 
Environments 
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approaches to test the effectiveness of automated controls when auditing through 
the computer: test data approach, parallel simulation, and embedded audit module 
approach. 


Test Data Approach In the test data approach, auditors process their own test 
data using the client’s computer system and application program to determine 
whether the automated controls correctly process the test data. Auditors design 
the test data to include transactions that the client’s system should either accept 
or reject. After the test data are processed on the client’s system, auditors compare 
the actual output to the expected output to assess the effectiveness of the applica- 
tion program’s automated controls. Figure 12-9 illustrates the use of the test data 
approach. 
When using the test data approach, auditors have three main considerations: 


1. Test data should include all relevant conditions that the auditor wants tested. Auditors 
should design test data to test all key computer-based controls and include 
realistic data that are likely to be a part of the client’s normal processing, in- 
cluding both valid and invalid transactions. For example, assume the client’s 
payroll application contains a limit check that disallows a payroll transaction 
that exceeds 80 hours per week. To test this control, the auditor can prepare 
payroll transactions with 79, 80, and 81 hours for each sampled week and 
process them through the client’s system in a manner shown in Figure 12-9. If 
the limit check control is operating effectively, the client’s system should reject 
the transaction for 81 hours, and the client’s error listing should report the 81- 
hour transaction error. 


FIGURE 12-9 | Test Data Approach 
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2. Application programs tested by auditors’ test data must be the same as those the client 
used throughout the year. One approach is to run the test data on a surprise basis, 
possibly at random times throughout the year, even though doing so is costly and 
time consuming. Another method is to rely on the client’s general controls in the 
librarian and systems development functions to ensure that the program tested is 
the one used in normal processing. 

3. Test data must be eliminated from the client’s records. If auditors process test data 
while the client is processing its own transactions, auditors must eliminate the 
test data in the client’s master files after the tests are completed to prevent master 
files and transaction files from being permanently contaminated by the auditor’s 
testing. Auditors can do this by developing and processing data that reverses the 
effect of the test data. 


Because of the complexities of many clients’ application software programs, audi- 
tors who use the test data approach often obtain assistance from a computer audit 
specialist. Many larger CPA firms have staff dedicated to assisting in testing client 
automated application controls. 


Parallel Simulation Auditors often use auditor-controlled software to do the same 
operations that the client’s software does, using the same data files. The purpose is 
to determine the effectiveness of automated controls and to obtain evidence about 
electronic account balances. This testing approach is called parallel simulation 
testing. Figure 12-10 shows a typical parallel simulation. Whether testing controls 
or ending balances, the auditor compares the output from the auditor’s software to 
output from the client’s system to test the effectiveness of the client’s software and 


FIGURE 12-10 Parallel Simulation 
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7:8 ply Common Uses of Generalized Audit Software 


Uses Description Examples 


Verify extensions and footings Verify the accuracy of the client’s computations by Foot accounts receivable trial balance 
calculating information independently 


Examine records for quality, completeness, Scan all records using specified criteria Review payroll files for terminated employees 
consistency, and correctness 


Compare data on separate files Determine that information in two or more data Compare changes in accounts receivable balances 
files agrees between two dates using sales and cash receipts 
in transaction files 


Summarize or resequence data and do Change or aggregate data Resequence inventory items by location to facilitate 
analyses physical observation 
Select audit samples Select samples from machine-readable data Randomly select accounts receivable for 


confirmation 


Print confirmation requests Print data for sample items selected for confirma- Print customer name, address, and account balance 
tion testing information from master files 
Compare data obtained through other audit Compare machine-readable data with audit evi- Compare confirmation responses with accounts 
procedures with company records dence gathered manually, which is converted to receivable master files 


machine-readable form 


to determine if the client’s balance is correct. A variety of software is available to 
assist auditors. 

Auditors commonly do parallel simulation testing using generalized audit 
software (GAS), which is programs designed specifically for auditing purposes. 
Commercially available audit software, such as ACL and IDEA, can be easily oper- 
ated on auditors’ desktop or laptop computers. Auditors obtain copies of machine- 
readable client databases or master files and use the generalized audit software to 
do a variety of tests of the client’s electronic data. Instead of GAS, some auditors use 
spreadsheet software to do simple parallel simulation tests. Others develop their own 
customized audit software. 

Generalized audit software provides three advantages: it is relatively easy to train 
audit staff in its use, even if they have had little audit-related IT training; the software 
can be applied to a wide variety of clients with minimal customization; and it has the 
ability to do audit tests much faster and in more detail than using traditional manual 
procedures. Table 12-2 includes some of the common uses of generalized audit soft- 
ware. Two are examined in detail: 


1. Generalized audit software is used to test automated controls. An auditor obtains 
copies of a client’s customer credit limit master file and a customer order file, 
and then instructs the auditor’s computer to list transactions that exceed the 
customer’s authorized credit limit. The auditor then compares the audit output 
to the client’s list of customer orders that were rejected for exceeding authorized 
credit limits. 

2. Generalized audit software is used to verify the client’s account balances. An auditor can 
use the software to sum the master file of customer accounts receivable to deter- 
mine whether the total agrees with the general ledger balance. 


Embedded Audit Module Approach When using the embedded audit module 
approach, auditors insert an audit module into the client’s application system to 
identify specific types of transactions. For example, auditors might use an embedded 
module to identify all purchases exceeding $25,000 for follow-up with more detailed 
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examination for the occurrence and accuracy transaction-related audit objectives. 
In some cases, auditors later copy the identified transactions to a separate data file 
and then process those transactions using parallel simulation to duplicate the func- 
tion done by the client’s system. The auditor then compares the client’s output with 
the auditor’s output. Discrepancies are printed on an exception report for auditor 
follow-up. 

The embedded audit module approach allows auditors to continuously audit 
transactions by identifying actual transactions processed by the client, as compared 
to test data and parallel simulation approaches, which only allow intermittent testing. 
Internal audit may also find this technique useful. 

Although auditors may use one or any combination of testing approaches, they 
typically use: 

* Test data to do tests of controls and substantive tests of transactions 

¢ Parallel simulation for substantive testing, such as recalculating transaction 

amounts and footing master file subsidiary records of account balances 

¢ Embedded audit modules to identify unusual transactions for substantive 

testing 


SUMMARY 


This chapter focused on the auditor’s responsibility for understanding, evaluating, 
and testing internal control, including integrated audits of financial statements and 
internal control over financial reporting under Section 404 of the Sarbanes—Oxley Act 
and PCAOB requirements. To rely on a client’s internal controls to report on internal 
control over financial reporting and to reduce planned audit evidence for audits of 
financial statements, the auditor must first obtain an understanding of each of the five 
components of internal control. Knowledge about the design of the client’s control 
environment, risk assessment, control activities, information and communication, 
and monitoring activities and information about whether internal control compo- 
nents have been implemented assist the auditor in assessing control risk for each audit 
objective. 

The chapter also included a discussion of the differences in the audit of nonpublic and 
smaller public companies because they are not subject to Section 404(b) and PCAOB re- 
quirements to report on internal control over financial reporting. For nonpublic compa- 
nies, auditors have the option of assessing a higher level of control risk, depending on the 
quality of the client’s internal controls and cost—benefit considerations. 

The chapter ended with a discussion of the impact of a more complex information 
technology environment on control risk assessment and testing. Knowledge about gen- 
eral controls provides a basis for the auditor to rely on automated application controls and 
may reduce the extent of tests of key automated controls in audits of financial statements 
and internal controls. Some of the auditor’s tests of controls can be done by the computer, 
often as a way to achieve more effective and efficient audits. 

The process followed by auditors in assessing control risk for integrated audits of fi- 
nancial statements and internal control over financial reporting and audits of the financial 
statements only is summarized in Figure 12-11. 


ESSENTIAL TERMS 
Assessment of control risk—a measure Auditing through the computer— 
of the auditor’s expectation that internal auditing by testing automated internal 
controls will neither prevent material controls and account balances electroni- 
misstatements from occurring nor detect cally, generally because effective general 
and correct them if they have occurred controls exist 
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FIGURE 12-11 


Financial Statement Audit 


Sufficient to audit 
financial statements 


Varies depending on extent 
and effectiveness of controls 
and the auditor’s planned 
reliance on controls 


Varies depending 
on assessed level 
of control risk 


Revise for tests of 
controls results 


Likely to be more 
reliance on substantive 
tests, depending on 
assessed control risk 
option selected 


Must communicate 

in writing to those charged 
with governance describing 
significant deficiencies or 
material weaknesses. 


Compensating control—a control else- 
where in the system that offsets the absence 
of a key control 


Control deficiency—a deficiency in the 
design or operation of controls that does 
not permit company personnel to prevent 
or detect and correct misstatements on a 
timely basis 

Control risk matrix—a methodology 
used to help the auditor assess control 
risk by matching key internal controls and 
internal control deficiencies with transac- 
tion-related audit objectives 
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Obtain an understanding 
of internal control 


design and operation 


Decide control risk at 
the objective level for 
each transaction type 


Three alternatives 


Intermediate 


Plan and perform tests 


of controls and evaluate 
results 


Revise assessed control 
risk if appropriate 


Plan detection risk and 
perform substantive 
tests considering control 
risk and other audit 

risk model factors 


Issue internal control 
report or letter 


Summary of Understanding Internal Control and Assessing Control Risk 


Integrated Audit of 
Financial Statements 
and Internal Control 
over Financial Reporting 


Sufficient to audit 
internal control over 
financial reporting 


Decide low for all objectives 
unless there are significant 
deficiencies or material 
weaknesses 


Extensive tests for all 
objectives 


Revise for tests of controls 
results 


Likely to be less reliance on 
substantive tests due to 
extensive tests of controls 


Must issue report on 

internal control over financial 
reporting and issue a written 
communication to audit 
committee describing significant 
deficiencies or material 
weaknesses 


by IT whereby the auditor embeds a mod- 
ule in the client’s application software to 
identify transactions with characteristics 
that are of interest to the auditor; the audi- 
tor is then able to analyze these transac- 
tions on a real-time, continuous basis as 
client transactions are processed 


Flowchart—a diagrammatic representation 
of the client’s documents and records and 
the sequence in which they are processed 


Generalized audit software (GAS)— 
computer programs used by auditors that 
provide data retrieval, data manipulation, 
and reporting capabilities specifically ori- 
ented to the needs of auditors 


Internal control questionnaire—a 
series of questions about the controls in 
each audit area used as a means of indi- 
cating to the auditor aspects of internal 
control that may be inadequate 


Key controls—controls that are expected 
to have the greatest effect on meeting audit 
objectives 


Management letter—an optional letter 
written by the auditor to a client’s man- 
agement containing the auditor’s recom- 
mendations for improving any aspect of 
the client’s business 


Material weakness—a significant defi- 
ciency in internal control that, by itself 
or in combination with other significant 
deficiencies, results in a reasonable pos- 
sibility that a material misstatement of the 
financial statements will not be prevented 
or detected 


Narrative—a written description of a 
client’s internal controls, including the 
origin, processing, and disposition of 
documents and records, and the relevant 
control procedures 


Parallel simulation testing—an audit 
testing approach that involves the auditor’s 


use of audit software, either purchased or 
programmed by the auditor, to replicate 
some part of a client’s application system 


Procedures to obtain an understand- 
ing—procedures used by the auditor to 
gather evidence about the design and 
implementation of specific controls 


Significant deficiency—a control 
deficiency, or a combination of con- 
trol deficiencies, that is less severe 
than a material weakness, but impor- 
tant enough to merit attention by those 
responsible for oversight of the compa- 
ny’s financial reporting 


Test data approach—a method of audit- 
ing an IT system that uses the auditor's 
test data to determine whether the client’s 
computer program correctly processes 
valid and invalid transactions 


Tests of controls—audit procedures to 
test the operating effectiveness of con- 
trols in support of reduced assessed con- 
trol risk 


Walkthrough—the tracing of selected 
transactions through the accounting 
system to determine that controls are in 
place 


REVIEW QUESTIONS 


12-1 (OBJECTIVES 12-1, 12-6) What is the auditor’s responsibility for obtaining an under- 
standing of internal control? How does that responsibility differ for audits of public and 
nonpublic companies? 


12-2 (OBJECTIVE 12-1) Kelly Lee, a junior audit staff, is assisting you being her audit man- 
ager in planning for the audit engagement. In a conversation between Kelly and you, she 
commented on the following, “In order to fully understand the design and implementa- 
tion of controls, we have to use all the eight types of evidence. To document the under- 
standing of the design of internal control, I suggest using internal control questionnaire 
only as this method has no disadvantages and it is a quick way to complete the proce- 
dures which involves only a ‘yes’ or ‘no’ to responses.” Comment on Kelly’s statements. 


12-3 (OBJECTIVE 12-1) What is a walkthrough of internal control? What is its purpose? 


12-4 (OBJECTIVE 12-2) Describe how the nature of evidence used to evaluate the control 
environment differs from the nature of evidence used to evaluate control activities. 


12-5 (OBJECTIVES 12-2, 12-5) Distinguish a significant deficiency in internal control from a 
material weakness in internal control. How will the presence of one significant deficiency 
affect an auditor’s report on internal control under PCAOB standards? How will the pres- 
ence of one material weakness affect an auditor’s report on internal control under PCAOB 
standards? 


Agtarihc2 SéhitEsAGMDAT EARIQCHESSson Education, Limited, 2016. ProQuest Ebook Central, http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
1-01-31 19:40:41. 


12-6 (OBJECTIVES 12-3, 12-6) Distinguish the auditor’s responsibility for testing controls in 
an integrated audit of a public company from the responsibility to test controls in an audit 
of a nonpublic company. 


12-7 (OBJECTIVE 12-3) During the prior-year audits of McKimmon, Inc., a private company, 
the auditor did tests of controls for all relevant financial statement assertions. Some of the 
related controls are manual while others are automated. Describe the extent to which the 
auditor can rely on tests of controls performed in prior years. 


12-8 (OBJECTIVES 12-2, 12-3) The auditor’s risk assessment procedures identified several 
risks that the auditor deems to be significant risks. Several internal controls exist that are 
designed to mitigate the risks identified. Describe the auditor’s responsibilities for consid- 
ering those controls in the current audit. 


12-9 (OBJECTIVE 12-3) Discuss the purpose of the engagement carried out by service audi- 
tors. Further, state the two types of service organization control reports that may be 
issued by service auditors. 


12-10 (OBJECTIVE 12-4) How does the auditor use information obtained from the control 
risk assessment and testing of controls to plan audit procedures? 


12-11 (OBJECTIVE 12-4) Detail the steps how control risk assessment, results of test of 
controls and the audit risk model are used to determine the level of detection risk for 
each balance-related audit objective. 


12-12 (OBJECTIVE 12-5) What two conditions must be present for the auditor to issue an 
unqualified opinion on internal control over financial reporting? What type of condition 
will cause the auditor to issue a qualified or disclaimer of opinion on internal control over 
financial reporting? 


12-13 (OBJECTIVE 12-6) Explain how control risk assessment differs for an integrated audit 
versus a financial statement-only audit. 


12-14 (OBJECTIVE 12-7) Explain what is meant by auditing through the computer, and 
describe the challenges and benefits of this approach in an audit of a client that uses IT 
extensively to process accounting information. 


12-15 (OBJECTIVE 12-7) Explain what is meant by embedded audit module approach and state 
one common use of such approach in the sales and collection cycle. Explain one advantage 
of embedded audit module approach over test data and parallel simulation approaches. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


12-16 (OBJECTIVES 12-2, 12-5) The following questions deal with deficiencies in internal con- 
trol. Choose the best response. 


a. Which of the following is an example of an operation deficiency in internal control? 
(1) The company does not have a code of conduct for employees to consider. 

(2) The cashier has online ability to post write-offs to accounts receivable 
accounts. 

(3) Clerks who conduct monthly reconciliation of intercompany accounts do not 
understand the nature of misstatements that could occur in those accounts. 
Management does not have a process to identify and assess risks on a recurring 
basis. 


b. A material weakness in internal control represents a control deficiency that 

(1) more than remotely adversely affects a company’s ability to initiate, authorize, 
record, process, or report external financial statements reliably. 

(2) results in a reasonable possibility that internal control will not prevent or detect 
material financial statement misstatements. 

(3) exists because a necessary control is missing or not properly designed. 

(4) reduces the efficiency and effectiveness of the entity’s operations. 
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c. An auditor of a large public company identifies a material weakness in internal con- 
trol. The auditor 
(1) will be unable to issue an unqualified opinion on the financial statements. 
(2) must issue a qualified or disclaimer of opinion on internal control over financial 
reporting. 
(3) may still be able to issue an unqualified opinion on internal control over finan- 
cial reporting. 
(4) must issue an adverse opinion on internal control over financial reporting. 
12-17 (OBJECTIVES 12-2, 12-4) The following questions deal with assessing control risk in a 
financial statement audit. Choose the best response. 


a. The auditor’s tests of controls revealed that required approvals of cash disbursements 
were absent for a large number of sample transactions examined. Which of the fol- 
lowing is least likely to be the appropriate auditor response? 

(1) The auditor will communicate the deficiency to those charged with governance. 

2) The auditor will increase the planned detection risk. 

3) The auditor will not select more sample items to audit. 

4) The auditor will perform more extensive substantive tests surrounding cash 

disbursements. 


b. An auditor uses assessed control risk to 
(1) evaluate the effectiveness of the entity’s internal controls. 
(2) identify transactions and account balances where inherent risk is at the 
maximum. 
(3) indicate whether materiality thresholds for planning and evaluation purposes 
are sufficiently high. 
(4) determine the acceptable level of detection risk for financial statement assertions. 


c. On the basis of audit evidence gathered and evaluated, an auditor decides to increase 
assessed control risk from that originally planned. To achieve an audit risk level (AcAR) 
that is substantially the same as the planned audit risk level (AAR), the auditor will 
(1) increase inherent risk. 

(2) increase materiality levels. 
(3) decrease substantive testing. 
(4) decrease planned detection risk. 


12-18 (OBJECTIVE 12-7) The following questions concern auditing complex IT systems. 
Choose the best response. 


a. As general IT controls weaken, the auditor is most likely to 

(1) reduce testing of automated application controls done by the computer. 

(2) increase testing of general IT controls to conclude whether they are operating 
effectively. 

(3) expand testing of automated application controls used to reduce control risk to 
cover greater portions of the fiscal year under audit. 

(4) ignore obtaining knowledge about the design of general IT controls and whether 
they have been implemented. 


b. Before processing, the system validates the sequence of items to identify any breaks 
in sequence of input documents. This automated control is primarily designed to 
ensure the 
(1) accuracy of input. 

(2) authorization of data entry. 
(3) completeness of input. 
(4) restriction of duplicate entries. 


c. An auditor will use the test data approach to obtain certain assurances with respect to the 
(1) input data. 

(2) machine capacity. 

(3) procedures contained within the program. 

(4) degree of data entry accuracy. 
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DISCUSSION QUESTIONS AND PROBLEMS 


12-19 (OBJECTIVES 12-2, 12-3, 12-4) Each of the following internal controls has been taken 
from a standard internal control questionnaire used by a CPA firm for assessing control 
risk in the payroll and personnel cycle. 


1. Approval of department head or foreman on time records is required before prepar- 
ing payroll. 

2. All prenumbered time records are accounted for before beginning data entry for 
preparation of payroll. 

3. The computer calculates gross and net pay based on hours inputted and information 
in employee master files, and payroll accounting personnel double-check the math- 
ematical accuracy ona test basis. 

4. All voided and spoiled payroll checks are properly mutilated and retained. 

5. Human resource policies require an investigation of an employment application 
from new employees. Investigation includes checking the employee’s background, 
former employers, and references. 

6. The payroll accounting software application will not accept data input for an 
employee number not contained in the employee master file. 

7. Persons preparing the payroll do not perform other payroll duties (e.g., timekeep- 
ing or distribution of checks) nor do they have access to payroll data master files 
or cash. 

8. Written termination notices, with properly documented reasons for termination, 
and approval by an appropriate official are required. 

9, All checks and notices of electronic payments not distributed to employees are 
returned to the treasurer for safekeeping and follow-up. 

10. Online ability to add employees or change pay rates to the payroll master file is 
restricted via passwords to authorized human resource personnel. 


a. For each internal control, identify the type(s) of specific control activity (or activities) Required 
to which it applies (such as adequate documents and records or physical control over 
assets and records). 

b. For each internal control, identify the transaction-related audit objective(s) to which 
it applies. 

c. For each internal control, identify a specific misstatement that is likely to be 
prevented if the control exists and is effective. 

d. For each control, list a specific misstatement that could result from the absence of 
the control. 

e. For each control, identify one audit test that the auditor could use to uncover mis- 
statements resulting from the absence of the control. 
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@@.. !2-20 (opjectives 12-1, 12-2, 12-3, 12-6) Lew Pherson and Vera Collier are friends who are 
employed by different CPA firms. One day during lunch they are discussing the impor- 
tance of internal control in determining the amount of audit evidence required for an 
engagement. Pherson expresses the view that internal control must be evaluated carefully 
in all companies, regardless of their size or whether they are publicly held, in a similar 
manner. His CPA firm requires a standard internal control questionnaire on every audit as 
well as a flowchart of every transaction area. In addition, he says the firm requires a care- 
ful evaluation of the system and a modification in the evidence accumulated based on the 
controls and deficiencies in the system. 

Collier responds by saying she believes that internal control cannot be adequate 
in many of the small companies she audits; therefore, she simply ignores internal 
control and acts under the assumption of inadequate controls. She goes on to say, 
“Why should I spend a lot of time obtaining an understanding of internal control 
and assessing control risk when I know it has all kinds of weaknesses before I start? I 
would rather spend the time it takes to fill out all those forms in testing whether the 
statements are correct.” 


Required a. Express in general terms the most important difference between the nature of the 
potential controls available for large and small companies. 

b. Criticize the positions taken by Pherson and Collier, and express your own opinion 
about the similarities and differences that should exist in understanding internal con- 
trol and assessing control risk for different-sized companies. 

c. Discuss whether Collier’s approach is acceptable under existing auditing standards 
for either public or nonpublic companies. 

d. Describe what additional procedures Pherson must perform if auditing the financial 
statements of a large public company. 


12-21 (OBJECTIVE 12-2) The following are partial descriptions of internal controls for com- 
panies engaged in the manufacturing business: 


1. When Mr. Clark orders materials, an electronic copy of the purchase order is sent 
to the receiving department. During the delivery of materials, Mr. Smith, the receiv- 
ing clerk, records the receipt of shipment on this purchase order and then sends the 
purchase order to the accounting department, where it is used to record materials 
purchased and accounts payable. The materials are transported to the storage area by 
forklifts. The additional purchased quantities are recorded on storage records. 

2. Every day, hundreds of employees clock in using their employee identification cards 
at Generous Motors Corporation. The data on these time records is used in the prepa- 
ration of the labor cost distribution records, the payroll journal, and the electronic 
payments and payroll checks. The treasurer, Angela Lee, compares the payroll jour- 
nal with the payroll records, signs the checks, and returns the payroll notifications 
and checks to Charles Strode, the supervisor of the computer department. The pay- 
roll checks and payment notices are distributed to the employees by Strode. 

3. The smallest branch of Connor Cosmetics employs Mary Cooper, the branch manager, 
and her sales assistant, Janet Hendrix. The branch uses a bank account to pay expenses. 
The account is kept in the name of “Connor Cosmetics—Special Account.” To pay 
expenses, checks must be signed by Cooper or by the treasurer, John Winters. Cooper 
receives the cancelled checks and bank statements. She reconciles the branch account 
herself and files cancelled checks and bank statements in her records. She also periodi- 
cally prepares reports of cash disbursements and sends them to the home office. 


Required a. List the deficiencies in internal control for each of these situations. To identify the 
deficiencies, use the methodology that was discussed in this chapter. 
b. For each deficiency, state the type(s) of misstatement(s) that is (are) likely to result. Be 
as specific as possible. 
c. How would you improve internal controls for each of the three companies?* 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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12-22 (OBJECTIVE 12-3) Internal controls 1 through 5 were tested in prior audits. Evaluate 
each internal control independently and determine which controls must be tested in the 
current year’s audit of the December 31, 2016, financial statements. Be sure to explain 
why testing is or is not required in the current year. 


1. The general ledger accounting software system automatically reconciles totals in each 
of the subsidiary master files for accounts receivable, accounts payable, and inventory 
accounts to the respective general ledger accounts. This control was most recently 
tested in the prior year. No changes to the software have been made since testing and 
there are effective controls over IT security and software program changes. 


Date 
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2. The accounts payable clerk matches vendor invoices with related purchase orders 
and receiving reports and investigates any differences noted. This control was tested 
in the 2015 fiscal year-end audit. No changes to this control or personnel involved 
have occurred since testing was performed. 

3. The sales system automatically determines whether a customer's purchase order and 
related accounts receivable balance are within the customer's credit limit. The risk of 
shipping goods to customers who exceed their credit limit is deemed to be a significant 
risk. This control was last tested in the December 31, 2014, financial statement audit. 

4. The perpetual inventory system automatically extends the unit price times quan- 
tity for inventory on hand. This control was last tested in the audit of December 
31, 2014, financial statements. During 2016, the client made changes to this soft- 
ware system. 

5. The client’s purchase accounting system was acquired from a reputable software 
vendor several years ago. This system contains numerous automated controls. The 
auditor tested those controls most recently in the 2015 audit. No changes have been 
made to any of these controls since testing and the client’s controls over IT security 
and software program changes are excellent. 


12-23 (OBJECTIVES 12-1, 12-2) Anthony Liu, CPA, prepared the flowchart above that por- 
trays the raw materials purchasing function of one of Anthony’s clients, Medium- 
Sized Manufacturing Company, from the preparation of initial documents through the 
vouching of invoices for payment in accounts payable. Assume that all documents are 
prenumbered. 

Required Identify the deficiencies in internal control that can be determined from the flowchart. 
Use the methodology discussed in this chapter. Include internal control deficiencies re- 
sulting from activities performed or not performed.* 


12-24 (OBJECTIVE 12-5) You are an audit manager and you are going to issue auditor reports 
on internal control over financial reporting for the following companies as required by 
PCAOB auditing standards: 

Pleasant Luggage Company—The company is a manufacturer of luggages. During the audit, 
there was a restriction on the scope of the audit of internal control over financial reporting 
and it was unable to determine whether there were material weaknesses. 

Queen Mining Company-—The company operates a number of mines in various regions. 
The company implemented a new system this year and there were some minor internal 
control-related issues which could be further enhanced to increase efficiency. 

Ranger Supply Company-The company is a manufacturer of stationery and accessories 
items. The auditor identified a number of significant deficiencies in the internal controls over 
financial reporting. It is believed that there is a reasonable possibility that internal control will 
not prevent or detect material misstatements on a timely basis. 

System IT Company-The company is a IT solution provider. The auditor conducted an 
interim testing and identified a number of material weaknesses in internal controls. The 
results were communicated to the senior management; however, the management was 
only able to remediate all the deficiencies after year end. 


Required a. State the appropriate audit report on internal control over financial reporting for the 
four companies. 
b. Justify if the above answers will be changed: 
(1) If it is unlikely that the deficiency in Ranger Supply Company leads to material 
misstatements; 
(2) if the management of System IT Company was able to remediate all the deficiencies 
before year end and the auditors tested on the revised controls with positive results? 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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12-25 (OBJECTIVES 12-2, 12-3) Taylor Electronics Company is engaging in manufacturing of 
electronic components. The company purchases its raw materials from various suppliers. 
The following is a description of the purchasing system of Taylor Electronics: 


1. Production supervisors complete a requisition form when they are in need of raw 
materials. This is triggered by checking the current level of inventory on the inventory 
system which has been updated to record the minimum and maximum required levels 
of raw materials. Orders cannot be made if it is outside of the range set in the inventory 
system. The requisition form is then authorized by the production manager. 

2. The authorized requisition form is submitted to the purchase ordering department 
of which the staff will raise sequentially numbered purchase orders, in multiple cop- 
ies, based on the approved supplier list. The copies are sent to: 

(a) the selected supplier, after obtaining the authorization of the purchasing director; 
(b) the accounts payable department; 
(c) the warehouse department. 


It is the department’s policy to update the supplier list with reference to the sup- 
pliers’ quality and price on an annual basis. The purchasing director authorizes the 
orders prior to submitting to the selected supplier. 

3. Upon receipt of goods, the warehouse department verifies the quantity to the suppli- 
ers despatch note and the purchase order sent to the warehouse department earlier. 
The staff in warehouse department also checks that the quality of the goods received 
is satisfactory. A sequentially numbered goods received note is then generated which 
will be sent to the accounts payable department. 

4. The accounts payable department matches the goods received note (from ware- 
house department) with the purchase order (from purchase ordering department) 
and invoice (from suppliers) to ensure the agreed prices and discounts have been 
honoured. After the checking process, the staff initials on the invoice to indicate the 
matching process is completed. 

5. Another accounts payable clerk enters the “matched” invoices onto the purchase 
system in batches. In this process, the clerk uses a batch control sheet which shows 
the number of invoices and the total value to be entered. Such information will then 
be checked against the system batch report. After inputting the information into the 
purchase system, the invoice will be marked as “LOGGED”. The assistant accounts 
payable manager inspects the file of invoices on a weekly basis to ensure that all 
invoices have been recorded. 

6. The logged invoices are then reviewed and authorized for payment by the finance 
director. Payments are made by the accounts department via bank transfer on a weekly 
basis. After payment, the invoice will be marked as “PAID” to avoid duplicate payments. 


a. Identify the important controls and related purchase transaction-related audit objectives. Required 
b. List the procedures that a CPA will use in an audit of purchasing transactions in order 
to assess the operating effectiveness of internal controls. 


12-26 (OBJECTIVES 12-2, 12-7) Most grocery stores use bar code scanning technologies that 
interface with cash registers used to process customer purchases. Cashiers use the scan- 
ners to read bar code labels attached to each product, which the system then uses to obtain 
unit prices, calculate transaction totals, including sales taxes, and update perpetual inven- 
tory databases. Similarly, cashiers scan bar codes on coupons or member discount cards 
presented by the customer to process discounts. Along with the scanning technologies, 
groceries use point-of-sale technologies that allow customers to swipe debit and credit 
cards for payment, while still maintaining the ability for customers to pay with cash. 


a. Which financial statement accounts are impacted by the use of these technologies in Required 
a typical grocery store? 

b. Identify risks inherent to this business process in a grocery store that might affect the 
financial statement accounts identified in part a. For each risk, describe how these 
technologies help reduce the inherent risk. 

c. How might an auditor use technology to test the operating effectiveness of a bar code 
scanner—based check-out system? 
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12-27 (OBJECTIVES 12-3, 12-7) A CPA’s client, Boos & Baumkirchner, Inc., is a medium-size 
manufacturer of products for the leisure-time activities market (camping equipment, 
scuba gear, bows and arrows, and so forth). During the past year, a computer system was 
installed and inventory records of finished goods and parts were converted to computer 
processing. The inventory master file is maintained electronically. Each record of the file 
contains the following information: 


* Item or part number ¢ Total value of inventory on hand at cost 
* Description * Date of last sale or usage 

* Size * Quantity used or sold this year 

* Unit-of-measure code * Economic order quantity 

* Quantity on hand * Code number of major vendor 

* Cost per unit * Code number of secondary vendor 


In preparation for year-end inventory, the client has two identical sets of preprinted 
inventory count cards. One set is for the client’s inventory counts, and the other is for the 
CPA’s use to make audit test counts. The following information is on each card: 


¢ Item or part number ° Size 
* Description * Unit-of-measure code 


In taking the year-end inventory, the client’s personnel will write the actual counted 
quantity on the face of each card. When all counts are complete, the counted quantity will 
be entered into the system. The cards will be processed against the inventory database, 
and quantity-on-hand figures will be adjusted to reflect the actual count. A computer- 
generated edit listing will be prepared to show any missing inventory count cards and all 
quantity adjustments of more than $100 in value. These items will be investigated by cli- 
ent personnel, and all required adjustments will be made. When adjustments have been 
completed, the final year-end balances will be computed and posted to the general ledger. 

The CPA has available generalized audit software that will run on the client’s com- 
puter and can process the client’s electronic records. 


Required a. In general and without regard to the facts in this case, discuss the nature of general- 
ized audit software and list the various types and uses. 

b. List and describe at least five ways generalized audit software can be used to assist in 
all aspects of the audit of the inventory of Boos & Baumkirchner, Inc. (For example, 
the software can be used to read the inventory master file and list items and parts 
with a high unit cost or total value. Such items can be included in the test counts to 
increase the dollar coverage of the audit verification.)" 


12-28 (OBJECTIVES 12-2, 12-3) Following are 10 key internal controls in the payroll cycle for 
Gilman Stores, Inc. 


Key Controls 


1. To input hours worked, payroll accounting personnel input the employee’s Social 
Security number. The system does not allow input of hours worked for invalid 
employee numbers. 

2. The payroll application is programmed so that only human resource personnel are 
able to add employee names to the employee master files. 

3. Input menus distinguish executive payroll, administrative payroll, and factory payroll. 

4. The system automatically computes pay at time and a half once hours worked exceed 
80 in a 2-week pay period. 

5. The system accumulates totals each pay period of employee checks processed and 
debits the payroll expense general ledger account for the total amount. 

6. Each pay period, payroll accounting clerks count the number of time sheets submit- 
ted by department heads for processing and compare that total with the number of 
checks printed by the system to ensure that each time sheet has a check. 

7. For factory personnel, the payroll system matches employee ID numbers with ID 
numbers listed on job costing tickets as direct labor per the cost accounting system. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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The purpose of the reconciliation is to verify that the amount paid to each employee 
matches the amount charged to production during the time period. 

8. The system generates a listing by employee name of checks processed. Department 
heads review these listings to ensure that each employee actually worked during the 
pay period. 

9. On a test basis, payroll accounting personnel obtain a listing of pay rates and with- 
holding information for a sample of employees from human resources to recalculate 
gross and net pay. 

10. The system automatically rejects processing an employee's pay if inputted hours 
exceed 160 hours for a 2-week pay period. 


For each control: 
a. Identify whether the control is an automated application control (AC) or a manual 
control done by Gilman employees (MC). 
b. Identify the transaction-related audit objective that is affected by the control. 
c. Identify which controls, if tested within the last two prior year audits, would not have 
to be retested in the current year, assuming there are effective IT general controls and 
no changes to the noted control have been made since auditor testing was completed. 


12-29 (OBJECTIVES 12-2, 12-4, 12-7) Parts for Wheels, Inc., has historically sold auto parts 
directly to consumers through its retail stores. Due to competitive pressure, Parts for Wheels 
installed an Internet-based sales system that allows customers to place orders through the 
company’s Web site. The company hired an outside Web site design consultant to create the 
sales system because the company’s IT personnel lack the necessary experience. 

Customers use the link to the inventory parts listing on the Web site to view product 
descriptions and prices. The inventory parts listing is updated weekly. To get the system 
online quickly, management decided not to link the order system to the sales and inven- 
tory accounting systems. Customers submit orders for products through the online 
system and provide credit card information for payment. Each day, accounting depart- 
ment clerks print submitted orders from the online system. After credit authorization is 
verified with the credit card agency, the accounting department enters the sale into the 
sales journal. The accounting department then sends a copy of the order to warehouse 
personnel, who process the shipment. The inventory system is updated based on bills of 
lading information forwarded to accounting after shipment. 

Customers may return parts for full refund if returned within 30 days of submitting 
the order online. The company agrees to refund shipping costs incurred by the customer 
for returned goods. 


a. Describe deficiencies in Parts for Wheels’ online sales system that may lead to mate- 
rial misstatements in the financial statements. 

b. Identify changes in manual procedures that could be made to minimize risks, with- 
out having to reprogram the current online system. 

c. What transaction-related and balance-related audit objectives would the auditors be 
most concerned about based on the process currently in place? 

d. Explain how auditors might use generalized audit software to address the concerns 
identified in part c. 


12-30 (OBJECTIVE 12-3) Based on a cost-benefit analysis, management at First Community 
Bank decided to contract with Technology Solutions, a local data center operator, to host all 
of the bank’s financial reporting applications. To avoid the significant costs of developing 
and maintaining its own data center, First Community contracts with Technology Solutions 
to provide IT server access in a highly secure, environmentally controlled data center facility 
owned by Technology Solutions. Similar to First Community, other businesses also contract 
with Technology Solutions to host applications at the same data center. 

The bank is directly linked through highly secure telecommunication lines to the data 
center, which allows bank personnel to transmit data to and from the data center as if 
the data center was owned by First Community. For a monthly fee, Technology Solutions 
supports the server hardware in an environment with numerous backup controls in the 
event power is lost or other hardware failures occur. Bank personnel are responsible for 
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Required 


selecting and maintaining all application software loaded on Technology Solutions serv- 
ers, and selected bank personnel have access to those servers located at the Technology 
Solutions data center. Bank personnel enter all data, run applications hosted at Technology 
Solutions, and retrieve reports summarizing the processing of all bank transactions. 


Required a. What risks might First Community assume with this approach to IT system support? 
b. How does the use of Technology Solutions impact First Community’s internal controls? 
c. What impact, if any, does reliance on Technology Solutions as the data center pro- 

vider have on the audit of First Community’s financial statements? 


12-31 (OBJECTIVE 12-3) Universe Production Company specializes in manufacturing of 
paper products such as cards, writing pads and paper bags. Below is an extract of the inter- 
nal controls for its purchasing cycle: 


1. When employees need to buy raw materials, they are requested to create a purchase 
requisition in the procurement application system by inputting the details as well as 
the staff ID. The request is then forwarded to the purchasing director in the applica- 
tion system. Approval by the purchasing director is done on-line. 

2. All purchase requisitions are reviewed on a weekly basis to detect any unauthorized 
requisitions and any excessive order quantities. 

3. After approving the purchase requisition, the purchase order is automatically created in 
the procurement application system and a copy will be forwarded to the supplier directly. 

4. The receiving department checks the quantity and quality of the goods received. 

5. Receiving reports are generated from the system and forwarded to accounts payable 
department. 

6. Accounts payable clerk receives invoices from suppliers and matches the details 
against the receiving reports and purchase orders. 

7. Another accounts payable clerk enters the invoice details in the accounts payable 
system and the system automatically generates requests for payments based on the 
suppliers’ payment terms in the system. 

8. The accounts payable manager compares the accounts payable mast file with general 
ledger balances at the end of each month. 


Required a. Consider each of the preceding controls separately. Identify whether the controls is a(n): 
(i) automated control; or 
(ii) manual control. 
b. Summarize the use of automated controls and manual controls. Do you agree that all 
controls can be automated? 
c. Explain whether there is any difference in the approach when auditing automated 
control and manual control. 


faim 12-32 (OBJECTIVE 12-5) PCAOB Auditing Standard No. 5, titled “An Audit of Internal Control 
‘CYP Over Financial Reporting That Is Integrated with An Audit of Financial Statements,” pro- 
y P g g p 


on” vides guidance for auditors when performing integrated audits. Visit the PCAOB Web site 
(pcaobus.org) and refer to the “Standards” tab. Read the auditing standard to answer the 
following questions. 
Required a. In what situations does the integrated audit standard apply? 


b. According to the standard, what is the objective of an audit of internal control over 
financial reporting? What is the objective of an audit of the financial statements? 

c. What is the role of risk assessment as it relates to the audit of internal control over 
financial reporting? 

d. How should the auditor determine which controls to test? 

e. How might the auditor use evidence obtained in the audit of the financial statements 
when concluding on the effectiveness of internal control over financial reporting? 


fm 12-33 (OBJECTIVE 12-5) Section 404(a) of the Sarbanes—Oxley Act requires management of 
‘OP a public company to issue a report on internal control over financial reporting (ICOFR) as 

*” of the end of the company’s fiscal year. Many companies have reported that their ICOFR 
was operating effectively, while others have reported that such controls were not effective 
in design or operation. 
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1. Visit the SEC Web site (www.sec.gov) and search for the Form 10-K filing for Bob 
Evans Farms, Inc., for the fiscal year ended April 25, 2014. 

2. Locate Management’s Annual Report on Internal Control Over Financial Reporting 
to answer the following questions: 
(a) Who is responsible for establishing and implementing effective internal controls? 
(b) What type of internal controls is the report addressing? 
(c) What framework did management use to evaluate its internal control? 

(d) What was management’s conclusion about the operating effectiveness of internal 

control? 
(e) What information is provided to help readers understand why management 
arrived at that conclusion? 

(f) What changes, if any, has management made to improve internal controls? 

3. Locate the report of the independent registered public accounting firm. What infor- 
mation, if any, does the audit firm provide about its evaluation of internal controls 
over financial reporting? 


Required 


12-34 (OBJECTIVES 12-2, 12-3) The information technology (IT) department at Jacobsons, 
Inc., consists of eight employees, including the IT Manager, Melinda Cullen. Cullen is 
responsible for the day-to-day oversight of the IT function and reports to Jacobsons’ chief 
operating officer (COO). The COO is a senior vice president responsible for the overall 
retail operations who reports directly to the president and chief executive officer. The 
COO attends board of director meetings to provide an update of key operating perfor- 
mance issues. Because Cullen takes an active role in managing the IT department, the 
COO rarely discusses IT issues with the board or CEO. Cullen and the COO identify hard- 
ware and software needs and are authorized to approve those purchases. 

In addition to Cullen, the IT department is composed of seven other individuals: three 
programmers, three operators, and one data control clerk. Cullen has been employed by 
Jacobsons for 12 years, working her way up through various positions in the department. 
Fortunately, she has been able to retain a fairly stable staff and has experienced minimal 
turnover. All IT personnel have been employed in their current positions since mid-2009. 
When hiring personnel, Cullen does extensive background checks on prospective employ- 
ees, including reference, credit, and criminal checks. Cullen has developed a trust with each 
employee and, as a result, delegates extensively to each individual. This is especially benefi- 
cial because Cullen spends most of her time working with user departments in a systems 
analyst role, identifying changes needed to existing applications. She conducts weekly IT 
departmental meetings on Tuesday mornings. Each staff member attends, including night 
operators, to discuss issues affecting the performance of the department. 

The three programmers are responsible for maintaining and updating systems and 
application software. The lead programmer is responsible for assigning duties among the 
programming staff. All three programmers have extensive experience with the operating, 
utility, security, and library software as well as all of Jacobsons’ application software pack- 
ages. Programming assignments are made based on who is least busy among the program- 
ming staff at the time. This method of management keeps all programmers familiar with 
most software packages in use at Jacobsons and keeps programmers excited about the job 
tasks because of the variety of assignments they receive. Cullen encourages each program- 
mer to take continuing education courses to keep current with the latest technical devel- 
opments. In addition to programming responsibilities, the programming staff maintains 
the library of programs and data tapes, which is located in a locked room nearby. The pro- 
gramming staff maintains extensive logs of tape use and of changes made to program files. 

The three operators consist of a day operator and two night operators. Most of the 
applications are based on online inputting from various user departments for batch pro- 
cessing overnight. Thus, the heaviest volume of processing occurs during the night shift, 
although there is some daytime processing of payroll and general ledger applications. All 
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operators are responsible for monitoring the operation of the equipment and correct- 
ing system-caused errors. In addition, they do routine monthly backup procedures. The 
computer operators have programming experience with the program language used in 
application programs. Occasionally, when a small change is identified for an application 
program, Cullen asks the day shift operator to implement that change to avoid overbur- 
dening the programming staff. 

Operators follow the production schedule prepared by Cullen, who consults with user 
departments to develop the schedule. The day shift operator reviews the job processed 
log (which chronologically details the jobs processed) generated at the end of the previ- 
ous night shift for deviations from the schedule, and the lead night shift operator reviews 
the job processed log generated at the end of the previous day shift for deviations from 
the schedule. If jobs processed reconcile to the job schedule, the job processed log is dis- 
carded. When there are deviations, the operator doing the review leaves a copy for Cullen, 
highlighting the deviation. Before doing batch processing jobs, the operators generate an 
input listing report that summarizes the number of online input entries submitted during 
the day for processing. This number is recorded and then later compared by the operators 
with the computer output generated after batch processing and file updating occur. This 
provides a check figure of the number of transactions processed. When the numbers agree, 
the output is submitted to the data control clerk. When the numbers disagree, the opera- 
tors identify the error and resubmit the application for processing. 

The data control clerk collates all computer output, including output reports and 
exception listings. The data control clerk reviews exception reports and prepares correc- 
tion forms for reprocessing. Examples of changes that the data control clerk might make 
include correcting inputting errors (for example, amounts accidentally transposed) and 
preparing change request forms for changes to existing master files (examples include re- 
vising sales price lists and inventory product numbers in the sales master file and adding 
new employee names, addresses, and Social Security numbers to the payroll master file). 
After all corrections are made, the data control clerk distributes all computer output to 
the various user departments. User departments have high regard for the IT staff. Output 
reports are reconciled to input reports by users on a test basis quarterly. 


Required You are the senior auditor assigned to the audit of Jacobsons. The audit partner has asked 
you to assist in doing the IT general controls review. The partner has asked you to review 
this narrative information and respond to the following questions: 


1. What controls and deficiencies exist in the lines of reporting from IT to senior 
management? If you note any deficiencies, provide recommendations that can be 
included in the management letter. 

2. What is your assessment of how Melinda Cullen fulfills her IT management responsi- 
bilities? Identify tasks that she does that strengthen the department. Which of her tasks 
cause you concern? What changes in her day-to-day responsibilities would you make? 

3. What is your assessment of the programming function at Jacobsons? What are the 
strengths? What are the deficiencies? Make recommendations for improvement. 

4. What is your assessment of the IT operations function at Jacobsons? What are the 
strengths? What are the deficiencies? Make recommendations for improvement. 

5. What is your assessment of the data control function at Jacobsons? What are the 
strengths? What are the deficiencies? Make recommendations for improvement. 

6. Make recommendations for improving controls over the involvement of users. 
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ACL PROBLEM 


12-35 (OBJECTIVE 12-7) This problem requires the use of ACL software, which can be AED 
accessed through the textbook Web site. Information about downloading and using ACL 

and the commands used in this problem can also be found on the textbook Web site. You 

should read all of the reference material preceding the instructions about “Quick Sort” 

before locating the appropriate command to answer parts a. through f. For this problem, 

use the file labeled “Purchase_Orders” in the “Acquisitions_Payment” subfolder of the 
ACL_Rockwood project. The suggested command or other source of information needed 

to solve the problem requirement is included at the end of each question. 

a. Determine the total amount of all purchases (Total). 

b. To better understand the purchasing activity, stratify and print the purchases by purchase 
amount. Use $100 as the minimum value and $100,000 as the maximum value, and cre- 
ate 10 strata. Which stratum accounts for the greatest number of purchases? (Stratify) 

c. Determine if there are any duplicates or missing purchase order numbers in the file. 
State your audit concerns with any gaps or duplicates. Provide a possible explanation 
for any gaps or duplicates that you find. (Gaps and Duplicates) 

d. How many purchase orders relate to purchases that did not have a requisition (based 
on the Requisition Number column)? What is the total dollar amount of purchases 
made without a requisition? (Summarize). State your audit concerns related to pur- 
chases without a requisition. 

e. Determine and print the percent of total purchases by vendor number. Do any ven- 
dors account for more than 5% of total purchases? (Classify and Quick Sort). 

f. Rockwood requires a second approval for all purchases exceeding $100,000. Select 
all purchases greater than $100,000 and print the list for follow-up testing of proper 
approval. (Filter) 


INTEGRATED CASE APPLICATION— 
PINNACLE MANUFACTURING: PART IV 


12-36 (OBJECTIVES 12-1, 12-2) In Parts I and II of this case, you performed preliminary 
analytical procedures and assessed acceptable audit risk and inherent risk for Pinnacle 
Manufacturing. In Part III, you considered fraud risks. Your team has been assigned the 
responsibility of auditing the acquisition and payment cycle and one related balance sheet 
account, accounts payable. The general approach to be taken will be to reduce assessed 
control risk to a low level, if possible, for the two main types of transactions affecting 
accounts payable: acquisitions and cash disbursements. The following are furnished as 
background information: 


¢ Asummary of key information from the audit of the acquisition and payment cycle 
and accounts payable in the prior year, which was extracted from the previous audit 
firm’s audit files (Figure 12-12, p. 430) 

¢ A flowchart description of the accounting system and internal controls for the acqui- 
sition and payment cycle (Figure 12-13)—the flowchart shows that although each of 
the company’s three divisions has its own receiving department, the purchasing and 
accounts payable functions are centralized 


The purpose of Part IV is to obtain an understanding of internal control and assess control 
risk for Pinnacle Manufacturing’s acquisition and cash disbursement transactions. 


a. Familiarize yourself with the internal control system for acquisitions and cash 
disbursements by studying the information in Figure 12-12 and Figure 12-13. 

b. Prepare a control risk matrix for acquisitions and a separate one for cash disburse- 
ments using Figure 12-3 on page 397 as a guide. A formatted control risk matrix is 
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FIGURE 12-12 Information for Audit of Accounts Payable—Previous Year 


Accounts payable, | 2-31-15 
Number of accounts 452 
Total accounts payable $9,460,776 
Range of individual balances $33.27-$677,632.97 
Performance materiality for accounts payable $230,000 


Transactions, 2015 
Acquisitions: 
Number of acquisitions 16,243 
Total acquisitions $92,883,712 


Cash disbursements: 
Number of disbursements 23,661 
Total cash disbursements $87,280,031 


Results of audit procedures—tests of controls and substantive tests of 
transactions for acquisitions (sample size of 100): 
Purchase order not approved 
Purchase quantities, prices, and/or extensions not correct 
Transactions charged to wrong general ledger account 
Transactions recorded in wrong period 
No other exceptions 


Results of audit procedures—cash disbursements (sample size of 100): 
Cash disbursement recorded in wrong period 
No other exceptions 


Results of audit procedures—accounts payable: 
(50% of vendors’ balances were verified; combined net 
understatement amounts were projected to the population as follows): 
Three cutoff misstatements $52,349 
One difference in amounts due to disputes and discounts $9,552 
No adjustment was necessary because the total projected misstatement 
was not material. 


available online. The objectives should be specific transaction-related audit objec- 
tives for acquisitions for the first matrix and cash disbursements for the second 
matrix. See pages 611-615 in Chapter 18 for transaction-related audit objectives 
for acquisitions and cash disbursements. In doing Part IV, the following steps are 
recommended: 


(1) Controls 
a. Identify key controls for acquisitions and for cash disbursements. After you 
decide on the key controls, include each control in one of the two matrices. 
b. Include a “C” in the matrix in each column for the objective(s) to which each 
control applies. Several of the controls should satisfy multiple objectives. 
(2) Deficiencies 
a. Identify key deficiencies for acquisitions and for cash disbursements. After you 
decide on the deficiencies, include each deficiency in the bottom portion of one 
of the two matrices. 
b. Include a “D” in the matrix in each column for the objective(s) to which each 
control deficiency applies. 


(3) Assess control risk as high, medium, or low for each objective using your best 
judgment. Do this for both the acquisitions and cash disbursements matrices. 
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FIGURE 12-13 Pinnacle Manufacturing— Acquisition and Payment Cycle 
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Notes on controls 


° Chart of accounts—the company uses 
an adequate detailed chart of accounts. 

* Prenumbered documents—all documents 
shown are prenumbered. They are 
accounted for by a function other than 
the preparer. 

* Bank reconciliation—done monthly by the 
treasurer. 

* Procedures are applied daily. Backlogs are 
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cree = OVERALL AUDIT 
“STRATEGY AND AUDIT 
PROGRAM 


LEARNING OBJECTIVES Does Following Last Year’s Audit Approach Work? 

After studying this chapter, you should Pacific Products is a medium-sized privately held manufacturer of premium wooden products, 

be able to selling to furniture shops across the Asia Pacific region. It has a team of professional designers to 

13-1 Use the five types of audit design furniture and home accessories with the concept of “simplicity yet fashionable”. The prod- 
tests to determine whether ucts are gaining popularity in the region over the past decade. The Chairman and Chief Executive 
financial statements are fairly Officer, Christopher Man, was satisfied with the growth for the past decade. As Christopher has 
stated. been a risk averse person, he did not take much risk for aggressive expansion. 


13-2 Select the appropri- 
ate types of audit tests. 

13-3 Understand the concept 
of evidence mix and how 
it should be varied in 
different circumstances. 

13-4 Design an audit program. 

13-5 Compare and contrast 
transaction-related audit 
objectives with balance-related 
and presentation and disclosure- 
related audit objectives. 

13-6 Understand key 
evidence-related terms. 

13-7 Integrate the four phases of 
the audit process. 


Cho & Tam has been the auditor of Pacific 
Products for the past 15 years and Thomas 
Cho has been the partner-in-charge since 
then. Thomas has developed excellent client 
relationship with the management of Pacific 
Products as Thomas offered constructive 
advices to Pacific Products over the years, 
especially in the implementation of internal 
controls over the sales and collection as 
well as inventory and warehousing cycles 
which were the two most important cycles 
to a manufacturing business. For the past 
five years, Cho & Tam started relying more 
on the internal controls of Pacific Products 
and performed extensive tests of control 
with a significant reduction of substantive 
tests, particularly in the number of samples 
for vouching in the sales and collection cycle 
and for inventory physical counts at year 
end. This resulted in a very smooth audit 
with fewer adjusting entries arisen from the 
audit. Further, Cho & Tam offered a lowered 
audit fee two years ago, after considering a reduction in time spent on the audit, for a better 
client relationship and at the same time, staying competitive in the market. 


Since late last year, Christopher Man stepped down as the Chief Executive Officer due to 
health problems. His son, Jonathan Man was appointed to fill in the position. Jonathan is a young 
yet aggressive entrepreneur. Pacific Products, under his leadership, has taken higher level of 
risks. One of the recent initiatives was the expansion of the sales force to online ordering so 
that individual customer could order through the internet. In order to link the online ordering 
system to the company’s accounting system, Jonathan chose a new vendor to implement a new 
accounting system. As Jonathan wanted to increase sales through this new distribution channel, 
the online ordering platform and the new accounting system was rolled out by the end of the 
third quarter. It has been estimated that sales from this channel would contribute to around 5% 
of the company’s total sales. Further, there has been rumor in the market that Pacific Products 
may go public in the near future. 
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At the end of August, Cho & Tam planned for the audit of Pacific Products. The manager-in- 
charge Adam Li resigned from his position. Thomas assigned this role to Francis Ko, a senior 
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associate who has been in the engagement team for years. “The audit should be straightforward. Think about out time budget but bear 
in mind we have a reduced audit fee!” Here minded Francis. 


“We have conducted the audits smoothly for the past few years. As | am not as experienced as Adam, the most conservative approach is 
to follow last year’s audit strategy relying on tests of control.” Francis thought. “Also, the online sales are immaterial and | want to finish 
this job as soon as possible so that | can spend more time on other complicated jobs. | won't select any sample for the online sales so 
that | can complete all tests of control by November, ideally.” 


Thomas trusted Francis’ judgment and the internal control system of Pacific Products without much questioning and issued an unqualified 
audit report. Four months after year end, Pacific Products was is serious financial problems. It was then discovered that the new account- 
ing system had interface problems with other systems and the financial reports generated were hardly reliable. 


This chapter deals with the eighth and last step in the planning phase of an audit. This critical step finalizes the 
audit strategy and entire audit program the auditor plans to follow, including all audit procedures, sample sizes, 
items to select, and timing. The chapter-opening vignette deals with the importance of the decisions involving the 
overall audit strategy and audit plan and program, considering both audit effectiveness and efficiency. 

First, the overall audit strategy is discussed, which means selecting a mix of five types of tests that will result in 
an effective and efficient audit. This topic includes discussion of the trade-offs among the types of tests, including 
consideration of the cost of each type. After deciding on the most cost-effective mix of the types of tests, the auditor 
designs a detailed audit program. Later in the chapter, we'll address how phase I, which includes all of the audit plan- 
ning steps, relates to the other three phases of the audit. 


TYPES OF TESTS 
In developing an overall audit strategy, auditors use five types of tests to determine ‘OBJECTIVE 13-10 


whether financial statements are fairly stated. Auditors use risk assessment PrOce- 4.. she five types of audit tests 
dures to identify significant risks due to fraud or error, and design tests that address —_¢5 determine whether financial 
those risks. Auditors also assess the risk of material misstatement, represented by the statements are fairly stated. 
combination of inherent risk and control risk as described in Chapter 9. The other 
four types of tests represent further audit procedures performed in response to the 
risks identified. Each audit procedure falls into one, and sometimes more than one, of 
these five categories. 
Figure 13-1 (p. 434) shows the relationship of the four types of further audit proce- 
dures to the audit risk model. As Figure 13-1 illustrates, tests of controls are performed to 
support a reduced assessment of control risk, while auditors use substantive analytical 
procedures and tests of details of balances to satisfy planned detection risk. Substantive 
tests of transactions affect both control risk and planned detection risk, because they 
test the effectiveness of internal controls and the dollar amounts of transactions. 


Auditing standards require the auditor to obtain an understanding of the entity and 
its environment, including its internal control, to assess the risk of material misstate- 
ment in the client’s financial statements. Chapter 8 described how the auditor per- 
forms procedures to understand the client’s business and industry to assess the risk 
of material misstatement. Chapters 9 and 10 further described how auditors perform 
procedures to identify significant risks and assess inherent risk and control risk, while 
Chapter 12 illustrated how auditors perform procedures to obtain an understanding 
of internal control to assess control risk. Collectively, procedures performed to obtain 
an understanding of the entity and its environment, including internal controls, repre- 
sent the auditor’s risk assessment procedures. 

Risk assessment procedures are performed to assess the risk of material misstate- 
ment in the financial statements. The auditor performs tests of controls, substantive 
tests of transactions, substantive analytical procedures, and tests of details of balances 
in response to the auditor’s assessment of the risk of material misstatements. The 
combination of these four types of further audit procedures provides the basis for the 
auditor’s opinion, as illustrated by Figure 13-1. 


Risk Assessment 
Procedures 
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FIGURE 13-1 Further Audit Procedures and the Audit Risk Model 
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A major part of the auditor’s risk assessment procedures is done to obtain an 
understanding of internal control. Procedures to obtain an understanding of 
internal control, which were studied in Chapter 12, focus on both the design and 
implementation of internal control and are used to assess control risk for each transac- 
tion-related audit objective. 


The auditor’s understanding of internal control is used to assess control risk for each 
transaction-related audit objective. Examples are assessing the accuracy objective for 
sales transactions as low and the occurrence objective as moderate. When control 
policies and procedures are believed to be effectively designed and implemented, the 
auditor assesses control risk at a level that reflects the relative effectiveness of those 
controls. To obtain sufficient appropriate evidence to support that assessment, the 
auditor performs tests of controls. 

Tests of controls, either manual or automated, may include the following types of 
evidence. (Note that the first three procedures are the same as those used to obtain an 
understanding of internal control.) 


¢ Make inquiries of appropriate client personnel 
¢ Examine documents, records, and reports 

* Observe control-related activities 

* Reperform client procedures 


Auditors perform a system walkthrough as part of procedures to obtain an under- 
standing to help them determine whether controls have been appropriately imple- 
mented. The walkthrough is normally applied to one or a few transactions and follows 
that transaction through the entire process. For example, the auditor may select one 
sales transaction for a system walkthrough of the credit approval process, then follow 
the credit approval process from initiation of the sales transaction through the grant- 
ing of credit. 

Procedures to obtain an understanding of internal control generally do not 
provide sufficient appropriate evidence that a control is operating effectively. Tests 
of controls are used to determine whether these controls are effective, and manual 
controls usually involve testing a sample of transactions. As a test of the operating 
effectiveness of the credit approval process, for example, the auditor might examine a 
sample of 50 sales transactions from throughout the year to determine whether credit 
was granted before the shipment of goods. 

For automated controls, the auditor’s procedures to determine whether the auto- 
mated control has been implemented may also serve as the test of that control, if the 
auditor determines that general controls are effective and there is minimal risk that 
the automated control has been changed since the understanding was obtained. Then, 
no additional tests of controls would be required. 


FIGURE |13-2 Role of Audit Tests in the Audit of the Sales and Collection Cycle 
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The amount of additional evidence required for tests of controls depends on two 
things: 

1. The extent of evidence obtained in gaining the understanding of internal control 

2. The planned reduction in control risk 


Figure 13-2 shows the role of tests of controls in the audit of the sales and collec- 
tion cycle relative to other tests performed to provide sufficient appropriate evidence 
for the auditor’s opinion. Note the unshaded ovals with the words “Audited by TOC.” 
For simplicity, we make two assumptions: Only sales and cash receipts transactions 
and three general ledger balances make up the sales and collection cycle and the 
beginning balances in cash and accounts receivable were audited in the previous year 
and are considered correct. 

If auditors verify that sales and cash receipts transactions are correctly recorded 
in the accounting records and posted to the general ledger, they can conclude that 
the ending balances in accounts receivable and sales are correct. (Cash disbursements 
transactions will have to be audited before the auditor can reach a conclusion about 
the ending balance in the cash account.) One way the auditor can verify recording of 
transactions is to perform tests of controls. If controls are in place over sales and cash 
receipts transactions, the auditor can perform tests of controls to determine whether 
the six transaction-related audit objectives are being met for that cycle. Substantive 
tests of transactions, which we will examine in the next section, also affect audit assur- 
ance for sales and cash receipts transactions. 

To illustrate typical tests of controls, let’s return to the control risk matrix for 
Hillsburg Hardware Co. in Figure 12-3 (p. 373). For each of the 11 controls included in 
Figure 12-3, Table 13-1 (p. 436) identifies a test of control that might be performed to 
test its effectiveness. 
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Substantive tests are procedures designed to test for dollar misstatements (often 
called monetary misstatements) that directly affect the correctness of financial statement 


Sufficient 


evidence 


Substantive Tests of 


: : ‘ Transactions 
balances. Auditors rely on three types of substantive tests: substantive tests of transac- 
tions, substantive analytical procedures, and tests of details of balances. 
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TABLE 13-1 Illustration of Tests of Controls 


Illustrative Key Controls Typical Tests of Controls 
Credit is approved automatically by the computer by comparison Use test data to determine if the computer system automatically approves transac- 
to authorized credit limits (Cl). tions below authorized credit limits and rejects transactions above authorized 


credit limits (reperformance). 


Recorded sales are supported by authorized shipping documents Examine a sample of duplicate sales invoices to determine that each one is supported 
and approved customer orders (C2). by an authorized shipping document and approved customer order (inspection). 
Separation of duties exists among billing, recording of sales, and Observe whether personnel responsible for handling cash have no accounting respon- 
handling of cash receipts (C3). sibilities and inquire as to their duties (observation and inquiry). 

Shipping documents are electronically forwarded to billing daily Observe whether shipping documents are forwarded daily to billing and observe when 
and are billed the subsequent day (C4). they are billed (observation). 

Shipping documents are prenumbered and accounted for Account for a sequence of shipping documents and trace each to the sales journal 
weekly (C5). (inspection and reperformance). 

Batch totals of quantities shipped are compared with quantities Examine a sample of daily batches, recalculate the shipping quantities, and trace totals 
billed (C6). to reconciliation with input reports (reperformance). 

Unit selling prices are obtained from the price list master file of Examine a sample of sales invoices and agree prices to authorized computer 
approved prices (C7). price list. Review changes to price file throughout the year for proper approval 


(reperformance and inspection). 


Sales transactions are internally verified (C8). Examine documents for internal verification (inspection). 


Statements are mailed to customers each month (C9). Observe whether statements are mailed for one month and inquire about who is 
responsible for mailing the statements (observation and inquiry). 


Computer automatically posts transactions to the accounts Use audit software to trace postings from the batch of sales transactions to the sub- 
receivable subsidiary records and to the general ledger (C10). sidiary records and general ledger (reperformance). 

Accounts receivable master file is reconciled to the general ledger Examine evidence of reconciliation for test month, and test accuracy of reconciliation 
on a monthly basis (C11). (inspection and reperformance). 


Substantive tests of transactions are used to determine whether all six trans- 
action-related audit objectives have been satisfied for each class of transactions. Two 
of those objectives for sales transactions are recorded sales transactions exist (occur- 
rence objective) and existing sales transactions are recorded (completeness objective). 
See Chapter 6, pages 161-162, for the six transaction-related audit objectives. 

When auditors are confident that all transactions were correctly recorded in the 
journals and correctly posted, considering all six transaction-related audit objectives, 
they can be confident that general ledger totals are correct. 

Figure 13-2 (p. 435) illustrates the role of substantive tests of transactions in the 
audit of the sales and collection cycle by lightly shaded ovals with the words “Audited 
by STOT.” Observe that both tests of controls and substantive tests of transactions 
are performed for transactions in the cycle, not on the ending account balances. The 
auditor verifies the recording and summarizing of sales and cash receipts transactions 
by performing substantive tests of transactions. Figure 13-2 shows one set of tests for 
sales and another for cash receipts. 

Auditors can perform tests of controls separately from all other tests, but it’s 
often more efficient to do them at the same time as substantive tests of transac- 
tions. For example, auditors can usually apply tests of controls involving inspection 
and reperformance to the same transactions tested for monetary misstatements. 
(Reperformance simultaneously provides evidence about both controls and mon- 
etary correctness.) In the rest of this book, we will assume that tests of controls and 
substantive tests of transactions are done at the same time. 
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As we first discussed in Chapter 7, analytical procedures involve comparisons 
of recorded amounts to expectations developed by the auditor. Auditing standards 
require that these comparisons be done during planning and completing the audit. 


Substantive Analytical 
Procedures 
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Although not required, analytical procedures may also be performed to audit an 
account balance. The two most important purposes of substantive analytical 
procedures in the audit of account balances are to: 


1. Indicate possible misstatements in the financial statements 
2. Provide substantive evidence 


Analytical procedures done during planning typically differ from those done in 
the testing phase. Even if, for example, auditors calculate the gross margin during 
planning, they probably do it using interim data. Later, during the tests of the ending 
balances, they will recalculate the ratio using full-year data. If auditors believe that 
analytical procedures indicate a reasonable possibility of misstatement, they may per- 
form additional analytical procedures or decide to modify tests of details of balances. 

When the auditor develops expectations using substantive analytical procedures 
and concludes that the client’s ending balances in certain accounts appear reason- 
able, certain tests of details of balances may be eliminated or sample sizes reduced. 
Auditing standards state that substantive analytical procedures are a type of substan- 
tive test, when they are performed to provide evidence about an account balance. The 
extent to which auditors may be willing to rely on substantive analytical procedures 
in support of an account balance depends on several factors, including the preci- 
sion of the expectation developed by the auditor, materiality, and the risk of material 
misstatement. 

Figure 13-2 (p. 435) illustrates the role of substantive analytical procedures in 
the audit of the sales and collection cycle by the dark shaded ovals with the words 
“Audited by SAP.” Observe that the auditor performs substantive analytical proce- 
dures on sales and cash receipts transactions, as well as on the ending balances of the 
accounts in the cycle. 


Tests of details of balances focus on the ending general ledger balances for both 
balance sheet and income statement accounts. The primary emphasis in most tests 
of details of balances is on the balance sheet. Examples include confirmation of cus- 
tomer balances for accounts receivable, physical examination of inventory, and ex- 
amination of vendors’ statements for accounts payable. Tests of ending balances are 
essential because the evidence is usually obtained from a source independent of the 
client, which is considered highly reliable. Much like for transactions, the auditor's 
tests of details of balances must satisfy all balance-related audit objectives for each 
significant balance sheet account. These objectives were introduced in Chapter 6 and 
are shown on pages 163-165. 

Figure 13-2 illustrates the role of tests of details of balances by the ovals with 
half-dark and half-light shading and the words “Audited by TDB.” Auditors perform 
detailed tests of the ending balances for sales and accounts receivable, including pro- 
cedures such as confirmation of account receivable balances and sales cutoff tests. 
The extent of these tests depends on the results of tests of controls, substantive tests of 
transactions, and substantive analytical procedures for these accounts. 

Tests of details of balances help establish the monetary correctness of the accounts 
they relate to and therefore are substantive tests. For example, confirmations test for 
monetary misstatements in accounts receivable and are therefore substantive tests. 
Similarly, counts of inventory and marketable securities are also substantive tests. 


Figure 13-2 summarizes how auditors respond to the risks of material misstate- 
ments identified through risk assessment procedures by using the four types of 
further audit procedures to obtain audit assurance in the audit of the sales and col- 
lection cycle. Tests of controls help auditors evaluate whether controls over trans- 
actions in the cycle are sufficiently effective to support the reduced assessment of 
control risk, and thereby allow reduced substantive testing. Tests of controls also 
form the basis for the auditor’s report on internal control over financial reporting 


Tests of Details 
of Balances 


Summary of Types 
of Tests 
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for larger public companies. Substantive tests of transactions are used to verify 
transactions recorded in the journals and posted in the general ledger. Substantive 
analytical procedures emphasize the overall reasonableness of transactions and 
the general ledger balances. Tests of details of balances emphasize the ending bal- 
ances in the general ledger. 

By combining the types of audit tests shown in Figure 13-2, the auditor obtains a 
higher overall assurance for transactions and accounts in the sales and collection cycle 
than the assurance obtained from any one test. To increase overall assurance for the 
cycle, the auditor can increase the assurance obtained from any one of the tests. 


SELECTING WHICH TYPES OF TESTS TO PERFORM 


Select the appropriate types of 
audit tests. 


Availability of Types of 


Evidence for Further 
Audit Procedures 


Typically, auditors use all five types of tests when performing an audit of the financial 
statements, but certain types may be emphasized, depending on the circumstances. 
Recall that risk assessment procedures are required in all audits to assess the risk of 
material misstatement while the other four types of tests are performed in response 
to the risks identified to provide the basis for the auditor’s opinion. Note also that 
only risk assessment procedures, especially procedures to obtain an understanding 
of controls, and tests of controls are performed in an audit of internal control over 
financial reporting. 

Several factors influence the auditor’s choice of the types of tests to select, includ- 
ing the availability of the eight types of evidence, the relative costs of each type of 
test, the effectiveness of internal controls, and inherent risks. Only the first two are 
discussed further because the last two were discussed in earlier chapters. 


Each of the four types of further audit procedures involves only certain types of 
evidence (confirmation, inspection, and so forth). Table 13-2 summarizes the rela- 
tionship between further audit procedures and types of evidence. We can make sev- 
eral observations about the table: 


* More types of evidence, six in total, are used for tests of details of balances than 
for any other type of test. 

* Only tests of details of balances involve physical examination and confirmation. 

¢ Inquiries of the client are made for every type of test. 


iki Relationship Between Further Audit Procedures and Evidence 
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* Inspection is used in every type of test except substantive analytical procedures. 

* Reperformance is used in every type of test except substantive analytical 
procedures. Auditors may reperform a control as part of a transaction walk- 
through or to test a control that is not supported by sufficient documentary 
evidence. 

* Recalculation is used to verify the mathematical accuracy of transactions when 
performing substantive tests of transactions and account balances when per- 
forming tests of details of balances. 


When auditors must decide which type of test to select for obtaining sufficient appro- 
priate evidence, the cost of the evidence is an important consideration. The types of 
tests are listed below in order of increasing cost: 


¢ Substantive analytical procedures 

* Risk assessment procedures, including procedures to obtain an understanding 
of internal control 

* Tests of controls 

¢ Substantive tests of transactions 

* Tests of details of balances 


Substantive analytical procedures are the least costly because of the relative ease of 
making calculations and comparisons. Often, considerable information about potential 
misstatements can be obtained by simply comparing two or three numbers. However, 
when substantive analytical procedures are the primary evidence for an account bal- 
ance, or are used to reduce tests of details of balances, the auditor must develop a suf- 
ficiently precise expectation to support the account balance. This may involve more 
complex calculations and obtaining evidence to support the expectation. 

Risk assessment procedures, including procedures to obtain an understanding 
of internal control, are not as costly as other audit tests because auditors can easily 
make inquiries and observations and perform planning analytical procedures. Also, 
examining such things as documents summarizing the client’s business operations 
and processes and management and governance structure are relatively cheaper than 
other audit tests. 

Because tests of controls also involve inquiry, observation, and inspection, their 
relative costs are also low compared to substantive tests. However, tests of controls 
are more costly relative to the auditor’s risk assessment procedures due to the greater 
extent of testing required to obtain evidence that a control is operating effectively, 
especially when those tests of controls involve reperformance. Often, auditors can 
perform a large number of tests of controls quickly using audit software. Such soft- 
ware can test controls in clients’ computerized accounting systems, such as in com- 
puterized accounts receivable systems that automatically authorize sales to existing 
customers by comparing the proposed sales amount and existing accounts receivable 
balance with each customer’s credit limit. 

Substantive tests of transactions cost more than tests of controls that do not 
include reperformance because the former often require recalculations and tracings. 
In a computerized environment, however, the auditor can often perform substantive 
tests of transactions quickly for a large sample of transactions. 

Tests of details of balances almost always cost considerably more than any of the 
other types of procedures because of the cost of procedures such as sending confir- 
mations and counting inventories. Because of the high cost of tests of details of bal- 
ances, auditors usually try to plan the audit to minimize their use. 

Naturally, the cost of each type of evidence varies in different situations. For 
example, the cost of an auditor’s test-counting inventory (a substantive test of the 
details of the inventory balance) often depends on the type and dollar value of the 
inventory, its location, and the number of different items, as well as the effectiveness 
of the client’s controls over inventory. 


Relative Costs 
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Substantive Analytical 
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Substantive Tests 
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Tests of Controls and 
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To better understand tests of controls and substantive tests, let’s examine how they 
differ. An exception in a test of control only indicates the likelihood of misstatements 
affecting the dollar value of the financial statements, whereas an exception in a sub- 
stantive test of transactions or a test of details of balances is a financial statement mis- 
statement. Exceptions in tests of controls are called control test deviations. 

From Chapter 12, you may recall the three levels of control deficiencies: defi- 
ciencies, significant deficiencies, and material weaknesses. Auditors are most 
likely to believe material dollar misstatements exist in the financial statements 
when control test deviations are considered to be significant deficiencies or mate- 
rial weaknesses. Auditors should then perform substantive tests of transactions 
or tests of details of balances to determine whether material dollar misstatements 
have actually occurred. 

Assume that the client’s controls require an independent clerk to verify the 
quantity, price, and extension of each sales invoice, after which the clerk must initial 
the duplicate invoice to indicate performance. A test of control audit procedure is to 
inspect a sample of duplicate sales invoices for the initials of the person who verified 
the information. If a significant number of documents lack initials, the auditor should 
consider implications for the audit of internal control over financial reporting and 
follow up with substantive tests for the financial statement audit. This can be done 
by extending tests of duplicate sales invoices to include verifying prices, extensions, 
and footings (substantive tests of transactions) or by increasing the sample size for 
the confirmation of accounts receivable (substantive test of details of balances). Even 
though the control is not operating effectively, the invoices may still be correct, espe- 
cially if the person originally preparing the sales invoices did a conscientious and 
competent job. 

On the other hand, if no documents or only a few of them are missing initials, the 
control will be considered effective and the auditor can therefore reduce substantive 
tests of transactions and tests of details of balances. However, some reperformance 
and recalculation substantive tests are still necessary to provide the auditor assur- 
ance that the clerk did not initial documents without actually performing the control 
procedure or performed it carelessly. Because of the need to complete some reperfor- 
mance and recalculation tests, many auditors perform them as a part of the original 
tests of controls. Others wait until they know the results of the tests of controls and 
then determine the total sample size needed. 


Like tests of controls, analytical procedures only indicate the likelihood of misstate- 
ments affecting the dollar value of the financial statements. Unusual fluctuations in 
the relationships of an account to other accounts, or to nonfinancial information, 
may indicate an increased likelihood that material misstatements exist without nec- 
essarily providing direct evidence of a material misstatement. When analytical pro- 
cedures identify unusual fluctuations, auditors should perform substantive tests of 
transactions or tests of details of balances to determine whether dollar misstatements 
have actually occurred. If the auditor performs substantive analytical procedures and 
believes that the likelihood of material misstatement is low, other substantive tests can 
be reduced. For accounts with small balances and only minimal potential for material 
misstatements, such as many supplies and prepaid expense accounts, auditors often 
limit their tests to substantive analytical procedures if they conclude the accounts are 
reasonably stated. 


There is a trade-off between tests of controls and substantive tests. During planning, 
auditors decide whether to assess control risk below the maximum. When they do, 
they must then perform tests of controls to determine whether the assessed level of 
control risk is supported. (They must always perform tests of controls in an audit of 
internal control over financial reporting.) If tests of controls support the control risk 


Arens, Alvin, et4I5Apiditing and AssuRaré Seqvitdd EBs GIOBRIG@EGS Pearson Education, Limited, 2016. ProQuest Ebook Central, 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-09 01:48:25. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, Lititea peed 6. Po du@a/ ERAak CAD IT STRATEGY AND AUDIT PROGRAM 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?’docID=51 85606. 


Audit Assurance from Substantive Tests and Tests of 


FIGURE 13-3 Controls at Different Levels of Internal Control Effectiveness 
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assessment, planned detection risk in the audit risk model is increased, and planned 
substantive tests can therefore be reduced. Figure 13-3 shows the relationship be- 
tween substantive tests and control risk assessment (including tests of controls) at dif- 
fering levels of internal control effectiveness. 

The shaded area in Figure 13-3 is the maximum assurance obtainable from 
control risk assessment and tests of controls. At any point to the left of point A, 
assessed control risk is 1.0 because the auditor initially evaluated internal controls 
as ineffective based on the performance of risk assessment procedures. Notice in 
Figure 13-3 that any point to the right of point B results in no further reduction of 
control risk because even with maximum reliance on controls, some substantive 
procedures are still required in an audit of financial statements. Because the audit 
of financial statements and the audit of internal control over financial reporting 
are integrated, accelerated filer public company audits will most likely be repre- 
sented by point B. 

The auditor’s understanding of internal control performed as part of risk assess- 
ment procedures provides the basis for the auditor’s initial assessment of control risk. 
Assuming that the auditor determines that the design of internal control is effective 
and the controls are implemented, the auditor selects a point within the shaded area 
of Figure 13-3 that is consistent with the assessed control risk the auditor decides to 
support with tests of controls. Assume the auditor contends that internal control 
effectiveness is at point C. Tests of controls at the C, level will be extensive to support 
the low assessment of control risk. The auditor may then determine through the per- 
formance of tests of controls that the initial low assessment of control risk at point C 
is not supported and that internal control is not operating effectively. Then, the audi- 
tor’s revised control risk assessment would be at the maximum (point C3) and audit 
assurance will be obtained from substantive tests. Any point between the two, such 
as Cp, represents situations where the audit assurance obtained from tests of controls 
is less than the maximum level of assurance represented by point C). If C is selected, 
the audit assurance from tests of controls is C;— C, and from substantive tests is C— C>. 
The auditor will likely select Cy, Cz, or C3 based on the relative cost of tests of controls 
and substantive tests. 
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EVIDENCE MIX 
OBJECTIVE 13-30 


Understand the concept of evi- 
dence mix and how it should be 
varied in different circumstances. 
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The choice of which types of tests to use and how extensively they need to be per- 
formed can vary widely among audits for differing levels of internal control effec- 
tiveness and inherent risks. Even within a given audit, variations may occur from 
cycle to cycle. To obtain sufficient appropriate evidence in response to risks identified 
through risk assessment procedures, auditors employ a combination of the four re- 
maining types of tests. This combination is often called the evidence mix, which is 
illustrated in Table 13-3 for four different audits. In each case, assume that sufficient 
appropriate evidence was accumulated. In each audit, you should be able to determine 
the description of the client from the evidence mix in Table 13-3. 


Analysis of Audit | This client is a large company with sophisticated internal controls 
and low inherent risk. Therefore, the auditor performs extensive tests of controls and 
relies heavily on the client’s internal controls to reduce substantive tests. Extensive 
substantive analytical procedures are also performed to reduce other substantive 
tests. Substantive tests of transactions and tests of details of balances are therefore 
minimized. Because of the emphasis on tests of controls and substantive analytical 
procedures, this audit can be done relatively inexpensively. This audit likely represents 
the mix of evidence used in the integrated audit of a public company’s financial state- 
ments and internal control over financial reporting. 


Analysis of Audit 2 This company is medium sized, with some controls and a few 
inherent risks. The auditor has decided to do a medium amount of testing for all types 
of tests except substantive analytical procedures, which will be done extensively. More 
extensive testing will be required if specific inherent risks are discovered. 


Analysis of Audit 3 This company is medium sized but has few effective controls 
and significant inherent risks. Perhaps management has decided that better internal 
controls are not cost effective. Because of the lack of effective internal control, we can 
assume this company is probably a nonpublic company. No tests of controls are done 
because reliance on internal controls is inappropriate when controls are insufficient 
for a nonpublic company. The auditor emphasizes tests of details of balances and 
substantive tests of transactions, but some substantive analytical procedures are also 
done. Substantive analytical procedures are usually performed to reduce other sub- 
stantive tests because they provide evidence about the likelihood of material misstate- 
ments. If the auditor already expects to find material misstatements in the account 
balances, additional analytical procedures are not cost effective. The cost of the audit 
is likely to be relatively high because of the amount of detailed substantive testing. 


Analysis of Audit 4 The original plan on this audit was to follow the approach used 
in Audit 2. However, the auditor likely found extensive control test deviations and 
significant misstatements while performing substantive tests of transactions and 


8 kecee Variations in Evidence Mix 


Substantive Substantive 
Tests of Tests of Analytical Tests of Details 
Controls Transactions Procedures of Balances 
Audit | E S E S 
Audit 2 M M E M 
Audit 3 N E M E 
Audit 4 M E E E 


E = Extensive amount of testing; M = Medium amount of testing; S = Small amount of testing; N = No testing. 


Arens, Alvin, et4I5diting and AssuRaré Sewvitdd BOs GIGBRIG@EGS Pearson Education, Limited, 2016. ProQuest Ebook Central, 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=51 85606. 


Created from undip-ebooks on 2021-07-09 01:48:25. 


substantive analytical procedures. Therefore, the auditor concluded that the internal 
controls were not effective. Extensive tests of details of balances are performed to off- 
set the unacceptable results of the other tests. The cost of this audit is higher because 
tests of controls and substantive tests of transactions were performed but cannot be 
used to reduce tests of details of balances. 


CONCEPT CHECK 


|. What are the five types of tests auditors use to determine whether financial statements 
are fairly stated? Identify which tests are performed to reduce control risk and which 
tests are performed to reduce planned detection risk. 


2. In Figure |3-3 (p. 441), explain the differences among C3, C>, and C;. Explain the circum- 
stances under which it would be a good decision to obtain audit assurance from substan- 
tive tests at point C;. Do the same for points Cz and C3. 


DESIGN OF THE AUDIT PROGRAM 
OBJECTIVE 13-40 


Design an audit program. 


After the auditor uses risk assessment procedures to determine the appropriate 
emphasis on each of the other four types of tests, the specific audit procedures for each 
type of test must be designed. These audit procedures are then combined to form the 
audit program. In most audits, the engagement in-charge auditor recommends the 
evidence mix to the engagement manager. After the evidence mix is approved, the in- 
charge prepares the audit program or modifies an existing program to satisfy all audit 
objectives, considering such things as materiality, evidence mix, inherent risk, control 
risk, and any identified significant risks, as well as the need for an integrated audit for 
larger public companies. The in-charge is also likely to get approval from the manager 
before performing the audit procedures or delegating their performance to an assistant. 

Let’s focus on designing audit programs to satisfy transaction-related and balance- 
related audit objectives. Keep in mind the auditor will also design audit programs to 
satisfy presentation and disclosure-related audit objectives. In addition to the section 
of the audit program that contains the risk assessment procedures performed in plan- 
ning, the audit program for most audits is designed in three additional parts: tests of 
controls and substantive tests of transactions, substantive analytical procedures, and 
tests of details of balances. 


SOLE 
PRACTITIONER 
SANCTIONED 
FOR INSUFFICENT 
AUDIT 

EVIDENCE AND 
DOCUMENTATION 
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John Kinross-Kennedy was a sole practitioner CPA 
with six public company audit clients that were 
traded on the over-the-counter (OTC) market and 
OTC bulletin board, and at times was the indepen- 
dent accountant for as many as 23 public companies. 
PCAOB audit standards require that audit documen- 
tation contain sufficient information to enable an 
experienced auditor with no previous connection to 
the engagement to (a) understand the nature, timing, 
extent, and results of the procedures performed, 
evidence obtained, and conclusions reached, and (b) 
determine who performed the work and the date 
such work was completed as well as the person who 
reviewed the work and the date of the review. 
Kinross-Kennedy did not include written au- 
dit programs or document his conclusions for 
most audit areas. He frequently did not sign or 
initial and date the audit workpapers that he pre- 
pared. He engaged Wilfred Hanson to perform an 


engagement quality review for five of the 40 audit 
reports he issued for fiscal years after 2009, but 
he did not obtain any reviews for the remaining 
35 engagements, and he did not verify whether 
Hanson was qualified to perform the reviews. For 
one of the engagements, Kinross-Kennedy failed 
to adequately test revenues and cost of goods 
sold, and also relied upon documents he could 
not read, either because they were written in 
Chinese or illegible. Other SEC findings included 
failures in the confirmation process, failure to ad- 
equately evaluate related party transactions, and 
inadequate evaluation of audit differences identi- 
fied during testing. Kinross-Kennedy was barred 
from practicing before the SEC for five years. 


Source: Securities and Exchange Commission Accounting and 
Auditing Enforcement Release No. 3502, September 30, 2013 


(www.sec.gov). 
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Tests of Controls and 
Substantive Tests of 


Transactions 


Each transaction cycle will likely be evaluated using a separate set of sub-audit 
programs. In the sales and collection cycle, for example, the auditor might use: 


¢ A test of controls and substantive tests of transactions audit program for sales 
and cash receipts 

¢ A substantive analytical procedures audit program for the entire cycle 

Tests of details of balances audit programs for cash, accounts receivable, bad 
debt expense, allowance for uncollectible accounts, and miscellaneous accounts 
receivable 


The tests of controls and substantive tests of transactions audit program normally 
includes a descriptive section documenting the understanding of internal control 
obtained during the performance of risk assessment procedures. The program is also 
likely to include a description of the procedures performed to obtain an understanding 
of internal control and a description of the assessed level of control risk. The auditor 
uses this information to develop the tests of controls and substantive tests of transac- 
tions audit program. Figure 13-4 illustrates the methodology used to design these tests. 
(We previously discussed the steps in the first three boxes of Figure 13-4 on pages 368— 
381 of Chapter 12.) The audit procedures include both tests of controls and substantive 
tests of transactions, which vary depending on assessed control risk. When controls 
are effective and control risk is assessed as low, auditors put heavy emphasis on tests of 
controls. Some substantive tests of transactions will also be included. If control risk is 
assessed at maximum, only substantive tests of transactions will be used, assuming the 
audit is of a smaller public company or a nonpublic company. 


Audit Procedures When designing tests of controls and substantive tests of transac- 
tions, auditors emphasize satisfying the transaction-related audit objectives developed 
in Chapter 6. Auditors follow a four-step approach to reduce assessed control risk. 


1. Apply the transaction-related audit objectives to the class of transactions being 
tested, such as sales. 


Methodology for Designing Tests of Controls and 


neta a! Substantive Tests of Transactions 


Understand 
internal control 


Assess planned 
control risk 


Determine 
extent of 
tests of controls* 


Design tests of Audit procedures 
controls and 
substantive tests Sample size 
of transactions 
to meet Items to select 
transaction-related 
audit objectives Timing 


*Extent of tests of controls is determined by planned reliance on controls. For public companies 
required to have an audit of internal control, testing must be sufficient to issue an opinion on 
internal control over financial reporting. 
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2. Identify key controls that should reduce control risk for each transaction-related 
audit objective. 

3. Develop appropriate tests of controls for all internal controls that are used to re- 
duce the preliminary assessment of control risk below maximum (key controls). 

4. For potential types of misstatements related to each transaction-related audit 
objective, design appropriate substantive tests of transactions, considering defi- 
ciencies in internal control and expected results of the tests of controls in step 3. 


Figure 13-5 summarizes this four-step approach to designing tests of controls and 
substantive tests of transactions. 


Because substantive analytical procedures are relatively inexpensive, many auditors 
perform them on all audits. Analytical procedures performed during substantive 
testing, such as for the audit of accounts receivable, are typically more focused and 
more extensive than those done as part of planning. The auditor is likely to use disag- 
gregated data to increase the precision of the auditor’s expectations. During planning, 
the auditor might calculate the gross margin percentage for total sales, while during 
substantive testing of accounts receivable, the auditor might calculate gross margin 
percentage by month or by line of business, or possibly both. Analytical procedures 
calculated using monthly amounts will typically be more effective in detecting mis- 
statements than those calculated using annual amounts, and comparisons by line of 
business will usually be more effective than companywide comparisons. 

If sales and accounts receivable are based on predictable relationships with non- 
financial data, the auditor often uses that information for analytical procedures. For 
example, if revenue billings are based on the number of hours professionals charge to 
clients, such as in law firms and other organizations that provide services, the auditor 
can estimate total revenue by multiplying hours billed by the average billing rate. 


Four-Step Approach to Designing Tests of Controls and 
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When the auditor plans to use analytical procedures to provide substantive assur- 
ance about an account balance, the data used in the calculations must be considered 
sufficiently reliable. This is true for all data, especially nonfinancial data. For example, 
if auditors estimate total revenue using hours billed and the average billing rate, they 
must be confident that both numbers are reasonably reliable. 


To design tests of details of balances audit procedures, auditors use a methodology 
oriented to the balance-related audit objectives we covered in Chapter 6 (pp. 163-165). 
If the auditor is verifying accounts receivable, for example, the planned audit procedures 
must be sufficient to satisfy each of the balance-related audit objectives. In planning 
tests of details of balances audit procedures to satisfy these objectives, many auditors 
follow a methodology such as the one shown in Figure 13-6 for accounts receivable. The 
design of these procedures is normally the most difficult part of the entire planning pro- 
cess because it is subjective and requires considerable professional judgment. 

Let’s discuss the key decisions in designing tests of details of balances audit proce- 
dures as shown in Figure 13-6. 


Tests of Details 
of Balances 


Identify Significant Risks and Assess Risk of Material Misstatement for Accounts 
Receivable As part of gaining an understanding of the client’s business and indus- 
try, the auditor identifies and evaluates significant client business risks to determine 
whether they result in a significant risk or increased risk of material misstatements in 
the financial statements. If the auditor identifies a significant risk due to either fraud 
or error, the auditor should identify client controls to mitigate the risk, and design 
substantive procedures to determine whether material misstatements occurred due 
to the significant risk. An increased risk of material misstatement should be incorpo- 
rated in the auditor’s evaluation of inherent risk or control risk, which will then affect 
the appropriate extent of evidence. 


Methodology for Designing Tests of Details 


FIGURE 13-8 of Balances—Accounts Receivable 


Identify significant risks and assess 
risk of material misstatement 
for accounts receivable 


Set performance materiality 
for accounts receivable 


Assess control risk for sales 
and collection cycle 


Design and perform tests of 
controls and substantive tests 
of transactions for 
sales and collection cycle 


Design and perform substantive 
analytical procedures for 
accounts receivable balance 


Design tests of details of 
accounts receivable balance Sample size 

to satisfy balance-related leems to select 

audit objectives 


Audit procedures 
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Timing 
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PEER REVIEW To help improve audit practices, the AICPA Peer e Failure to communicate and/or document 
DATA IMPROVES pe Team has been ccllcesng a on Matters required communications with those charged with 
or Further Consideration (MFCs).” Matters identi- governance. 

AUDITS fied during peer reviews are retained electronically e Insufficient appropriate evidence in audit docu- 
using an MFC form to identify problem areas. Audit mentation to support the firm’s opinion on the 
firms can use this information to identify areas where financial statements. 
they can improve audit quality. 

The most common audit-related matters identified 
include: 


In addition to findings related to audit standards, 
the Peer Review Team also reports findings related to 
compliance with GAAP accounting and review services, 


e Failure to update the report to conform to audit service organization reports, governmental audits, 
standards. and other areas. The listing of findings will be updated 
Failure to appropriately document planning proce- quarterly to provide auditors with current information 
dures, including risk assessment and linkage of risks on matters most frequently found in peer reviews. 
to procedures performed, planning analytics, and 
control testing. Source: Adapted from Ken Tysiac, “Learn from Data to 
Client representation letters that were dated Improve Audits,” Journal of Accountancy (September 2014), 


pp. 34-37. Copyright by American Institute of CPAs. All 


incorrectly, did not cover the appropriate periods, 
rights reserved. Used with permission. 


or were missing required representations. 


Inherent risk is assessed by identifying any aspect of the client’s history, environ- 
ment, or operations that indicates a high likelihood of misstatement in the current 
year’s financial statements. Considerations affecting inherent risk that may apply to 
accounts receivable include makeup of accounts receivable, nature of the client’s busi- 
ness, initial engagement, and other inherent risk factors discussed in Chapter 9. An 
account balance for which inherent risk has been assessed as high will result in more 
evidence accumulation than for an account with low inherent risk. 

Inherent risk also can be extended to individual balance-related audit objectives. 
For example, adverse economic conditions in the client’s industry may make the audi- 
tor conclude that a high risk of uncollectible accounts receivable (realizable value 
objective) exists. Inherent risk can still be low for all other objectives. 


Set Performance Materiality Auditors must decide the preliminary judgment about 
materiality for the audit as a whole and then allocate the total to account balances, to 
establish performance materiality for each significant balance. For a lower materiality 
level, more testing of details is required, and vice versa. Some auditors allocate perfor- 
mance materiality to individual balance-related audit objectives, but most do not. 


Assess Control Risk for the Sales and Collection Cycle The methodology for 
evaluating control risk will be applied to both sales and cash receipts in the audit of 
accounts receivable. Effective controls will reduce control risk and, along with it, the 
amount of evidence required for substantive tests of transactions and tests of details of 
balances. Inadequate controls will increase the substantive evidence needed. 


Design and Perform Tests of Controls and Substantive Tests of Transactions for 
the Sales and Collection Cycle Tests of controls and substantive tests of transac- 
tions are designed with the expectation that certain results will be obtained. These 
predicted results affect the design of tests of details of balances. For example, the audi- 
tor usually plans to do extensive tests of controls when control risk is assessed as low. 
This will permit less extensive substantive testing of accounts receivable balances. 


Design and Perform Substantive Analytical Procedures for Accounts Receivable 
Balance Auditors perform substantive analytical procedures for an account such as 
accounts receivable for two purposes: to identify possible misstatements in the ac- 
count balance and to reduce detailed audit tests. The results of substantive analytical 
procedures directly affect the extent of tests of details of balances. 
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Design Tests of Details of Accounts Receivable Balance to Satisfy Balance-Related 
Audit Objectives The planned tests of details of balances include audit procedures, 
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sample size, items to select, and timing. Procedures must be selected and designed for 
each account and each balance-related audit objective within each account. 

A difficulty auditors face in designing tests of details of balances is the need 
to predict the outcome of the tests of controls, substantive tests of transactions, 
and substantive analytical procedures before they are performed. This is necessary 
because the auditor should design tests of details of balances during the planning 
phase, but the appropriate design depends on the outcome of the other tests. In 
planning tests of details of balances, the auditor usually predicts few or no excep- 
tions will occur in tests of controls, substantive tests of transactions, and substan- 
tive analytical procedures. If the results of the tests of controls, substantive tests 
of transactions, and substantive analytical procedures are not consistent with the 
predictions, auditors will need to change the tests of details of balances as the audit 
progresses. 

Figure 13-7 summarizes the discussion about the approach to designing tests of 
details of balances applied to accounts receivable. The light shaded boxes on the left 
side of the figure correspond to the design of tests of controls and substantive tests 
of transactions, as presented in Figure 13-5 (p. 445). Figure 13-7 builds on Figure 13-5 
by also showing how tests of controls and substantive tests of transactions affect the 
design of the tests of details of balances. Other factors affecting that decision are shown 
in the darker shaded boxes on the right side of the figure. 

One of the most challenging parts of auditing is properly applying the factors 
that affect tests of details of balances. Each of the factors is subjective. Moreover, the 
impact of each factor on tests of details of balances is equally subjective. For example, 


FIGURE 13-7. Approach to Designing Tests of Details of Balances 


Apply transaction- 
related audit objectives 
to a class of transactions 


yy 


Identify key controls 
and make a 
preliminary assessment 
of control risk 
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— of controls analytical 


Apply balance- Decide 

related audit performance <— 
objectives to an materiality 
account balance 


Make preliminary 
judgment about 
materiality 


Design tests Design substantive 


procedures 
Audit procedures 


Sample size Design tests Identify Decide 
of details significant acceptable 
Items to select of balances risks audit risk 


Timing Audit procedures 


Assess 


Sample size : : 
P inherent risk 


Items to select 


Timing 


Design substantive 
tests of transactions 


Audit procedures 


Sample size 


Items to select 


Timing 
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FIGURE 13-8 Disaggregation Level to Which Planning Activities Are Applied 


PLANNING ACTIVITY 


Accept client and perform initial planning 


ma Overall Audit 


LEVEL OF DISAGGREGATION 


Account 


Related Audit Objective 


if inherent risk is reduced from medium to low, there is agreement that tests of details 
of balances can be reduced. Auditors need to use considerable professional judgment 
to decide the specific effects of such a change on audit procedures, sample size, items 
to select, and timing. 


The various planning activities we have discussed in Chapters 6 through 13 are ap- 
plied at different levels of disaggregation, depending on the nature of the activity. 
Figure 13-8 shows the primary planning activities and the levels of disaggregation 
normally applied. These levels of disaggregation range from the overall audit to 
the balance-related audit objective for each account. For example, risk assessment 


Balance-Related Audit Objective 


Understand client's business and industry 


Identify significant risks 


Set preliminary judgment about materiality 


Set performance materiality 


Understand internal control: 
Control environment 

Risk assessment 

Control activities 

Information and communication 


Monitoring 


of 8) 5,01 8} 


Identify key internal controls 


Identify internal control deficiencies 


Design tests of controls 


Design substantive tests of transactions 


Assess control risk 


Assess inherent risk 


Assess acceptable audit risk 


Design substantive analytical procedures 


Design tests of details of balances 


P = Primary level to which planning activity is applied 


Level of Disaggregation 
of Planning Activities 
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Illustrative Audit 
Program 


Relationship of 
Transaction-Related 
Audit Objectives to 
Balance-Related and 
Presentation and 
Disclosure-Related Audit 
Objectives 


Compare and contrast transac- 
tion-related audit objectives with 
balance-related and presenta- 
tion and disclosure-related audit 
objectives. 
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procedures related to obtaining background information about the client’s business 
and industry pertain to the overall audit. Auditors will first use that information 
in assessing acceptable audit risk for the engagement as whole. They will then use 
information about the client and industry obtained through risk assessment proce- 
dures to assess risk of material misstatement for specific audit objectives, including 
any significant risks whether due to fraud or error. As the audit progresses, they will 
likely use that information when making decisions about tests of details of balances. 
Similarly, the auditor will first assess the risk of fraud for the overall audit, and later 
consider whether any fraud risks exist that may affect fraud risk assessments for 
specific accounts and the audit procedures and sample sizes for tests of details of bal- 
ances for accounts that are affected. 


Auditing standards require the auditor to use a written audit program. Table 13-4 
shows the tests of details of balances segment of an audit program for accounts 
receivable. The format used relates the audit procedures to the balance-related audit 
objectives. Notice that most procedures satisfy more than one objective, and that 
more than one audit procedure is used for each objective. Audit software helps 
auditors select appropriate audit procedures and organize them into an audit pro- 
gram, considering significant risk, inherent risk, control risk, and other planning 
considerations. Audit procedures can be added or deleted as the auditor deems nec- 
essary. For most audit procedures, sample size, items to select, and timing can also 
be changed. 

The audit program in Table 13-4 was developed after consideration of all factors 
affecting tests of details of balances and is based on several assumptions about inher- 
ent risk, control risk, and the results of tests of controls, substantive tests of transac- 
tions, and substantive analytical procedures. As indicated, if those assumptions are 
materially incorrect, the planned audit program will likely need revision. For exam- 
ple, analytical procedures performed near the end of the audit can indicate potential 
misstatements for several balance-related audit objectives, requiring a revision of the 
audit plan to gather additional evidence. 


We discussed earlier that tests of details of balances must be designed to satisfy 
balance-related audit objectives for each account and the extent of these tests can 
be reduced when transaction-related audit objectives have been satisfied by tests of 
controls or substantive tests of transactions. You also need to understand how each 
transaction-related audit objective relates to each balance-related audit objective. 
Table 13-5 (p. 452) gives a general presentation of these relationships and illustrates 
that, even when all transaction-related audit objectives are met, the auditor will still 
rely primarily on substantive tests of balances to meet the following balance-related 
audit objectives: 


¢ Realizable value 
* Rights and obligations 


Additional substantive tests of balances are also likely for the other balance- 
related audit objectives, depending on the results of the tests of controls and substan- 
tive tests of transactions. 

This chapter emphasizes the relationship between audit procedures performed 
to satisfy transaction-related audit objectives and balance-related audit objectives. 
The auditor also performs audit procedures to obtain assurance about the four 
presentation and disclosure-related audit objectives described in Chapter 6. The 
auditor’s approach to obtaining evidence related to presentation and disclosure- 
related audit objectives is consistent with the approach described in this chapter. 
The auditor performs tests of controls and substantive procedures to obtain assur- 
ance that all audit objectives are achieved for information and amounts included in 
those disclosures. 
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KE Tests of Details of Balances Audit Program for Accounts Receivable 


Accounts Receivable Balance-Related 
Audit Objectives 


Items to Select 
Tests of Details of Balances Sample Size for Each _ from the Timing of 
Audit Procedures Audit Procedure Population the Test 


4a Detail tie-in 


. Obtain an aged list of receivables: Trace 20 items; foot Random | 
trace accounts to the master file, two pages and all 
foot schedule, and trace to general subtotals 
ledger 


Existence 


Completeness 
| Classification 


| Accuracy 


2. Obtain an analysis of the allowance All All 1 X 
for doubtful accounts and bad debt 
expense: test accuracy, examine 
authorization for write-offs, and 
trace to general ledger. 


3. Obtain direct confirmation of 50 10 largest ie 
accounts receivable and per- 40 random 
form alternative procedures for 
nonresponses. 


4. Review accounts receivable control NA NA i 
account for the period. Investigate 
the nature of and review support 
for any large or unusual entries or 
any entries not arising from normal 
journal sources. Also investigate any 
significant increases or decreases in 
sales toward year-end. 


uw 


. Review receivables for any that have _— All All 1 
been assigned or discounted. 


6. Investigate collectibility of account NA NA Ye 
balances. 


7. Review lists of balances for amounts All All Vf 
due from related parties or employ- 
ees, credit balances, and unusual 
items, as well as notes receivable 
due after one year. 


8. Determine that proper cutoff pro- 20 transactions for sales 50% before and Ni 
cedures were applied at the balance and cash receipts; 10 50% after 
sheet date to ensure that sales, for credit memos year-end 
cash receipts, and credit memos 
have been recorded in the correct 
period. 


| = Interim; Y = Year-end; NA = Not applicable. 
*Confirmations sent as of October 31. 


Several evidence-related terms have been used in the past several chapters. To help you 
distinguish and understand each of these terms, we summarize them in Table 13-6 
(p. 453), and comment briefly on each term. 
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Phases of the Audit Process The four phases of the audit process in the first column 
are the primary way that audits are organized, as described in Chapter 6. Figure 13-9 
(p. 454) shows the key components of these four phases of the audit process. 


SUMMARY OF KEY EVIDENCE-RELATED TERMS 
OBJECTIVE 13-6 


Understand key evidence-related 
terms. 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, Liitea pats. Po>du@a/ ERAak ICAtudDIT STRATEGY AND AUDIT PROGRAM 467 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-07-09 01:48:25. 


Riko Relationship of Transaction-Related Audit Objectives to Balance-Related Audit Objectives 


Transaction- 


Related Audit Balance-Related Audit Nature of 


Objective Objective 


Occurrence Existence or completeness Direct There is a direct relationship of the occurrence transaction-related audit 


Relationship Explanation 


objective to the existence balance-related audit objective if a class of 
transactions increases the related account balance (e.g., sales transactions 
increase accounts receivable). 

There is a direct relationship of the occurrence transaction-related audit 
objective to the completeness balance-related audit objective if a class 
of transactions decreases the related account balance (e.g., cash receipts 
transactions decrease accounts receivable). 


summarization 


Completeness Completeness or existence Direct See comments for existence objective. 
Accuracy Accuracy Direct — 
Posting and Detail tie-in Direct — 


Classification Classification Direct — 
Timing Cutoff Direct _— 
Realizable value None Few internal controls over realizable value are related to classes of transac- 
tions, but the credit approval process affects the extent of tests. 
Rights and obligations None Few internal controls over rights and obligations are related to classes of 


transactions. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Audit Objectives These are the objectives of an audit that must be met before the auditor 
can conclude that any given class of transactions or account balance is fairly stated. There 
are six transaction-related, eight balance-related, and four presentation and disclosure- 
related audit objectives, all of which are listed in Table 13-6. Observe that transaction- 
related audit objectives are primarily addressed in phase II, balance-related audit objec- 
tives in phase III, and presentation and disclosure-related audit objectives in phase IV. 


Types of Tests The five types of audit tests discussed earlier in the chapter that audi- 
tors use to determine whether financial statements are fairly stated are included in 
the third column in Table 13-6. Observe that analytical procedures are used in Phase 
III and Phase IV. Keep in mind that analytical procedures are required as part of the 
planning risk assessment procedures in Phase I. Recall that analytical procedures are 
also required at the completion of the audit, which is why they are included in Phase 
IV. It may appear unusual to have tests of details of balances included in Phase IV. We 
will explain the nature of the procedures auditors use during completing the audit in 
Chapter 24, including meeting the presentation and disclosure-related objectives. 


Evidence Decisions The four subcategories of decisions the auditor makes in accu- 
mulating audit evidence are included in the fourth column in Table 13-6. Except for 
substantive analytical procedures and risk assessment procedures, all four evidence 
decisions apply to each type of test. 


Types of Evidence The eight broad categories of evidence auditors accumulate are 
included in the last column of Table 13-6. The relationship of types of evidence to 
types of tests was summarized in Table 13-2 on page 438. 


CONCEPT CHECK 
1. State the four-step approach to designing tests of controls and substantive tests of 
transactions. 


2. Explain the relationship of performance materiality, inherent risk, and control risk to 
planned tests of details of balances. 


Arens, Alvin, et4i@@diting and AssuRaré Sowvitdd EBs GIdBRIG@EGS Pearson Education, Limited, 2016. ProQuest Ebook Central, 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-09 01:48:25. 


TABLE 13-6 


Phases of 
the Audit Process 


Plan and Design an Audit 


Approach (Phase 1!) 


Audit Objectives 


Types of Tests 


Risk assessment procedures 
¢ Procedures to understand 
client’s business and 
industry 

Procedures to understand 
internal control 

Planning analytical 
procedures 


Relationship Among Five Key Evidence-Related Terms 


Evidence Decisions 


* Audit procedures 
* Timing 


Types of Evidence 


Inspection 
Inquiries of client 
Analytical procedures 


Perform Tests of Controls 


and Substantive Tests 
of Transactions 
(Phase II) 


Transaction-related audit 
objectives 

* Occurrence 

* Completeness 

° Accuracy 

* Posting and summarization 

* Classification 

* Timing 


Procedures to obtain an 
understanding and tests of 
controls 


Substantive tests of 
transactions 


* Audit procedures 
Sample size 
Items to select 
Timing 


Audit procedures 
Sample size 
Items to select 
Timing 


Inspection 
Observation 
Inquiries of client 
Reperformance 
Recalculation 


Perform Substantive 
Analytical Procedures 


Balance-related audit objectives 
° Existence 


Substantive analytical 
procedures 


Audit procedures 
Timing 


Physical examination 
Confirmation 


and Tests of Details of * Completeness Inspection 

Balances (Phase III) ° Accuracy Tests of details of balances * Audit procedures Inquiries of client 
* Classification * Sample size Reperformance 
° Cutoff * Items to select Analytical procedures 
* Detail tie-in * Timing Recalculation 


* Realizable value 
* Rights and obligations 


Presentation and disclosure- 
related audit objectives 

* Occurrence and rights and 
obligations 


Complete the Audit and 
Issue an Audit Report 
(Phase IV) 


Analytical procedures Audit procedures Analytical procedures 
Timing Inspection 


Inquiries of client 


Tests of details of balances Audit procedures 


* Completeness * Sample size 
* Accuracy and valuation * Items to select 
* Classification and * Timing 


understandability 


SUMMARY OF THE AUDIT PROCESS 
OBJECTIVE 13-7 


Integrate the four phases of the 
audit process. 


Figure 13-9 (p. 454) shows the four phases for the entire audit process, and Table 13-7 
(p. 455) shows the timing of the tests in each phase for an audit with a December 31 
balance sheet date. 


Auditors use information obtained from risk assessment procedures related to client 
acceptance and initial planning, understanding the client’s business and industry, and 
performing preliminary analytical procedures (first three boxes in Figure 13-9) primarily 
to assess acceptable audit risk and identify significant risks. Auditors use assessments of 
materiality, acceptable audit risk, inherent risk, control risk, and any identified signifi- 
cant risks due to fraud or errors to develop an overall audit strategy and audit program. 

At the end of phase I, the auditor should have a well-defined audit strategy and 
plan and a specific audit program for the entire audit. 


Phase I: Plan and Design 
an Audit Approach 


Auditors perform tests of controls and substantive tests of transactions during this 


phase. The objectives of phase II are to: idee arsenals a niaaoke 


Controls and Substantive 
Tests of Transactions 
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1. Obtain evidence in support of the specific controls that contribute to the audi- 
tor’s assessed control risk (that is, where it is reduced below the maximum), in- 
cluding integrated audits of internal control over financial reporting. 

2. Obtain evidence in support of the monetary correctness of transactions. 
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FIGURE 13-9 Summary of the Audit Process 


PHASE | Accept client and perform 
Plan and design an initial audit planning 
audit approach Eee as 
Understand the client’s 
business and industry 
$$$ 
Perform preliminary 
analytical procedures 


Set preliminary judgment 
of materiality and 
performance materiality 
I 
Identify significant risks 
due to fraud or error 


Assess inherent risk 


Understand internal control 
and assess control risk 
I 
Finalize overall audit 
strategy and audit plan 


PHASE II 
Perform tests of 
controls and 
substantive tests 
of transactions 


Plan 
to reduce 
assessed level of 


control 
risk? 


Perform tests of controls* 
[ 
Perform substantive tests 
of transactions 
[ 
Assess likelihood of misstatements 
in financial statements 


PHASE Ill 
Perform substantive Median 
analytical procedures 
and tests of details Perform substantive 
of balances analytical procedures 


High or 
unknown 


Perform tests of key items 


Perform additional tests 
of details of balances 


i 


PHASE IV Perform additional tests for 
Complete the presentation and disclosure 
audit and l 


issue an Accumulate final evidence 
audit report I 


Evaluate results 
[ 
Issue audit report 
I 
Communicate with audit 
committee and management 
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*The extent of tests of controls is determined by planned reliance on controls. For public 
companies required to have an audit of internal control, testing must be sufficient to issue 
an opinion on internal control over financial reporting. 
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i \ji koa Timing of Tests 


Phase | Plan and design audit approach. Update understanding of internal control. Update 8-31-16 
audit program. Perform preliminary analytical procedures. 


Phase Il Perform tests of controls and substantive tests of transactions for first nine months 9-30-16 
of the year. 
Phase III Confirm accounts receivable. Observe inventory. 10-31-16 
Perform cutoff tests. Request various other confirmations. 12-31-16 Balance sheet date 
Perform substantive analytical procedures, complete tests of controls and substan- |-7-17 Books closed 


tive tests of transactions, and complete most tests of details of balances. 


Phase IV Perform procedures to support presentation and disclosure-related audit objectives, 2-15-17 
summarize results, accumulate final evidence (including analytical procedures), 
and finalize audit. 


Issue audit report. 2-25-17 


The first objective is met by performing tests of controls, and the second by 
performing substantive tests of transactions. Frequently both types of tests are done 
simultaneously on the same transactions. When controls are not considered effective 
or when the auditor finds deviations, substantive tests can be expanded in this phase 
or in phase III, along with considering the implications for the auditor’s report on 
internal control over financial reporting in an integrated audit. 

Because the results of tests of controls and substantive tests of transactions are a 
major determinant of the extent of tests of details of balances, they are often done two 
or three months before the balance sheet date. This helps the auditor revise the tests of 
details of balance audit program for unexpected results in the earlier tests and to com- 
plete the audit as soon as possible after the balance sheet date. This approach is also 
used in an integrated audit to allow management an opportunity to correct control 
deficiencies in time to allow auditor testing of the newly implemented controls before 
year-end. Auditors update their testing of internal controls near year-end to verify that 
the controls continue to operate effectively. 

For clients with highly sophisticated computerized accounting systems, audi- 
tors often perform tests of controls and substantive tests of transactions throughout 
the year to identify significant or unusual transactions and determine whether any 
changes have been made to the client’s computer programs. This approach is often 
called continuous auditing and is frequently used in integrated audits of financial 
statements and internal control for public companies. 


The objective of phase III is to obtain sufficient additional evidence to determine 
whether the ending balances and footnotes in financial statements are fairly stated. 
The nature and extent of the work will depend heavily on the findings of the two pre- 
vious phases. 

The two general categories of phase III procedures are: 


1. Substantive analytical procedures that assess the overall reasonableness of trans- 
actions and balances. 

2. Tests of details of balances, which are audit procedures to test for monetary mis- 
statements in the balances in the financial statements. 


Table 13-7 shows analytical procedures are performed before and after the bal- 
ance sheet date. Because of their low cost, analytical procedures are commonly 
used whenever they are relevant. They are often performed early, using preliminary 
data before year-end, as a means of planning and directing other audit tests to spe- 
cific areas. But the greatest benefit from calculating ratios and making compari- 
sons occurs after the client has finished preparing its financial statements. Ideally, 


Date of audit report 


Phase III: Perform 
Substantive Analytical 
Procedures and Tests of 
Details of Balances 
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Phase IV: Complete the 


Audit and Issue an 
Audit Report 
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substantive analytical procedures are done before tests of details of balances so they 
can then be used to determine how extensively to test balances. Analytical proce- 
dures are also used as a part of performing tests of balances and during the comple- 
tion phase of the audit. 

Table 13-7 also shows that tests of details of balances are normally done last. On 
some audits, all are done after the balance sheet date. When clients want to issue state- 
ments soon after the balance sheet date, the more time-consuming tests of details of 
balances are done at interim dates before year-end with additional work being done 
to roll-forward the audited interim-date balances to year-end. Substantive tests of bal- 
ances performed before year-end provide less assurance and are normally only done 
when internal controls are effective. 


After the first three phases are completed, auditors must accumulate additional evi- 
dence related to presentation and disclosure-related objectives, summarize the results, 
issue the audit report, and perform other forms of communication. As shown in 
Figure 13-9 (p. 454), this phase has several parts. 


Perform Additional Tests for Presentation and Disclosure Recall from Chapter 
6 that auditors accumulate evidence related to presentation and disclosure-related 
audit objectives. The procedures auditors perform to support the four presenta- 
tion and disclosure-related objectives are similar to audit procedures performed 
to support both transaction- and balance-related audit objectives. For example, 
management implements internal controls to ensure that all required footnote 
disclosures are included and that amounts and other information disclosed are 
accurate. Auditor tests of those controls provide evidence supporting the complete- 
ness and accuracy presentation and disclosure-related audit objectives. Auditors also 
perform substantive tests to obtain sufficient appropriate evidence that information 
disclosed in the footnotes reflects actual transactions and balances that have oc- 
curred and that represent obligations of the client to support the occurrence and rights 
and obligation objectives. A considerable portion of the auditor’s testing related to 
presentation and disclosure-related objectives is done during the first three phases, 
but additional testing is done in phase IV. 

During this last phase of the audit, auditors perform audit procedures related 
to contingent liabilities and subsequent events. Contingent liabilities are potential 
liabilities that must be disclosed in the client’s footnotes. Auditors must make sure 
that the disclosure is complete and accurate. Subsequent events represent events 
that occasionally occur after the balance sheet date, but before the issuance of the 
financial statements and auditor’s report, that have an effect on the financial state- 
ments. Specific review procedures are designed to bring to the auditor’s attention any 
subsequent events that affect the financial statements. Both contingent liabilities and 
subsequent events are studied in Chapter 24. 


Accumulate Final Evidence In addition to the evidence obtained for each cycle dur- 
ing phases I and II, and for each account during phase III, auditors must gather the fol- 
lowing evidence for the financial statements as a whole during the completion phase: 


* Perform final analytical procedures 

¢ Evaluate the going-concern assumption 

* Obtain a client representation letter 

* Read information in the annual report to make sure that it is consistent with the 

financial statements 

Issue Audit Report The type of audit report issued depends on the evidence accumu- 
lated and the audit findings. The appropriate reports for differing circumstances were 
studied in Chapter 3. 
Communicate with Audit Committee and Management The auditor is required to 
communicate significant deficiencies in internal control to the audit committee or senior 
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management. Auditing standards also require the auditor to communicate certain other 
matters to those charged with governance, such as the audit committee or a similarly 
designated body, upon completion of the audit, if not sooner. Although not required, 
auditors often also make suggestions to management to improve business performance. 


SUMMARY 


This chapter concludes our discussion of the audit planning process. In earlier chapters, 
we discussed how the auditor performs risk assessment procedures to understand the 
client’s business and industry, and to assess the risks of material misstatement, including 
fraud risks and other significant risks. The auditor also gains an understanding of internal 
control to assess control risk. The auditor uses the information obtained from the risk as- 
sessment procedures to design further audit procedures, which consist of tests of controls, 
substantive tests of transactions, substantive analytical procedures, and tests of details of 
balances. The evidence mix reflects the emphasis placed on the various types of tests, and 
depends on the auditor’s assessment of risks and the relative costs of each type of test. 
The auditor’s objective in choosing the evidence mix is to obtain sufficient appropriate 
evidence while minimizing costs. The auditor then selects the specific procedures to be 
performed, which are combined into the audit program, which contains the detailed in- 
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structions for the gathering of audit evidence to support the auditor’s opinion. 


Analytical procedures—evaluations of 
financial information through analysis of 
plausible relationships among financial 
and nonfinancial data 


Evidence mix—the combination of the 
types of tests to obtain sufficient appro- 
priate evidence for a cycle; there are likely 
to be variations in the mix from cycle to 
cycle depending on the circumstances of 
the audit 


Further audit procedures—combina- 
tion of tests of controls, substantive tests 
of transactions, substantive analytical pro- 
cedures, and tests of details of balances 
performed in response to risks of material 
misstatement identified by the auditor’s 
risk assessment procedures 


Phases of the audit process—the four 
aspects of a complete audit: (1) plan and 
design an audit approach, (2) perform tests 
of controls and substantive tests of trans- 
actions, (3) perform substantive analytical 
procedures and tests of details of balances, 
and (4) complete the audit and issue an 
audit report 


Procedures to obtain an understanding 
of internal control—procedures used by 
the auditor to gather evidence about the de- 
sign and implementation of specific controls 
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ESSENTIAL TERMS 


Substantive analytical procedure— 
an analytical procedure in which the audi- 
tor develops an expectation of recorded 
amounts or ratios to provide evidence sup- 
porting an account balance 


Substantive tests—audit procedures de- 
signed to test for dollar (monetary) misstate- 
ments of financial statement balances 


Substantive tests of transactions— 
audit procedures testing for monetary 
misstatements to determine whether 
the six transaction-related audit objec- 
tives have been satisfied for each class of 
transactions 


Tests of controls—audit procedures to 
test the effectiveness of controls in support 
of a reduced assessed control risk 


Tests of details of balances—audit proce- 
dures testing for monetary misstatements 
to determine whether the eight balance- 
related audit objectives have been satisfied 
for each significant account balance 


Types of tests—the five categories of au- 
dit tests auditors use to determine whether 
financial statements are fairly stated: risk 
assessment procedures, tests of controls, 
substantive tests of transactions, substantive 
analytical procedures, and tests of details of 
balances 


REVIEW QUESTIONS 


13-1 (OBJECTIVE 13-1) What is the purpose of risk assessment procedures and how do they 
differ from the four other types of audit tests? 


13-2 (OBJECTIVE 13-1) Can a system walkthrough alone provide sufficient appropriate evi- 
dence that a control is operating effectively? If no, state the factors affecting the amount of 
additional evidence required for the purpose. 


13-3 (OBJECTIVE 13-1) Distinguish between a test of control and a substantive test of trans- 
actions. Give two examples of each. 


13-4 (OBJECTIVES 13-1, 13-3) State a test of control audit procedure to test the effectiveness of 

the following control: Approved wage rates are used in calculating employees’ earnings. 
State a substantive test of transactions audit procedure to determine whether approved 
wage rates are actually used in calculating employees’ earnings. 


13-5 (OBJECTIVE 13-1) A considerable portion of the tests of controls and substantive 
tests of transactions are performed simultaneously as a matter of audit convenience. 
But the substantive tests of transactions procedures and sample size, in part, depend 
on the results of the tests of controls. How can the auditor resolve this apparent 
inconsistency? 


13-6 (OBJECTIVE 13-1) Distinguish between substantive tests of transactions and tests of 
details of balances. Give one example of each for the acquisition and payment cycle. 


13-7 (OBJECTIVES 13-1, 13-2) Explain how the calculation and comparison to previous years 
of the gross margin percentage and the ratio of accounts receivable to sales are related 
to the confirmation of accounts receivable and other tests of the accuracy of accounts 
receivable. 


13-8 (OBJECTIVES 13-2, 13-4) Evaluate the following statement: “Tests of sales and cash 
receipts transactions are such an essential part of every audit that I like to perform them as 
near the end of the audit as possible. By that time I have a fairly good understanding of the 
client’s business and its internal controls because confirmations, cutoff tests, and other 
procedures have already been completed.” 


13-9 (OBJECTIVE 13-2) The auditor of Chan & Lee CPA identified two exceptions, out of 
two hundred samples, in inspecting whether there were initials of the person who per- 
formed credit approval for new customers in the audit of the sales and collection cycle. 
The auditor concluded that these two exceptions were financial statement misstatements 
and therefore substantive tests should be extensively performed for this cycle. Comment 
on the auditor’s conclusion with reference to the relationship between tests of controls 
and substantive tests. 


13-10 (OBJECTIVE 13-2) Comment on this statement: “Physical examination, confirma- 
tion and reperformance are important types of evidence that must be performed in 
tests of controls, substantive tests of transactions, substantive analytical procedures 
and tests of details of balances.” 


13-11 (OBJECTIVE 13-2) Rank the following types of tests from most costly to least costly: 
substantive analytical procedures, tests of details of balances, risk assessment procedures, 
tests of controls, and substantive tests of transactions. 


13-12 (OBJECTIVE 13-3) Assume that the client’s internal controls over the recording and 
classifying of fixed asset additions are considered deficient because the individual respon- 
sible for recording new acquisitions has inadequate technical training and limited experi- 
ence in accounting. How will this situation affect the evidence you should accumulate in 
auditing fixed assets as compared with another audit in which the controls are excellent? 
Be as specific as possible. 

13-13 (OBJECTIVE 13-3) Design an evidence mix for a company with some controls and an 
initial assessment of low inherent risk but was subsequently assessed to have material 
weaknesses in its control. Justify the cost of such audit. 
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13-14 (OBJECTIVE 13-4) Explain the relationship between the methodology for designing 
tests of controls and substantive tests of transactions in Figure 13-4 (p. 444) and the meth- 
odology for designing tests of details of balances in Figure 13-6 (p. 446). 


13-15 (OBJECTIVE 13-4) Why is it desirable to design tests of details of balances before 
performing tests of controls and substantive tests of transactions? State the assump- 
tions that the auditor must make in doing so. What does the auditor do if the assump- 
tions are wrong? 

13-16 (OBJECTIVE 13-4) List the eight balance-related audit objectives in the verification of 
the ending balance in inventory and provide one useful audit procedure for each of the 
objectives. 

13-17 (OBJECTIVE 13-5) Comment on this statement: “When all the transaction-related audit 
objectives are met, all the balance-related audit objectives are achieved as well.” 

13-18 (OBJECTIVE 13-6) Indicate the four phases of the audit process. In which phase does 
the auditor perform tests of controls? 


13-19 (OBJECTIVE 13-7) Why do auditors often consider it desirable to perform audit tests 
throughout the year rather than wait until year-end? List several examples of evidence that 
can be accumulated before year-end. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


13-20 (OBJECTIVES 13-1, 13-5, 13-7) The following questions concern types of audit tests. 
Choose the best response. 


a. An auditor’s decision either to apply analytical procedures as substantive tests or to 
perform substantive tests of transactions and account balances usually is determined 
by the 
(1) availability of data aggregated at a high level. 

(2) relative effectiveness and efficiency of the tests. 

(3) timing of tests performed after the balance sheet date. 

(4) auditor’s familiarity with industry trends. 


b. The auditor faces a risk that the audit will not detect material misstatements that occur 
in the accounting process. To minimize this risk, the auditor relies primarily on 
(1) substantive tests. (3) internal control. 
(2) tests of controls. (4) statistical analysis. 


c. A conceptually logical approach to the auditor’s evaluation of internal control con- 
sists of the following four steps: 
I. Determining the internal controls that should prevent or detect errors and fraud. 
II. Identifying control deficiencies to determine their effect on the nature, timing, 
or extent of auditing procedures to be applied and suggestions to be made to the 
client. 
III. Determining whether the necessary internal control procedures are prescribed 
and are being followed satisfactorily. 
IV. Considering the types of errors and fraud that can occur. 


What should be the order in which these four steps are performed? 

(1) 1, IL IU, and Iv 

(2) 1, 1, IV, and Il 

(3) IIL IV,1,and Il 

(4) IV,1, Ill, and II 

13-21 (OBJECTIVE 13-1) The following questions deal with tests of controls. Choose the best 
response. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, Li@ited ood. Pd du@ ERedkICAuEDIT STRATEGY AND AUDIT PROGRAM 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-07-09 01:48:25. 


a. To support the auditor’s initial assessment of control risk below maximum, the audi- 
tor performs procedures to determine that internal controls are operating effectively. 
Which of the following audit procedures is the auditor performing? 

(1) Tests of details of balances (3) Tests of controls 
(2) Substantive tests of transactions (4) Tests of trends and ratios 


b. The primary objective of performing tests of controls is to obtain 

(1) a reasonable degree of assurance that the client’s internal controls are operating 
effectively on a consistent basis throughout the year. 

(2) sufficient appropriate audit evidence to afford a reasonable basis for the auditor’s 
opinion, without the need for additional evidence. 

(3) assurances that informative disclosures in the financial statements are reason- 
ably adequate. 

(4) knowledge and understanding of the client’s prescribed procedures and methods. 


c. Tests of controls are most likely to be omitted when 
(1) an account balance reflects many transactions. 
(2) control risk is assessed at less than the maximum. 
(3) the understanding of internal control indicates that evaluating the effectiveness 
of control policies and procedures is likely to be inefficient. 
(4) the auditor wishes to increase the acceptable level of detection risk. 


DISCUSSION QUESTIONS AND PROBLEMS 


13-22 (OBJECTIVES 13-1, 13-2) The following are 11 audit procedures taken from an audit 
program: 


1. Select items from the inventory records and examine the items in the warehouse. 

2. Perform test of reasonableness on depreciation expense of equipment items taking 
into account their remaining useful lives, additions and disposals during the year and 
compare against the amount calculated by client. 

3. Send confirmations to banks with which the client does business to confirm with the 
cash balances, loan balances as well as the outstanding banking facility. 

4. Use audit software to foot and cross-foot the cash disbursement journal and trace 
totals to the general ledger. 

5. Examine evidence that the customer orders have been approved for credit by the 
credit manager. 

6. Discuss with the client’s legal counsel as to the probability of losing the court case as 

well as the likely compensation amount for the dispute. 

. Select samples of payroll records and compute the overtime payment. 

. Observe endorsement of incoming checks by the accountant. 

9. Conduct cash count for the petty cash kept in office to verify the amount counted by 
the accountant. 

10. Inquire of the sales manager and credit manager whether there is segregation of duties 

regarding the credit-granting function and the sales function. 

11. Compute individual manufacturing expenses divided by total manufacturing 

expenses, compare the results with those in previous years and note for any unusual 
fluctuation. 


CON 


Required a. Indicate whether each procedure is a test of control, substantive test of transactions, 
substantive analytical procedure, or a test of details of balances. 
b. Identify the type of evidence for each procedure. 
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13-23 (OBJECTIVES 13-1, 13-2) The following are audit procedures from different transaction 
cycles: 


1. 
2: 
3. 


Trace a sample of shipping documents to entry in the sales journal. 

Examine a sample of warehouse removal slips for signature of authorized official. 
Examine duplicate copy of shipping documents for evidence that quantities were 
verified before shipment. 


. Select a sample of payroll checks and agree hours to employee time records. 
. Use audit software to foot and cross-foot the sales journal and trace the balance to the 


general ledger. 


. Examine voucher packages and related vendor invoices for evidence of approval of 


account classification. 


. Select a sample of sales invoices and agree prices to the approved price list. 
. Select a sample of entries in the cash receipts journal and trace to posting in individual 


customer accounts receivable records. 


. For each audit procedure, identify whether it is a test of control or a substantive test 


of transactions. 


. For each audit procedure, identify the transaction-related audit objective or objectives 


being satisfied. 


13-24 (OBJECTIVES 13-1, 13-2, 13-5) The following are audit procedures from different trans- 
action cycles: 


I 
2: 
3. 


\o 


aaae 
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Examine vendors’ statements for accounts payable balance. 

Examine a sample of customer orders for evidence of credit approval by credit manager. 
Use audit software to foot the accounts payable trial balance and compare the balance 
with the general ledger. 


. Use audit software to foot and cross-foot the cash sales journal and trace the balance 


to the general ledger. 


. Compute accounts receivable turnover for major customers and compare with previ- 


ous years. 


. Inquire of the warehouse manager if there is any consigned inventory in other loca- 


tions. 


. Confirm the amount of inventories kept in public warehouse. 
. Examine shipping documents before and after the balance sheet date to determine 


whether sales transactions are recorded in the proper period, taking into consider- 
ation the shipping terms and shipment dates. 


. Perform test on the reasonableness of salaries expense, taking into account salary in- 


crements and staff movement during the year. 


. For each audit procedure, identify the transaction cycle being audited. 

. For each audit procedure, identify the type of evidence. 

. For each audit procedure, identify whether it is a test of control or a substantive test. 

. For each substantive audit procedure, identify whether it is a substantive test of trans- 


actions, a test of details of balances, or a substantive analytical procedure. 


. For each test of control or substantive test of transactions procedure, identify the 


transaction-related audit objective or objectives being satisfied. 
For each substantive analytical procedure or test of details of balances procedure, 
identify the balance-related audit objective or objectives being satisfied. 


13-25 (OBJECTIVES 13-1, 13-4, 13-5) The following are independent internal controls commonly 
found in the acquisition and payment cycle. Each control is to be considered independently. 
1. 


Before a check is prepared to pay for acquisitions by the accounts payable depart- 
ment, the related purchase order and receiving report are attached to the vendor's 
invoice being paid. A clerk compares the quantity on the invoice with the receiving 
report and purchase order, compares the price with the purchase order, recomputes 
the extensions, re-adds the total, and examines the account number indicated on the 
invoice to determine whether it is correctly classified. He indicates his performance 
of these procedures by initialing the invoice. 
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Required 


Required 


Required 


Required 


. At the end of each month, an accounting clerk accounts for all prenumbered receiv- 


ing reports (documents evidencing the receipt of goods) issued during the month and 
traces each one to the related vendor’s invoice and acquisitions journal entry. The clerk’s 
tests do not include testing the quantity or description of the merchandise received. 


. The cash disbursements clerk is prohibited from handling cash. The bank account is rec- 


onciled by another person even though the clerk has sufficient expertise and time to do it. 


. Before a check is signed by the controller, she examines the supporting documenta- 


tion accompanying the check. At that time, she initials each vendor’s invoice to indi- 
cate her approval. 


. After the controller signs the checks, her secretary writes the check number and the 


date the check was issued on each of the supporting documents to prevent their reuse. 


. For each of the internal controls, state the transaction-related audit objective(s) the 


control is meant to fulfill. 


. For each control, list one test of control the auditor could perform to test the effec- 


tiveness of the control. 


. For each control, list one substantive test the auditor could perform to determine 


whether financial misstatements are actually taking place. 


13-26 (OBJECTIVES 13-1, 13-4, 13-5) The following internal controls for the payroll and per- 
sonnel cycle were selected from a standard internal control questionnaire. 


1. 


2. 


10. 
. For each control, identify which elements of the five categories of control activi- 


The human resources department maintains proper records on date of employment, 
rates of pay, performance evaluation and termination of employment. 

The payroll function is separate from the human resources function such that payroll 
staff cannot add and delete employees in the system. 


. Only certain human resources staff with unique user ID and password can access to the 


system in order to change pay rates and deductions. 


. Overtime hours must be endorsed by the supervisor or team leader before processing 


for payment. 


. Payroll computations should be verified with a comparison of batch totals to summary 


reports by senior payroll staff. 


. Payroll checks are prenumbered and accounted for. 
. Access to the payment system for authorizing payment is restricted to the department 


head. 


. The payroll master file totals are compared with the general ledger totals at the end of 


every month. 


. The dates for recording the payroll transaction are internally verified by another pay- 


roll staff. 
Access to unsigned payroll checks is restricted. 


ties is applicable (separation of duties, proper authorization, adequate documents 
or records, physical control over assets and records, or independent checks on 
performance). 


. For each control, state which transaction-related audit objective(s) is (are) applicable. 
. For each control, write an audit procedure that could be used to test the control for 


effectiveness. 


. For each control, identify a likely misstatement, assuming that the control does not 


exist or is not functioning. 


. For each likely misstatement, identify a substantive procedure to determine whether 


the misstatement exists. 


13-27 (OBJECTIVES 13-4, 13-7) Following are evidence decisions for the three audits described 
in Figure 13-3 on page 441: 


Audit A Ineffective client internal controls 
Audit B Very effective client internal controls 
Audit C Somewhat effective client internal controls 
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Evidence Decisions 

. The auditor decided it was possible to assess control risk below the maximum. 

. The auditor identified effective controls and also identified some deficiencies in controls. 
. The auditor performed extensive positive confirmations at the balance sheet date. 

. The auditor performed tests of controls. 

. The auditor performed extensive tests of controls and minimal substantive tests. 

. The auditor performed substantive tests. 

. This audit was likely the least expensive to conduct. 

. The auditor confirmed receivables at an interim date. 


CONDUBWNH FR 


a. Explain why Audit B represents the maximum amount of reliance that can be Required 
placed on internal control. Why can’t all the audit assurance be obtained by tests of 
controls? 
b. Explain why the auditor may not place the maximum extent of reliance on controls 
in Audit B and Audit C. 
c. For each of the eight evidence decisions, indicate whether the evidence decision re- 
lates to each of the audits described above. Every evidence decision relates to at least 
one of the audits, and some may relate to two or all three audits. 


13-28 (OBJECTIVES 13-3, 13-4) Following are several decisions that the auditor must make in an 
audit of a nonpublic company. Letters indicate alternative conclusions that could be made. 


Decisions Alternative Conclusions 
1. Determine whether it is cost effective to perform tests A. It is cost effective 

of controls. B. It is not cost effective 
2. Perform substantive tests of details of balances. C. Perform reduced tests 


D. Perform expanded tests 


3. Complete initial assessment of control risk. E. Controls are effective 
F. Controls are ineffective 


4. Perform tests of controls. G. Controls are effective 
H. Controls are ineffective 


a. Identify the sequence in which the auditor should make decisions 1 to 4. Required 

b. For the audit of the sales and collection cycle and accounts receivable, an auditor 
reached the following conclusions: A, D, E, H. Put the letters in the appropriate 
sequence and evaluate whether the auditor’s logic was reasonable. Explain your 
answer. 

c. For the audit of inventory and related inventory cost records, an auditor reached 
the following conclusions: B, C, E, G. Put the letters in the appropriate sequence and 
evaluate whether the auditor used good professional judgment. Explain your answer. 

d. For the audit of property, plant, and equipment and related acquisition records, an 
auditor reached the following conclusions: A, C, F, G. Put the letters in the appropri- 
ate sequence and evaluate whether the auditor used good professional judgment. 
Explain your answer. 

e. For the audit of payroll expenses and related liabilities, an auditor recorded the fol- 
lowing conclusions: D, F. Put the letters in the appropriate sequence and evaluate 
whether the auditor used good professional judgment. Explain your answer. 


13-29 (OBJECTIVE 13-3) The following are three situations, all involving nonpublic compa- © @, . 
nies, in which the auditor is required to develop an audit strategy: oe 
1. The client has inventory at approximately 50 locations in a three-state region. The 
inventory is difficult to count and can be observed only by traveling by automobile. 
The internal controls over acquisitions, cash disbursements, and perpetual records are 
considered effective. This is the fifth year that you have done the audit, and audit results 
in past years have always been excellent. The client is in excellent financial condition. 
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2. 


Required a. 


Required a. 


This is the first year of an audit of a medium-sized company that is considering sell- 
ing its business because of severe underfinancing. A review of the acquisition and 
payment cycle indicates that controls over cash disbursements are excellent but con- 
trols over acquisitions cannot be considered effective. The client lacks receiving re- 
ports and a policy as to the proper timing to record acquisitions. When you review 
the general ledger, you observe that there are many large adjusting entries to correct 
accounts payable. 


. You are doing the audit of a small loan company with extensive receivables from cus- 


tomers. Controls over granting loans, collections, and loans outstanding are considered 
effective, and there is extensive follow-up of all outstanding loans weekly. You have rec- 
ommended a new computer system for the past two years, but management believes 
the cost is too great, given their low profitability. Collections are an ongoing problem 
because many of the customers have severe financial problems. Because of adverse eco- 
nomic conditions, loans receivable have significantly increased and collections are less 
than normal. In previous years, you have had relatively few adjusting entries. 


For audit 1, recommend an evidence mix for the five types of tests for the audit of 
inventory and cost of goods sold. Justify your answer. Include in your recommenda- 
tions both tests of controls and substantive tests. 


. For audit 2, recommend an evidence mix for the audit of the acquisition and payment 


cycle, including accounts payable. Justify your answer. 


. For audit 3, recommend an evidence mix for the audit of outstanding loans. Justify 


your answer. 


13-30 (OBJECTIVE 13-3) You are an audit staff senior and you are going to assign the task 
to perform tests of controls for sales and collection and test of details of balances for 
accounts receivable for the three engagements to your audit junior. You would like to form 
an expectation on the time required for these simultaneous engagements for the audit 
junior. The three clients are described below: 


Company 1—Al&Bee is a medium-sized retailer selling luxury handbags and accesso- 
ry items. Its headquarter is in Singapore. During this year, Al&Bee started expanding 
its business and established a number of shops in various Asia Pacific countries in- 
cluding Taiwan and Hong Kong. Al&Bee has been a client of the audit firm for 5 years. 
Based on the previous audit results, there have been a few internal controls in place 
and there have been some audit adjustments suggested by the auditor every year. 
Al&Bee adjusted its accounting records accordingly. Although Al&Bee has expanded 
its business during the year, its sales have not increased as much as expected, partly 
attributable to the slow down of economies in the region. 


Company 2—Co&Dan operates a chain of supermarkets in Singapore and is having 
its shares listed on the stock exchange. Co&Dan has been a client of the audit firm 
for 20 years and have implemented sophisticated internal controls for its sales and 
collection cycle, including automated point of sale system at the cashier 10 years ago. 
Majority of its sales are made in either cash or credit cards. There has been seldom 
audit adjustment based on prior years’ audit experience. Its sales have grown at a 
reasonable rate throughout the past few years and its performance is not materially 
affected by the economic slowdown as Co&Dan sells necessity items. 

Company 3-El&Fan, same as Al&Bee, is a medium-sized retailer selling handbags 
and accessory items. El&Fan is a family-owned company and it is a new client to the 
audit firm. Based on the preliminary understanding of the internal control of El&Fan, 
it is noted that there has not been much segregation of duties within the company due 
to limited manpower. 


Devise an evidence mix for the audit of sales and collection cycle for the three clients 
above with respect to tests of control, substantive tests of transactions, analytical 
procedures and tests of details of balances. Justify whether extensive amount (E), 
medium amount (M), small amount of testing (S) or no testing (N) is expected. Rank 
the relative time required for your tasks in the three audit engagements. 
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13-31 (OBJECTIVES 13-4, 13-6, 13-7) You are planning the audit of a new client and know that 
there are four phases in the audit process. 


a. List out the four phases in an audit process. Required 
b. Match the following audit work into the four phases in part a.: 
(1) Addressing transaction-related audit objectives 
(2) Addressing balance-related audit objectives 
(3) Addressing presentation and disclosure-related objectives 
(4) Performing analytical procedures 
c. Advise the appropriate timing for performing the audit work for part b (1) above. 
d. Referring to your answers in part b(4), explain any difference for performing substan- 
tive analytical procedures in different phases. Use the following data for the sales and 
collection cycle for illustration on how you would perform the task differently. 


(in $7000) Prior year QI 2 Q3 = Q4 ~~ Total 


Sales 35 44 46 34 159 
Accounts receivable 3.5 45 45 3.5 16 

(in $7000) Current year QI Q2 Q3 Q4 _ Total 
Sales 30 40 20 70 160 
Accounts receivable 3 4 5 3.5 15.5 


13-32 (OBJECTIVES 13-2, 13-3) Auditors develop overall audit plans to ensure that they obtain za. 
sufficient appropriate audit evidence. The timing and extent of audit procedures audi- 
tors use is a matter of professional judgment, which depends upon a number of factors. y™@” 
Decisions about the mix of audit procedures and the timing of procedures significantly 

impact the date on which the audit report is issued. Visit the company Web sites for 
Google, Inc. (www.google.com), Boeing (www.boeing.com), and Microsoft (www.micro 
soft.com). Search under “Investor Relations” for the most recent annual report and locate 

the independent auditor’s report. 


a. Identify the year-end for each company. Does any company have a year-end other Required 
than December 31? Will the company’s year-end have any impact on the audit proce- 
dures used and their timing? 
b. Indicate the number of days between each company’s year-end and the date of the 
audit report. What factors may impact the number of days to issue the audit report? 
c. Based on the number of days between each company’s year-end and the date of the audit 
report, and your knowledge of each company’s operations, on which audit do you think 
the auditors place the greatest reliance on substantive tests of details of balances? Explain. 
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CASES 


13-33 (OBJECTIVES 13-3, 13-4) OnePlus Technology is non public company, based in Frankfurt, 
Germany, manufacturing IT products ranging from computer monitors to optical storage 
devices. In recent years, the IT product manufacturing industry has suffered from intense 
competition in the market as well as soaring labour and material costs. During the year, 
a number of IT product manufacturers in the region faced serious financial problems 
and were closed down. OnePlus Technology acquired a new division (the “Division”) in 
February. The Division is a software developer and solution provider on IT systems based 
in Seoul, South Korea. This year, the Division started providing bundled sales for its soft- 
ware and three- to five-year after-sale maintenance services at a discounted price. 

Sandra She, CPA, is the manager-in-charge of OnePlus Technology. She assigned the 
audit of the sale and collection cycle to Carol Sze, a senior audit associate. Carol gathered pre- 
liminary financial information for the sales of OnePlus Technology (the “Existing Segment’), 
and included the performance of the Division as another segment, in the financial statements: 


Existing Segment The Division Total 
($7000) Current year Prior year Current year Prior year Current year Prior year 
Sales 5,300 6,400 1,200 = 6,500 6,400 
Cost (4,300) (4,700) (400) 2 (4,700) (4,700) 
Gross 
profit 1,000 1,700 800 = 1,800 1,700 


Carol performed the following audit work for the sales and collection cycle: 


1. In the planning section, Carol noted that sales and accounts receivable are closely 
related. After documenting that the approach for designing tests of controls and sub- 
stantive tests of transactions, she put “Same as the above” for her methodology in 
designing tests of details of balance in the cycle. 

2. She calculated the gross margin based on the total sales. She noted that the gross 
margin of current year was 28% while that of prior year was 27%. She concluded that 
there was no material fluctuation and therefore there should not be any change to 
the audit strategy for the sales and collection cycle. 

3. Based on preliminary discussion with the management, the Division had its own account- 
ing manual and procedures. Carol scrutinized that it included proper revenue recognition 
policies in accordance with relevant accounting standards. She selected a few samples of 
revenue recognized by the Division during the year and noted that the Division booked 
the entire amount of cash receipts from the bundled sales for software and after-sale ser- 
vices as sales in the sales journal with no discrepancy. She was satisfied with the results. 

4. OnePlus Technology has excellent internal controls over the sales and collection cycle, 
including segregation of duties in the sales and credit department, prenumbered sales 
invoices and independent checks by senior accountant. In the past, extensive tests of 
control were used and there was limited substantive test for the audit. There has been no 
material adjustment entry arisen from the audit. Carol was very familiar with the internal 
controls of OnePlus Technology as she did the system walkthrough in the previous audit 
engagements. She was satisfied with the internal controls over the sales and collection 
cycle. Carol justified that the Division is engaging in a similar industry and understanding 
the internal controls of the Division was therefore not necessary. Further, the internal au- 
ditors of the Division checked the internal controls regularly. Carol therefore assessed the 
risk level to be low and adopted the usual audit approach for the sales and collection cycle. 

5. Carol documented in her working paper that no exceptions were noted in the cycle. 


Required Assume you are Sandra She. You are reviewing the audit file prepared by Carol. Critically 


evaluate her audit work on the sales and collection cycle. 

13-34 (OBJECTIVES 13-3, 13-4) McClain Plastics has been an audit client of Belcor, Rich, Smith & 
Barnes, CPAs (BRS&B), for several years. McClain Plastics was started by Evers McClain, 
who owns 51% of the company’s stock. The balance is owned by about 20 stockholders, 
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who are investors with no operational responsibilities. McClain Plastics makes products 
that have plastic as their primary material. Some are made to order, but most products 
are made for inventory. An example of a McClain-manufactured product is a plastic chair 
pad that is used in a carpeted office. Another is a plastic bushing that is used with certain 
fastener systems. 

McClain has grown from a small, two-product company, when they first engaged 
BRS&B, to a successful, diverse company. At the time Randall Sessions of BRS&B became 
manager of the audit, annual sales had grown to $200 million and profits to $10.9 million. 
Historically, the company presented no unusual audit problems, and BRS&B had issued an 
unmodified opinion every year. 

The audit approach BRS&B always used on the audit of McClain Plastics was a “sub- 
stantive” audit approach. Under this approach, the in-charge auditor obtained an under- 
standing of internal control as part of the risk assessment procedures, but control risk 
was assessed at the maximum (100%). Extensive analytical procedures were done on the 
income statement, and unusual fluctuations were investigated. Detailed audit procedures 
emphasized balance sheet accounts. The theory was that if the balance sheet accounts 
were correct at year-end and had been audited as of the beginning of the year, then 
retained earnings and the income statement must be correct. 


Part | 

In evaluating the audit approach for McClain for the current year’s audit, Sessions believed 
that a substantive approach was really only appropriate for the audits of small nonpublic 
companies. In his judgment, McClain Plastics, with sales of $200 million and 146 employ- 
ees, had reached the size where it was not economical, and probably not wise, to con- 
centrate all the tests on the balance sheet. Furthermore, although McClain is not a public 
company, Sessions recognized that similar public companies are required by Section 404 
of the Sarbanes-Oxley Act and related PCAOB standards to have an integrated audit of the 
financial statements and internal control over financial reporting. Therefore, he designed 
an audit program that emphasized identifying internal controls in all major transaction 
cycles and included tests of controls. The intended economic benefit of this “reducing con- 
trol risk” approach was that the time spent testing controls would be more than offset by 
reduced tests of details of the balance sheet accounts. 

In planning tests of inventories, Sessions used the audit risk model included in audit- 
ing standards to determine the number of inventory items BRS&B would test at year-end. 
Because of the number of different products, features, sizes, and colors, McClain’s inven- 
tory consisted of 2,450 different items. These were maintained on a perpetual inventory 
management system that used a relational database. 

In using the audit risk model for inventories, Sessions believed that an audit risk of 5% 
was acceptable. He assessed inherent risk as high (100%) because inventory, by its nature, 
is subject to many types of misstatements. Based on his understanding of the relevant 
transaction cycles, Sessions believed that internal controls were effective. He therefore as- 
sessed control risk as low (50%) before performing tests of controls. Sessions also planned 
to use substantive analytical procedures for tests of inventory. These planned tests in- 
cluded comparing gross profit margins by month and reviewing for slow-moving items. 
Sessions believed that these tests would provide assurance of 40%. Substantive tests of 
details would include tests of inventory quantities, costs, and net realizable values at an in- 
terim date two months before year-end. Cutoff tests would be done at year-end. Inquiries 
and substantive analytical procedures would be relied on for assurance about events be- 
tween the interim audit date and fiscal year-end. 


a. Decide which of the following will likely be done under both a reducing control risk Required 
approach and a substantive approach: 

1) Assess inherent risk. 

2) Obtain an understanding of internal control. 

Perform tests of controls. 

Perform substantive analytical procedures. 

Assess planned detection risk. 
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Required 


Required 


b. What advantages does the reducing control risk approach Sessions planned to use 
have over the substantive approach previously used in the audit of McClain Plastics? 

c. What advantages did the substantive approach have over the reducing control risk 
approach? 


Part Il 


The engagement partner agreed with Sessions’s recommended approach. In planning the 
audit evidence for detailed inventory tests, the audit risk model was applied with the fol- 


lowi Its: 
owing results Aw 


PDR = —W— 
IR X CR X APR 


where: 
PDR = Planned detection risk 
AAR = acceptable audit risk 
IR = inherent risk 
CR = control risk 
APR = analytical procedures risk 
Therefore, using Sessions’s assessments and judgments as described previously, 
05 
1.0X.5X.6 


PDR= .17 


PDR= 


a. Explain what .17 means in this audit. 

b. Calculate PDR assuming that Sessions had assessed control risk at 100% and all other 
risks as they are stated. 

c. Explain the effect of your answer in requirement b. on the planned audit proce- 
dures and sample size in the audit of inventory compared with the .17 calculated by 
Sessions. 


Part Ill 

Although the planning went well, the actual testing yielded some surprises. When conduct- 
ing tests of controls over acquisitions and additions to the perpetual inventory, the staff 
person performing the tests found that the deviation rates for several key controls were sig- 
nificantly higher than expected. As a result, the staff person considered internal control to 
be operating less effectively, supporting an 80% control risk rather than the 50% level used. 
Accordingly, the staff person “reworked” the audit risk model as follows: 


PRS = 
1.0 x .8 X .6 


PDR= .10 


A 10% test of details risk still seemed to the staff person to be in the “moderate” range, so 
he recommended no increase in planned sample size for substantive tests. 


Do you agree with the staff person’s revised judgments about the effect of tests of controls 
on planned substantive tests? Explain the nature and basis of any disagreement. If BRS&B 
was also issuing a report on internal control over financial reporting, describe the implica- 
tions of these results on the auditor’s internal control report. 
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APPLICATION OF 
THE AUDIT PROCESS 
TO THE SALES AND 

} COLLECTION CYCLE 


CHAPTERS 14-17 


he four chapters of PART 3 apply the concepts you 

learned in Part 2 to the audit of sales, cash receipts, 

and the related income statement and balance sheet 
accounts in the cycle. 

For you to appreciate how auditing is done in practice, 
you need to understand how auditing concepts are applied to 
specific auditing areas. We'll first look at one important part 
of every audit, the sales and collection cycle, to examine the 
practical application of auditing concepts. 


Chapter 14 will help you learn the methodology 
for designing tests of controls and substantive tests of 
transactions audit procedures for sales, cash receipts, 
and the other classes of transactions in the sales and 
collection cycle. 


Chapter 1|5 deals with nonstatistical and statistical 
sampling methods for tests of controls and substantive 
tests of transactions. 


Chapter 16 presents the methodology for designing 
audit procedures for the audit of accounts receivable 
and other account balances in the sales and collection 
cycle. 


Chapter 17 covers audit sampling for tests of details 
of balances. 
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CHAPTER 


AUDIT OF THE SALES 
AND COLLECTION CYCLE: 
_TESTS OF CONTROLS AND 
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LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


14-1 Identify the accounts and the 
classes of transactions in the 
sales and collection cycle. 

14-2 Describe the business 
functions and the related 
documents and records in the 
sales and collection cycle. 

14-3 Understand internal control, 
and design and perform tests 
of controls and substantive 
tests of transactions for sales. 

14-4 Apply the methodology 
for controls over sales 
transactions to controls over 
sales returns and allowances. 

14-5 Understand internal control, 
and design and perform tests of 
controls and substantive tests 
of transactions for cash receipts. 

14-6 Apply the methodology for 
controls over the sales and 
collection cycle to controls 
related to uncollectible 
accounts receivable. 

14-7 Understand the effect of tests 
of controls and substantive 
tests of transactions on 
substantive tests of details of 
balances. 


SsSUBSTANTIVE TESTS OF 


TRANSACTIONS 


The Power of Sales — Constructive or Destructive 


China Metal Recycling was the largest scrap metal recycling company in the mainland China. It had over 30 
subsidiaries in Hong Kong, Macau, PRC, Singapore and Taiwan. It mainly purchased scrap metal from both 
domestic and overseas markets and generated sales by either selling the scrap directly to domestic scrap 
recyclers or separating the scrap into its various metal components with the use of heavy equipment. 


China Metal Recycling enjoyed a num- 
ber of profitable years and success- 
fully had its shares listed on the Hong 
Kong Stock Exchange. Over the years 
(from 2006 to 2012), its revenue in- 
creased by over 70 times and its profit 
surged by over |7 times. 


Subsequent to itsinitial public offer- 
ing, there were a number of signifi- 
cant events to China Metal Recycling. 
The Chief Financial Officer (CFO) 
approached the audit committee with 
certain issues that concerned him 
relating to the business of the com- 
pany. The CFO was then resigned from the company within six months after the initial public offering. 
The Chairman started selling the company’s shares, which accounted for nearly 30% of the total number 
of shares, in January 2013. Most importantly, a research report was published in January 2013 stating 
that the earnings of the company were overstated. Regulators started investigating the company’s affairs. 
Trading of the company’s shares was suspended from January 2013. Hong Kong’s securities regulator, the 
Securities and Futures Commission (SFC) stated that China Metal Recycling overstated its financial posi- 
tion in the prospectus for its 2009 initial public offering. Further, 38 percent 64 percent and 90 percent of 
gross profits for 2007, 2008 and 2009 respectively were fictitious! 


What has China Metal Recycling done for this “industrial scale fraud”? It established a subsidiary in Macau 
to trade with suppliers and customers. China Metal Recycling was found to use “round robin funds flows” 
schemes for its fraudulent activities. The Macau subsidiary paid substantial funds to its suppliers which 
were then passed on to customers and circulated back to the Macau subsidiary within days. In 2008, about 
US$320 million was circulated within eight days and such amount surged to about US$2.3 billion in 2012. 
The fraud was supported by the falsification of shipping documents. According to an expert witness, 
around 80 percent of the 1,042 bills of lading related to the Macau subsidiary’s transactions between 2007 
and 2013 were false”. It required a huge effort to falsify such a number of shipping documents. The SFC 
successfully won the case to wind up China Metal Recycling alleging evidence of accounting fraud?. 


The circumstances of China Metal Recycling in the opening story illustrate the importance of control 
environment and internal controls in the sales and collection cycle. Auditors are expected to exercise 
professional skepticism when performing extensive tests of controls and substantive tests of transac- 
tions in the audit of sales. This chapter studies assessing control risk and designing tests of controls and 
substantive tests of transactions for each of the classes of transactions in the sales and collection cycle. 


Source: |. Michelle Price, “Hong Kong Watchdog Wins Landmark Case Against China Metal Recycling”, Reuters 
(February 26, 2015) (www.reuters.com); 2. Shirley Yam, “The Logistics of Committing Fraud on an Industrial Scale”, 
South China Morning Post (March 13, 2015) (http://www.scmp.com); 3. “SFC obtains court order to wind up China 
Metal Recycling (Holdings) Limited, Securities and Futures Commission (February 26, 2015) (https://www.sfc.hk) 
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The circumstances of City Finance in the opening story illustrate an audit in which extensive reliance on internal 
controls in the sales and collection cycle will likely require the auditor to do extensive tests of controls and substantive 
tests of transactions. In other situations not involving the audit of an accelerated filer public company, the auditor may 
rely far less on internal controls but, as was shown in Chapter 12, will still need to understand the internal controls over 
sales and cash receipts. Auditors need to know when they should rely extensively on internal controls and when they 
should place less reliance on controls. This chapter studies assessing control risk and designing tests of controls and 
substantive tests of transactions for each of the classes of transactions in the sales and collection cycle. 

Before we study assessing control risk and designing tests of controls and substantive tests of transactions for 
each class of transactions in detail, we will cover two related topics. 


1. You need to know the sales and collection cycle classes of transactions and account balances in a typical 
company. We discussed these earlier, but we review them again here. 

2. Because a considerable portion of the audit of transactions in the sales and collection cycle involves documents 
and records, it is essential to understand the typical documents and records used in the cycle. 


ACCOUNTS AND CLASSES OF TRANSACTIONS 
IN THE SALES AND COLLECTION CYCLE 
The overall objective in the audit of the sales and collection cycle is to evaluate whether ‘OBJECTIVE 14-10 


the account balances affected by the cycle are fairly presented in accordance with |4,,, Cha eae eae 
accounting standards. Figure 14-1 shows typical accounts included in the sales and col- lasses of transactions in the 
lection cycle using T accounts. The nature of the accounts may vary, of course, depending sales and collection cycle. 
on the industry and client involved. There are differences in the nature and account titles 
for a service industry, a retail company, and an insurance company, but the key concepts 
remain the same. To provide a frame of reference for understanding the material in this 
chapter, let’s assume we're dealing with a wholesale merchandising company. 

Figure 14-1 shows the way accounting information flows through the various 
accounts in the sales and collection cycle. This figure shows that there are five classes 
of transactions in the sales and collection cycle: 


FIGURE |4-| Accounts in the Sales and Collection Cycle 


Cash in bank 


Cash 
sales 


Accounts receivable 
Sales on 


account Beginning | Cash receipts 
balance 
Sales returns Cash discounts 
Sales on and allowances taken 


account : 
Write-off of 


uncollectible 
accounts Sales returns 
and allowances 


Ending 
balance 


Allowance for 
uncollectible accounts 


Write-off of Beginning 
uncollectible balance 


sccounts: Estimate of bad Bad debt 
expense 


debt expense 


Ending 
balance 
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Sales (cash and sales on account) 
Cash receipts 

Sales returns and allowances 
Write-off of uncollectible accounts 
Estimate of bad debt expense 


VkRwWwN PE 


Figure 14-1 also shows that, with the exception of cash sales, every transaction 
and amount is ultimately included in one of two balance sheet accounts, accounts 
receivable or allowance for uncollectible accounts. For simplicity, we assume that the 
same internal controls exist for both cash and credit sales. 


BUSINESS FUNCTIONS IN THE CYCLE AND RELATED 
DOCUMENTS AND RECORDS 


Describe the business functions 
and the related documents 
and records in the sales and 
collection cycle. 


The sales and collection cycle involves the decisions and processes necessary for 
the transfer of the ownership of goods and services to customers after they are made 
available for sale. It begins with a request by a customer and ends with the conversion 
of material or service into an account receivable, and ultimately into cash. 

The eight business functions for the sales and collection cycle are shown 
in the third column of Table 14-1. They occur in every business in the recording of 
the five classes of transactions in the sales and collection cycle. Under “Business 
Functions,” observe that the first four processes are for recording sales, while every 
other class of transactions includes only one business function. In this section, we'll 
explain each of the eight business functions and describe typical documents and 
records for each function, which appear in the fourth column of Table 14-1. Before 
auditors can assess control risk and design tests of controls and substantive tests of 
transactions, they need to understand the business functions and documents and 
records in a business. 


TABLE 14-1 


Classes of Transactions 


Sales 


Cash receipts 


Sales returns and allowances 


Classes of Transactions, Accounts, Business Functions, and Related Documents 
and Records for the Sales and Collection Cycle 


Accounts Business Functions Documents and Records 


Sales Processing customer orders Customer order 
Accounts receivable Granting credit Sales order 
Shipping goods Customer order or sales order 
Billing customers and recording Shipping document 
sales Sales invoice 


Sales transaction file 

Sales journal or listing 

Accounts receivable master file 
Accounts receivable trial balance 
Monthly statement 


Remittance advice 

Prelisting of cash receipts 
Cash receipts transaction file 
Cash receipts journal or listing 


Cash in bank (debits 
from cash receipts) 
Accounts receivable 


Processing and recording cash 
receipts 


Credit memo 
Sales returns and allowances journal 


Sales returns and allowances 
Accounts receivable 


Processing and recording sales 
returns and allowances 


Write-off of uncollectible 
accounts 


Bad debt expense 


Uncollectible account authorization form 
General journal 


Accounts receivable 
Allowance for uncollectible 
accounts 


Writing off uncollectible accounts 
receivable 


Bad debt expense 
Allowance for uncollectible 
accounts 


Providing for bad debts General journal 
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A customer’s request for goods initiates the entire cycle. Legally, it is an offer to buy 
goods under specified terms. The receipt of a customer order often results in the 
immediate creation of a sales order. 


Customer Order A customer order is a request for merchandise by a customer. It 
may be received by telephone, letter, a printed form that has been sent to prospective 
and existing customers, through salespeople, electronic submission of the customer 
order through the Internet, or other network linkage between the supplier and the 
customer. 


Sales Order A sales order is a document for communicating the description, quan- 
tity, and related information for goods ordered by a customer. This is often used to 
indicate credit approval and authorization for shipment. 


Before goods are shipped, a properly authorized person must approve credit to the cus- 
tomer for sales on account. Weak practices in credit approval often result in excessive 
bad debts and accounts receivable that may be uncollectible. An indication of credit 
approval on the sales order often serves as the approval to ship the goods. In many 
companies, the computer automatically approves a credit sale based on preapproved 
credit limits maintained in a customer master file. The computer allows the sale to 
proceed only when the proposed sales order total plus the existing customer balance 
is less than the credit limit in the master file. 


This critical function is the first point in the cycle at which the company transfers 
ownership of assets. Most companies recognize sales when goods are shipped. A ship- 
ping document is prepared at the time of shipment, which can be done automatically 
by computer, based on sales order information. The shipping document, which is of- 
ten a multicopy bill of lading, is essential to the proper billing of shipments to custom- 
ers. Companies that maintain perpetual inventory records also update them based on 
shipping records. 


Shipping Document A shipping document is prepared to initiate shipment of the 
goods, indicating the description of the merchandise, the quantity shipped, and other 
relevant data. The company sends the original to the customer and retains one or 
more copies. The shipping document serves as a signal to bill the customer and may 
be in electronic or paper form. 

One type of shipping document is a bill of lading, which is a written contract 
between the carrier and the seller of the receipt and shipment of goods. Often, bills 
of lading include only the number of boxes or pounds shipped, rather than complete 
details of quantity and description. (For the purpose of this textbook chapter, how- 
ever, we will assume that complete details are included on bills of lading.) 

The bill of lading is often transmitted electronically, once goods have been 
shipped, and automatically generates the related sales invoice as well as the entry in 
the sales journal. Many companies use bar codes and handheld computers to record 
removal of inventory from the warehouse. This information is used to update the per- 
petual inventory records. 


Because billing customers is the means by which the customer is informed of the 
amount due for the goods, it must be done correctly and on a timely basis. The most 
important aspects of billing are: 


¢ All shipments made have been billed (completeness) 
¢ No shipment has been billed more than once (occurrence) 
¢ Each one is billed for the proper amount (accuracy) 


Billing the proper amount is dependent on charging the customer for the quan- 
tity shipped at the authorized price, which includes consideration for freight charges, 
insurance, and terms of payment. 


Processing Customer 
Orders 


Granting Credit 


Shipping Goods 


Billing Customers and 
Recording Sales 
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Intercontinental Commercial Television, Inc. (ICTV), 
is a marketer of “fountain of youth” beauty products. 
Its best-selling product is the Derma Wand, a skin 
care appliance used to reduce lines and wrinkles and 
improve overall skin appearance. The company sells 
directly to users through infomercials produced by 
the company and through third-party distributors 
for sale to end users. In 2007, ICTV entered into a 
contract to sell through Home Shopping Network 
(HSN). HSN ordered product that would be sold on 
the air to customers. The contract was a “drop-ship” 
arrangement in which HSN did not purchase the 
product, but facilitated the sales to end users. ICTV 
retained title to the product until sold on-air and 
shipped to customers. Further, HSN could return 
any product from its customers for 60 days after 
delivery. 

Despite these contract terms, ICTV recognized 
revenue upon receipt of an order from HSN. In some 
cases, it also recognized revenue without a request 


for product from HSN. In these cases, ICTV recog- 
nized revenue based on alleged confirmation from a 
third-party fulfillment warehouse that products had 
been segregated for HSN’s use. ICTV recorded seven 
sales through HSN totaling $2.8 million. Although 
the company’s auditors understood that the sales 
through HSN presented potential revenue recogni- 
tion issues, they did not research the issue and 
failed to obtain copies of the agreements with HSN. 
In addition, they did not confirm ICTV’s accounts 
receivable or inventory held in outside warehouses, 
and they did not perform adequate alternative 
procedures to test these balances. ICTV had previ- 
ously reported almost $1.475 million in net income 
for 2007. When ICTV restated its 2007 financial 
statements, it reflected a loss of over $1 million. 


Source: Securities and Exchange Commission Accounting and 
Auditing Enforcement Release No. 3232, January 20, 2011 
(www.sec.gov). 


In most systems, billing of the customer includes preparation of an electronic 
record or a multicopy sales invoice and real-time updating of the sales transactions 
file, accounts receivable master file, and general ledger master file for sales and 
accounts receivable. The accounting system uses this information to generate the 
sales journal and, along with cash receipts and miscellaneous credits, to prepare the 
accounts receivable trial balance. 


Sales Invoice A sales invoice is a document or electronic record indicating the de- 
scription and quantity of goods sold, the price, freight charges, insurance, terms, 
and other relevant data. The sales invoice is the method of indicating to the customer 
the amount of a sale and the payment due date. Companies send the original to the 
customer, and retain one or more copies. Typically, the computer automatically 
prepares the sales invoice after the customer number, quantity, destination of goods 
shipped, and sales terms are entered. The computer calculates the invoice extensions 
and total sales amount using the information entered, along with prices in the inven- 
tory master file. 


Sales Transaction File This is a computer-generated file that includes all sales trans- 
actions processed by the accounting system for a period, which could be a day, week, 
or month. It includes all information entered into the system and information for each 
transaction, such as customer name, date, amount, account classification or clas- 
sifications, salesperson, and commission rate. The file can also include returns and 
allowances, or there can be a separate file for those transactions. 

The information in the sales transaction file is used for a variety of records, listings, or 
reports, depending on the company’s needs. These may include a sales journal, accounts 
receivable master file, and transactions for a certain account balance or division. 


Sales Journal or Listing This is a listing or report generated from the sales transac- 
tion file that typically includes the customer name, date, amount, and account classi- 
fication or classifications for each transaction, such as division or product line. It also 
identifies whether the sale was for cash or accounts receivable. The journal or listing is 
usually for a month but can cover any period of time. Typically, the journal or listing 
includes totals of every account number for the time period. The same transactions 
included in the journal or listing are also posted simultaneously to the general ledger 
and, if they are on account, to the accounts receivable master file. The journal or list- 
ing can also include returns and allowances or there can be a separate journal or list- 
ing of those transactions. 
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Accounts Receivable Master File This is a computer file used to record individual 
sales, cash receipts, and sales returns and allowances for each customer and to main- 
tain customer account balances. The master file is updated from the sales, sales re- 
turns and allowances, and cash receipts computer transaction files. The total of the 
individual account balances in the master file equals the total balance of accounts re- 
ceivable in the general ledger. A printout of the accounts receivable master file shows, 
by customer, the beginning balance in accounts receivable, each sales transaction, 
sales returns and allowances, cash receipts, and the ending balance. 

In this book, we use the term master file to refer to either the computer file or a 
printout of that file, but it is sometimes called the accounts receivable subsidiary led- 
ger or subledger. 


Accounts Receivable Trial Balance This list or report shows the amount receivable 
from each customer at a point in time. It is prepared directly from the accounts re- 
ceivable master file and is usually an aged trial balance that includes the total balance 
outstanding and the number of days the receivable has been outstanding, grouped by 
category of days (such as less than 30 days, 31 to 60 days, and so on). 


Monthly Statement This is a document sent by mail or electronically to each cus- 
tomer, indicating the beginning balance of their accounts receivable, the amount and 
date of each sale, payments received, credit memos issued, and the ending balance due. 
It is, in essence, a copy of the customer's portion of the accounts receivable master file. 


The four sales transaction functions are necessary for getting the goods into the hands 
of customers, correctly billing them, and reflecting the information in the accounting 
records. The remaining four functions involve the collection and recording of cash, 
sales returns and allowances, write-off of uncollectible accounts, and providing for 
bad debt expense. 

Processing and recording cash receipts includes receiving, depositing, and record- 
ing cash. Cash includes currency, checks, and electronic funds transfers. The most 
important concern is the possibility of theft. Theft can occur before receipts are 
entered in the records or later. It is important that all cash receipts are deposited in the 
bank at the proper amount on a timely basis and recorded in the cash receipts transac- 
tion file. This file is used to prepare the cash receipts journal and update the accounts 
receivable and general ledger master files. 


Remittance Advice A remittance advice is a document mailed to the customer and 
typically returned to the seller with the customer’s payment. It indicates the customer 
name, the sales invoice number, and the amount of the invoice. A remittance advice 
is used as a record of the payment received to permit the immediate deposit of checks 
received and to improve control over the custody of assets. If the customer fails to 
include the remittance advice with the payment, it is common for the person opening 
the mail to prepare one at that time. 


Prelisting of Cash Receipts This is a list prepared when cash is received by someone 
who has no responsibility for recording sales, accounts receivable, or cash and who 
has no access to accounting records. It is used to verify whether cash received was 
recorded and deposited at the correct amounts and on a timely basis. 

Many companies use a bank to process cash receipts from customers. Some 
companies use a lockbox system in which customers mail payments directly to an 
address maintained by the bank. The bank is responsible for opening all receipts, 
maintaining records of all customer payments received at the lockbox address, and 
depositing receipts into the company’s bank account on a timely basis. In other cases, 
receipts are submitted electronically from a customer’s bank account to a company 
bank account through the use of electronic funds transfer (EFT). When customers 
purchase goods by credit card, the issuer of the credit card uses EFT to transfer funds 
into the company’s bank account. For both lockbox systems and EFT transactions, the 


Processing and 
Recording Cash Receipts 
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Understand internal control, 
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controls and substantive tests of 
transactions for sales. 
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bank provides information to the company to prepare the cash receipt entries in the 
accounting records. 


Cash Receipts Transaction File This is a computer-generated file that includes all cash 
receipts transactions processed by the accounting system for a period such as a day, 
week, or month. It includes the same type of information as the sales transaction file. 


Cash Receipts Journal or Listing This listing or report is generated from the cash 
receipts transaction file and includes all transactions for a time period. The same 
transactions, including all relevant information, are included in the accounts receiv- 
able master file and general ledger. 


When a customer is dissatisfied with the goods, the seller often accepts the return 
of the goods or grants a reduction in the charges. The company prepares a receiving 
report for returned goods and returns them to storage. Returns and allowances are 
recorded in the sales returns and allowances transaction file, as well as the accounts 
receivable master file. Credit memos are issued for returns and allowances to aid in 
maintaining control and to facilitate record keeping. 


Credit Memo A credit memo indicates a reduction in the amount due from a customer 
because of returned goods or an allowance. It often takes the same general form as a 
sales invoice, but it supports reductions in accounts receivable rather than increases. 


Sales Returns and Allowances Journal This is the journal used to record sales re- 
turns and allowances. It performs the same function as the sales journal. Many com- 
panies record these transactions in the sales journal rather than in a separate journal. 


Regardless of the diligence of credit departments, some customers do not pay their 
bills. After concluding that an amount cannot be collected, the company must write it 
off. Typically, this occurs after a customer files for bankruptcy or the account is turned 
over to a collection agency. Proper accounting requires an adjustment for these uncol- 
lectible accounts. 


Uncollectible Account Authorization Form This is a document used internally to 
indicate authority to write an account receivable off as uncollectible. 


Because companies cannot expect to collect on 100% of their sales, accounting prin- 
ciples require them to record bad debt expense for the amount they do not expect to 
collect. Most companies record this transaction at the end of each month or quarter. 


CONCEPT CHECK 


|. Describe the nature of the following documents and records and explain their use in the 
sales and collection cycle: customer order, sales invoice, prelisting of cash receipts, and 
monthly statement to customers. 


2. What is the role of the shipping document in invoicing customers? What are the most 
important management assertions related to customer billing? 


METHODOLOGY FOR DESIGNING TESTS OF CONTROLS 
AND SUBSTANTIVE TESTS OF TRANSACTIONS FOR SALES 


In this chapter, we’ve discussed account balances, classes of transactions, business 
functions, and related documents and records for the sales and collection cycle. Now, 
we will study the design of tests of controls and substantive tests of transactions for 
each of the five classes of transactions in the cycle. Although our focus in this chapter 
is on controls over transactions, the auditor must also understand controls over bal- 
ances and presentation and disclosure, particularly in an integrated audit of the finan- 
cial statements and internal control over financial reporting. 
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Methodology for Designing Tests of Controls and 


FIGURE 1e-2 Substantive Tests of Transactions for Sales 


Understand 
internal control — sales 


Assess planned 
control risk — sales 


Determine 
extent of 
tests of controls* 


Design tests of Audit procedures 
controls and 
substantive tests Sample size 
of transactions 
to meet Items to select 
transaction-related 
audit objectives Timing 


*Extent of tests of controls is determined by planned reliance on controls. For accelerated filer 
public companies, testing must be sufficient to issue an opinion on internal control over financial 
reporting. 


Figure 14-2 illustrates the methodology for obtaining an understanding of inter- 
nal control and designing tests of controls and substantive tests of transactions for 
sales. The content of the figure was introduced and explained in Chapter 13. We will 
organize the following discussion around this illustration and apply it to sales and 
cash receipts for Hillsburg Hardware Co. 


As discussed in Chapter 12, to obtain an understanding of internal control for sales, 
auditors study the client’s flowcharts or other control documentation, make inquiries 
of the client using an internal control questionnaire, and perform walkthrough tests 
of sales. We will examine the flowchart of the sales and cash receipts function for 
Hillsburg Hardware Co. in Figure 14-3 (p. 454) to demonstrate the design of tests of 
controls and substantive tests of transactions audit procedures. 


The auditor uses the information obtained in understanding internal control to assess 
control risk. Four steps are essential to this assessment. 


1. The auditor needs a framework for assessing control risk. The six transaction- 
related audit objectives provide this framework. These are shown for sales for 
Hillsburg Hardware in Figure 12-3 (p. 373). These six objectives are the same for 
every audit of sales. 

2. Theauditor must identify the key internal controls and deficiencies for sales, also shown 
in Figure 12-3. These will differ for every audit because every client has different internal 
controls. The controls and deficiencies for Hillsburg Hardware Co. were identified from 
the flowchart in Figure 14-3 and the internal control checklist in Figure 12-2 (p. 370). 

3. After identifying the controls and deficiencies, the auditor associates them with 
the objectives, as shown with C’s and D’s in appropriate columns in Figure 12-3. 

4. The auditor assesses control risk for each objective by evaluating the controls and 
deficiencies for each objective. This step is critical because it affects the auditor’s 
decisions about both tests of controls and substantive tests. It is a highly subjective 
decision. The bottom row of Figure 12-3 labeled “Assessed control risk” shows the 
auditor’s conclusions about assessed control risk for Hillsburg Hardware. 


Understand Internal 
Control— Sales 


Assess Planned Control 
Risk—Sales 
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FIGURE 14-3 Hillsburg Hardware— Flowchart of Sales and Cash Receipts 
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NOTES 
|. All correspondence is sent to the president. 9. Unpaid invoices are filed separately from paid invoices. 
2. All sales order numbers are accounted for weekly by the controller. 10. The receptionist stamps incoming checks with a restrictive 
3. All bills of lading numbers are accounted for weekly by the controller. endorsement immediately upon receipt. 
4. Sales amount recorded on sales invoice is based on standard price list. Il. There are no cash sales. 
The price list is stored in the inventory master file and can be changed 12. Deposits are made daily. 
only with authorization of the vice president of sales. 13. Cash receipts are batched daily by the receptionist. The batch 
5. Duplicate sales invoice is compared with bill of lading daily by Pam totals are compared with the cash receipts journal weekly. 
Dilley for descriptions and quantities and the sales invoice is reviewed . The bank account is reconciled by the controller on a monthly 
for reasonableness of the extensions and footing. She initials a copy basis. 
of the invoice before the original is mailed to the customer. . All bad debt expense and write-off of bad debts are approved 
6. Sales are batched daily by Pam Dilley. The batch totals are compared by the president after being initiated by the controller. 
with the sales journal weekly. . Financial statements are printed monthly by the controller 
7. Statements are sent to customers monthly. and reviewed by the president. 
8. Accounts receivable master file total is compared with general ledger . All errors are reviewed daily by the controller immediately 
by the controller on a monthly basis. after the updating run. Corrections are made the same day. 


We next examine key control activities for sales. Knowledge of these control 
activities assists in identifying the key controls and deficiencies for sales. 


Adequate Separation of Duties Proper separation of duties helps prevent various 
types of misstatements due to both errors and fraud. To prevent fraud, management 
should deny cash access to anyone responsible for entering sales and cash receipts 
transaction information into the computer. The credit-granting function should be 
separated from the sales function, because credit checks are intended to offset the 
natural tendency of sales personnel to optimize volume even at the expense of high 
bad debt write-offs. Personnel responsible for doing internal comparisons should be 
independent of those entering the original data. For example, comparison of batch 
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control totals with summary reports and comparison of accounts receivable master 
file totals with the general ledger balance should be done by someone independent of 
those who input sales and cash receipt transactions. 


Proper Authorization The auditor is concerned about authorization at three key points: 


1. Credit must be properly authorized before a sale takes place. 
2. Goods should be shipped only after proper authorization. 
3. Prices, including basic terms, freight, and discounts, must be authorized. 


The first two controls are meant to prevent the loss of company assets by ship- 
ping to fictitious customers or those who will fail to pay for the goods. Price autho- 
rization is meant to ensure that the sale is billed at the price set by company policy. 
Authorization may be done for each individual transaction or general authorization 
may be given for specific classes of transactions. General authorizations are often 
done automatically by computer. 


Adequate Documents and Records Because each company has a unique system of 
originating, processing, and recording transactions, auditors may find it difficult to eval- 
uate whether each client’s procedures are designed for maximum control. Nevertheless, 
adequate record-keeping procedures must exist before most of the transaction-related 
assertions can be met. Some companies, for example, automatically prepare a multi- 
copy prenumbered sales invoice at the time a customer order is received. Copies of this 
document are used to approve credit, authorize shipment, record the number of units 
shipped, and bill customers. This system greatly reduces the chance of the failure to bill 
a customer if all invoices are accounted for periodically, but controls have to exist to 
ensure the sale isn’t recorded until shipment occurs. Under a system in which the sales 
invoice is prepared only after a shipment has been made, the likelihood of failure to bill 
a customer is high unless some compensating control exists. In many organizations, all 
sales documents are electronic and no paper documents are prepared. 


Prenumbered Documents Prenumbering is meant to prevent both the failure to bill or 
record sales and the occurrence of duplicate billings and recordings. Of course, it does not 
do much good to have prenumbered documents unless they are properly accounted for. 
To use this control effectively, a billing clerk will file a copy of all shipping documents in 
sequential order after each shipment is billed, while someone else will periodically ac- 
count for all numbers and investigate the reason for any missing documents. 


Monthly Statements Sending monthly statements is a useful control because it 
encourages customers to respond if the balance is incorrectly stated. These state- 
ments should be controlled by persons who have no responsibility for handling cash 
or recording sales or accounts receivable to avoid the intentional failure to send the 
statements. For maximum effectiveness, all disagreements about the account balance 
should be directed to a designated person who has no responsibility for handling cash 
or recording sales or accounts receivable. 


Internal Verification Procedures Computer programs or independent personnel 
should check that the processing and recording of sales transactions fulfill each of the 
six transaction-related audit objectives. Examples include accounting for the numeri- 
cal sequence of prenumbered documents, checking the accuracy of document prepa- 
ration, and reviewing reports for unusual or incorrect items. 


After auditors identify the key internal controls and control deficiencies, they assess 
control risk, often using a matrix format similar to Figure 12-3 on page 373. For au- 
dits of accelerated filer public companies, the auditor must perform extensive tests 
of key controls and evaluate the impact of the deficiencies on the auditor’s report on 
internal control over financial reporting. The extent of tests of controls in audits of 
non-accelerated filers and nonpublic companies depends on the effectiveness of the 
controls and the extent to which the auditor believes they can be relied on to reduce 


Determine Extent of 
Tests of Controls 
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control risk. In determining the extent of reliance to place on controls, the auditor also 
considers the cost of the increased tests of controls compared to the potential reduc- 
tion in substantive tests. A lower assessed level of control risk will result in increased 
testing of controls to support the lower control risk, with a corresponding increase in 
detection risk and decrease in the amount of substantive tests. 

Recall from Chapters 9 and 10 that auditing standards require the auditor to pre- 
sume that a fraud risk exists for revenue recognition. Any identified fraud risk is con- 
sidered to be a significant risk, and auditing standards require the auditor to obtain an 
understanding of internal controls related to all significant risks. If the auditor plans 
to rely on controls over a significant risk, the auditor should test the operating effec- 
tiveness of those controls. 


For each key control, one or more tests of controls must be designed to verify its ef- 
fectiveness. In most audits, it is relatively easy to determine the nature of the test of the 
control from the nature of the control. For example, if the internal control is to initial 
customer orders after they have been approved for credit, the test of control is to ex- 
amine the customer order for proper initials. 

The first three columns of Table 14-2 illustrate the design of tests of controls 
for sales for Hillsburg Hardware Co. Column 3 shows one test of control for each 
key internal control in column 2. Observe that this table is organized by transac- 
tion-related audit objective. For example, the second key internal control for the 
occurrence objective is “sales are supported by authorized shipping documents and 
approved customer orders.” The test of control is to “examine sales invoice for sup- 
porting bill of lading and customer order.” For this test, the auditor should start with 
sales invoices and examine documents in support of the sales invoices rather than 
going in the opposite direction. If the auditor traced from shipping documents to sales 
invoices, it is a test of completeness. (Direction of tests is discussed later in this chapter 
on p. 459.) 

As shown in the third column of Table 14-2 for the completeness objective, a 
common test of control for sales is to account for a sequence of various types of docu- 
ments. For example, accounting for a sequence of shipping documents and tracing 
each one to the duplicate sales invoice and recording in the sales journal provides 
evidence of completeness. 

To simultaneously provide evidence of both the occurrence and completeness 
objectives, an auditor can check the sequence of sales invoices selected from the sales 
journal and watch for duplicate and omitted numbers or invoices outside the normal 
sequence. Assume the auditor selects sales invoices #18100 to #18199. The complete- 
ness objective for this procedure will be satisfied if all 100 sales invoices are recorded. 
The occurrence objective will be satisfied if there is no duplicate recording of any of the 
invoice numbers. As indicated in Table 14-2, the lack of verification to prevent the pos- 
sibility of duplicate recording of sales invoices is a deficiency at Hillsburg Hardware Co. 

The appropriate tests of controls for separation of duties are ordinarily restricted 
to the auditor’s observations of activities and discussions with personnel. For exam- 
ple, it is possible to observe whether the billing clerk has access to cash receipts 
when incoming mail is opened or cash is deposited. It is usually also necessary to ask 
personnel what their responsibilities are and if there are any circumstances where 
their responsibilities are different from the normal policy. For example, the employee 
responsible for billing customers may state that he or she does not have access to cash. 
Further discussion may reveal that he or she actually takes over the cashier’s duties 
when the cashier is on vacation. 

Several of the tests of controls in Table 14-2 can be performed using the com- 
puter. For example, the auditor can test whether credit is properly authorized by 
the computer by attempting to initiate transactions that exceed a customer’s credit 
limit. If the control is working effectively, the proposed sales order should be rejected. 
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TABLE 14-2 


Transaction-Related 
Audit Objective 


Recorded sales are for 
shipments actually made 


(occurrence). 


Existing sales transactions 
are recorded 
(completeness). 


to nonfictitious customers 


Key Existing Controls* 


Credit is approved 
automatically by computer 
by comparison to authorized 
credit limits (C1). 

Sales are supported by 
authorized shipping 
documents and approved 
customer orders (C2). 

Batch totals of quantities 
shipped are compared with 
quantities billed (C6). 

Statements are sent to 
customers each month (C9). 


Shipping documents are 
prenumbered and accounted 
for weekly (C5). 

Batch totals of quantities 
shipped are compared with 
quantities billed (C6). 


Test of Controls! 


Examine customer order for 


evidence of credit approval 


(13e). 


Examine sales invoice for 
supporting bill of lading and 
customer order (1 3b). 


Examine file of batch totals 
for initials of data control 
clerk (8). 

Observe whether monthly 
statements are sent (6). 


Account for a sequence of 
shipping documents (10). 


Examine file of batch totals 
for initials of data control 
clerk (8). 


Transaction-Related Audit Objectives, Key Existing Controls, Tests of Controls, 
Deficiencies, and Substantive Tests of Transactions for Sales—Hillsburg Hardware Co. 


Deficiencies* 


There is a lack 
of internal 


verification for the 


possibility of sales 
invoices being 
recorded more 
than once (D1). 


Substantive Tests 
of Transactions! 


Review sales journal 
and master file for 
unusual transactions 
and amounts (1). 

Account for a sequence of 
sales invoices (12). 

Trace sales journal entries 
to supporting documents, 
including duplicate sales 
invoice, bill of lading, 
sales order, and customer 
order (14). 


Trace selected shipping 
documents to the sales 
journal to be sure that 
each one is included (11). 


Recorded sales are for the 
amount of goods shipped 
and are correctly billed 
and recorded (accuracy). 


Sales are supported by 
authorized shipping 
documents and approved 
customer orders (C2). 

Batch totals of quantities 
shipped are compared with 
quantities billed (C6). 

Unit selling prices are obtained 
from the price list master file 
of approved prices (C7). 

Statements are sent to 
customers each month (C9). 


Examine sales invoice for 
supporting documents 


(13b). 


Examine file of batch totals 
for initials of data control 
clerk (8). 

Examine the approved price 
list for accuracy and proper 
authorization (9). 

Observe whether monthly 
statements are sent (6). 


Trace entries in sales journal 
to sales invoices (1 3b). 

Recompute prices and 
extensions on sales 
invoices (13b). 

Trace details on sales 
invoices to 

* shipping documents (1 3c) 

* sales order (13d) 

* customer order (13e) 


Sales transactions are 
correctly included 
in the accounts 
receivable master 
file and are correctly 
summarized (posting and 
summarization). 


Computer automatically posts 
transactions to the accounts 
receivable master file and 
general ledger (C10). 

Accounts receivable master file 
is reconciled to the general 
ledger on a monthly basis 
(Cll). 

Statements are sent to 
customers each month (C9). 


Examine evidence that 
accounts receivable master 
file is reconciled to the 
general ledger (7). 

Examine evidence that 
accounts receivable master 
file is reconciled to the 
general ledger (7). 

Observe whether monthly 
statements are sent (6). 


Trace selected sales invoices 
from the sales journal to 
the accounts receivable 
master file and test for 
amount, date, and invoice 
number (13a). 

Use audit software to foot 
and cross-foot the sales 
journal and trace totals to 
the general ledger (2). 


Sales transactions are 
correctly classified 
(classification). 


Account classifications are 
internally verified (C8). 


Examine document package 
for internal verification 


(13b). 


Examine duplicate sales 
invoice for proper 
account classification 


(13b). 


Sales are recorded on the 
correct dates (timing). 


Shipping documents are 
prenumbered and accounted 
for weekly by the accountant 


(C5). 


Account for a sequence of 
shipping documents (10). 


There is a lack of 
control to test for 
timely recording 
(D2). 


Compare date of recording 
of sale in sales journal 
with duplicate sales 
invoice and bill of lading 
(13b and 13c). 


* Controls (C) and Deficiencies (D) are from the control matrix for sales in Figure 12-3 (p. 373). Controls C3 and C4 from the control matrix are not included here. 
} The number in parentheses after each test of control and substantive test of transaction refers to an audit procedure in the performance format audit program in 


Figure 14-6 (p. 467). 
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The occurrence of sales can be similarly tested by attempting to input nonexistent 
customer numbers, which should be rejected by the computer. This key control will 
reduce the likelihood of fictitious sales. 


Design Substantive Tests of Transactions for Sales In deciding substantive tests of 
transactions, auditors commonly use some procedures on every audit regardless of the 
circumstances, whereas others are dependent on the adequacy of the controls and the 
results of the tests of controls. In the fifth column of Table 14-2, the substantive tests of 
transactions are related to the transaction-related audit objectives in the first column 
and are designed to determine whether any monetary misstatements for that objective 
exist in the transaction. The audit procedures used are affected by the internal controls 
and tests of controls for that objective. Performance materiality, results of the prior 
year, and the risk of material misstatement also influence the procedures used. 

Determining the proper substantive tests of transactions procedures for sales is 
relatively difficult because they vary considerably depending on the circumstances. 
Table 14-2 addresses the substantive tests of transactions procedures in the order of 
the sales transaction-related audit objectives. Note that some audit procedures fulfill 
more than one transaction-related audit objective [for example, audit procedure (13b) 
is included for three objectives]. 

Auditing standards indicate that if the auditor identifies a significant risk at the 
assertion level, the auditor should perform substantive procedures that are respon- 
sive to that risk. If the approach to a significant risk consists only of substantive 
procedures, the procedures should include tests of details. As a result, to address the 
presumption of a fraud risk over revenue recognition, many auditors perform sub- 
stantive tests of transactions to test recorded revenue transactions. Many auditors 
also perform substantive analytical procedures to test the reasonableness of recorded 
revenue. Note, however, that substantive analytical procedures cannot be the only 
substantive evidence to address a significant risk related to revenue, unless the auditor 
has tested the operating effectiveness of controls that mitigate the risk. 

The following paragraphs discuss substantive tests of transaction audit procedures 
that may be performed for each transaction-related balance objective, depending on 
the effectiveness of controls and whether any significant risks have been identified. 


Recorded Sales Occurred For this objective, the auditor is concerned with the 
possibility of three types of misstatements: 


1. Sales included in the journals for which no shipment was made 
2. Sales recorded more than once 
3. Shipments made to nonexistent customers and recorded as sales 


The first two types of misstatements can be due to an error or fraud. The last type 
is always a fraud. The potential consequences of all three are significant because they 
lead to an overstatement of assets and income. 

Unintentional overstatements of sales are typically more easily discovered than 
fraudulent overstatements. An unintentional overstatement normally also results 
in an overstatement of accounts receivable, which the client can detect by sending 
monthly statements to customers. Unintentional misstatements at year-end can often 
be easily found by the auditor through confirmation procedures. With fraudulent 
overstatements, the perpetrator will attempt to conceal the overstatement, making it 
more difficult for auditors to find. Substantive tests of transactions may be necessary 
to discover overstated sales in these circumstances. 

The appropriate substantive tests of transactions for testing the occurrence objec- 
tive depend on where the auditor believes misstatements are likely. Therefore, the 
nature of the tests depends on the nature of the potential misstatement as follows: 


Recorded Sale for Which There Was No Shipment The auditor can vouch selected 
entries in the sales journal to related copies of shipping and other supporting documents 
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to make sure they occurred. If the auditor is concerned about the possibility of a ficti- 
tious duplicate copy of a shipping document, it may be necessary to trace the amounts 
to the perpetual inventory records as a test of whether inventory was reduced. 


Sale Recorded More Than Once Duplicate sales can be determined by reviewing a 
numerically sorted list of recorded sales transactions for duplicate numbers. The audi- 
tor can also test for the proper cancellation of shipping documents. Proper cancellation 
decreases the likelihood that a shipping document will be used to record another sale. 


Shipment Made to Nonexistent Customers This type of fraud normally occurs 
only when the person recording sales is also in a position to authorize shipments. 
Deficient internal controls make it difficult to detect fictitious shipments, such as 
shipments to other locations of the company. To test for nonexistent customers, the 
auditor can trace customer information on the sales invoice to the customer master 
file. These revenue frauds are often referred to as “sham sales.” 


Another effective approach to detecting the three types of misstatements of sales 
transactions just discussed is to trace the credit in the accounts receivable master file to 
its source. If the receivable was actually collected in cash or the goods were returned, 
the original sale likely occurred, unless the auditor has reason to believe that the pay- 
ment or return of goods was also fraudulent. If the credit was for a bad debt write-off 
or a credit memo, or if the account was still unpaid at the time of the audit, this could 
indicate an inappropriately recorded sales transaction. The auditor must examine 
shipping and customer order documents to determine if there is adequate support 
that a sales transaction actually occurred. 


Existing Sales Transactions Are Recorded In many audits, no substantive tests of 
transactions are done for the completeness objective. This is because overstatements of 
assets and income from sales transactions are more likely than understatements, and 
overstatements also represent a greater source of audit risk. As a result, auditors often 
rely on substantive analytical procedures to test the completeness of revenue. If controls 
are inadequate, which is likely if the client does no independent internal tracing from 
shipping documents to the sales journal, substantive tests are likely necessary. 

To test for unbilled shipments, auditors can trace selected shipping documents 
from a file in the shipping department to related duplicate sales invoices and the 
sales journal. To conduct a meaningful test using this procedure, the auditor must be 
confident that all shipping documents are included in the file. This can be done by 
accounting for a numerical sequence of the documents. Generalized audit software 
tools, such as ACL or IDEA, can be used to efficiently identify duplicates and gaps in 
the numerical sequence of electronic records. 


Direction of Tests Auditors need to understand the difference between tracing from 
source documents to the journals and vouching from the journals back to source 
documents. The former tests for omitted transactions (completeness objective); the latter 
tests for nonexistent transactions (occurrence objective). 

To test for the occurrence objective, the auditor starts by selecting a sample of invoice 
numbers from the journal and vouches them to duplicate sales invoices, shipping docu- 
ments, and customer orders, as illustrated in Figure 14-4 (p. 460). In testing for the com- 
pleteness objective, the auditor typically starts by selecting a sample of shipping documents 
and traces them to duplicate sales invoices and the sales journal as a test of omissions. 

When designing audit procedures for the occurrence and completeness objec- 
tives, the starting point for the test is essential. This is called the direction of tests 
and is illustrated in Figure 14-4. For example, if the auditor is concerned about the 
occurrence objective but tests in the wrong direction (from shipping documents to 
the journals), a serious audit deficiency exists. In testing for the other four transaction- 
related audit objectives, the direction of tests is usually not relevant. For example, 
the accuracy of sales transactions can be examined by testing from a duplicate sales 
invoice to a shipping document or vice versa. 
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FIGURE 14-4 Direction of Tests for Sales 
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Completeness Occurrence 
Start Start 


Sales Are Accurately Recorded The accurate recording of sales transactions 


concerns: 


¢ Shipping the amount of goods ordered 
¢ Accurately billing for the amount of goods shipped 
¢ Accurately recording the amount billed in the accounting records 


Auditors typically do substantive tests of transactions in every audit to ensure 
that each of these three aspects of accuracy are done correctly by recalculating 


The PCAOB issues audit practice alerts to highlight 
new, emerging, or otherwise noteworthy circum- 
stances. Revenue is the largest account in the 
financial statements for many companies, and many 
fraudulent financial reporting cases have involved 
the intentional overstatement of revenue. For these 
reasons, the audit of revenue is often a significant 
focus of PCAOB inspections of registered firms. 
PCAOB Staff Audit Practice Alert No. 12 highlights 
several matters related to auditing revenue identi- 
fied through inspections, including: 


e Revenue from contractual arrangements. In cases of 
construction-type or production-type contracts, 
auditors failed to perform procedures to (1) test 
management's estimated cost to complete 
projects; (2) test the progress of the construc- 
tion or production contracts; or (3) evaluate the 
company’s approach for applying the percentage- 
of-completion method. 

Multiple-element revenue arrangements. In some 
instances, auditors failed to evaluate the recogni- 
tion of revenue from transactions with multiple 
elements, such as a transaction involving an initial 
sale and ongoing service commitment. 

Testing whether revenue was recognized in the cor- 
rect period. PCAOB staff noted cases of failure to 
perform cutoff procedures to address the risk of 
material misstatement, and failures to obtain evi- 
dence about whether the delivery of goods had oc- 
curred to allow the company to recognize revenue. 
Responding to fraud risks associated with revenue. 
Deficiencies included a failure to identify and 
respond to the presumed fraud risk related to 
improper revenue recognition, including not 
changing the nature of the audit procedures. 


e Testing and evaluating controls over revenue. Auditors 
relied on controls over revenue to reduce substan- 
tive testing, but this reliance was not supported 
because the testing of the controls was insufficient, 
or testing identified control deficiencies. 
Substantive analytical procedures over revenue. 

When properly applied under appropriate con- 
ditions, substantive analytical procedures can 
potentially identify a material misstatement in 
revenue. Deficiencies identified included (1) using 
expectations that were not sufficiently precise, 
including evaluating whether there was a plausible 
and predictable relationship among the data; 

(2) failure to investigate significant differences and 
to corroborate management's responses regarding 
these differences; and (3) failure to test the com- 
pleteness and accuracy of the information obtained 
from the client that was used in performing the 
analytical procedure. 

Testing revenue in companies with multiple locations. 
In some cases, auditors did not test, or test suf- 
ficiently, revenues at locations that had specific 
risks, including fraud risks. 


The Financial Accounting Standards Board and 
International Accounting Standards Board have 
jointly adopted a converged standard on revenue 
recognition. The PCAOB notes that the auditing 
matters they have identified in the audit practice 
alert will continue to be relevant under the new 
accounting standard for revenue recognition. 


Source: Public Company Accounting Oversight Board Staff 
Audit Practice Alert No. 12, Matters Related to Auditing 
Revenue in an Audit of Financial Statements, September 9, 
2014 (pcaobus.org). 
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information in the accounting records and comparing information on different 
documents. Auditors commonly compare prices on duplicate sales invoices with an 
approved price list, recalculate extensions and footings, and compare the details on 
the invoices with shipping records for description, quantity, and customer identifi- 
cation. Often, auditors also examine customer orders and sales orders for the same 
information. In a three-way match test, the auditor compares the quantity and descrip- 
tion of items billed to the same information on the shipping document and customer 
order to determine whether they are in agreement. 

The comparison of tests of controls and substantive tests of transactions for the 
accuracy objective is a good example of how audit time can be saved when effective 
internal controls exist. Obviously, the test of control for this objective takes almost no 
time because it involves examining only initials or other evidence of internal verifica- 
tion. If the controls over verification of invoice quantities, prices, and extensions are 
automated, tests can be further reduced, assuming general IT controls are effective. 
If controls are effective, the sample size for substantive tests of transactions can be 
reduced, yielding significant savings. 


Sales Transactions Are Correctly Included in the Master File and Correctly 
Summarized The proper inclusion of all sales transactions in the accounts receivable 
master file is essential because the accuracy of these records affects the client’s ability to 
collect outstanding receivables. Similarly, the sales journal must be correctly totaled and 
posted to the general ledger if the financial statements are to be correct. In most engage- 
ments, auditors perform some clerical accuracy tests, such as footing the journals and 
tracing the totals and details to the general ledger and the master file, to check whether 
there are errors or fraud in the processing of sales transactions. The extent to which such 
tests are needed is determined by the quality of internal controls. Generalized audit soft- 
ware allows for efficient testing of the accuracy of electronic journals and records. 

Tracing from the sales journal to the master file is typically done as a part of 
fulfilling other transaction-related audit objectives, but footing the sales journal and 
tracing the totals to the general ledger are done as separate procedures. 

Posting and summarization tests differ from those for other transaction-related 
audit objectives because they include footing journals, master file records, and led- 
gers, and tracing from one to the other among these three. 

When footing and comparisons are restricted to these three records, the transac- 
tion-related audit objective is posting and summarization. When the journals, master 
files, or ledgers are traced to or from a document, the objective is one of the other five 
objectives, depending on what is being verified. To illustrate, when an auditor com- 
pares an amount on a duplicate sales invoice with either the sales journal or master 
file entry, it is an accuracy audit objective procedure. When an auditor traces an entry 
from the sales journal to the master file, it is a posting and summarization procedure. 


Recorded Sales Are Correctly Classified Although it is less of a problem in sales 
than in some transaction cycles, auditors must still be concerned that transactions are 
charged to the correct general ledger account. With cash and credit sales, company per- 
sonnel should not debit accounts receivable for a cash sale or credit sales for collection 
of a receivable. They should also not classify sales of operating assets, such as buildings, 
as sales. For those companies using more than one sales classification, such as compa- 
nies issuing segmented earnings statements, proper classification is essential. 

Auditors commonly test sales for proper classification as part of testing for accu- 
racy. They examine supporting documents to determine the proper classification of 
a given transaction and compare this with the actual account to which it is charged. 


Sales Are Recorded on the Correct Dates Sales should be billed and recorded as 
soon after shipment takes place as possible to prevent the unintentional omission of 
transactions from the records and to make sure that sales are recorded in the proper 
period. Timely recorded transactions are also less likely to contain misstatements. When 
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auditors do substantive tests of transactions procedures for accuracy, they commonly 
compare the date on selected bills of lading or other shipping documents with the date on 
related duplicate sales invoices, the sales journal, and the accounts receivable master file. 
Significant differences indicate potential cutoff problems in the test of year-end balances. 


Figure 14-2 (p. 453) is an overview of how auditors design tests of controls and substan- 
tive tests of transactions for sales. Table 14-2 (p. 457) is a matrix that shows how auditors 
decide tests of controls and substantive tests of transactions for sales after controls and 
control deficiencies have been identified. The following is a discussion of Table 14-2. 


Transaction-Related Audit Objectives (Column |) The transaction-related audit 
objectives for sales in Table 14-2 are derived from the framework presented in ear- 
lier chapters. Although certain internal controls satisfy more than one objective, 
auditors should consider each objective separately to facilitate a better assessment 
of control risk. 


Key Existing Controls (Column 2) Management designs the internal controls for sales 
to achieve the six transaction-related audit objectives. If the controls necessary to satisfy 
any one of the objectives are inadequate, the likelihood of misstatements related to that 
objective is increased, regardless of the controls for the other objectives. (The methodol- 
ogy for determining existing controls was addressed on page 374 in Chapter 12.) 

The controls in column 2 were identified by the auditor earlier in the audit and 
come from the auditor’s control risk matrix, such as the one illustrated in Figure 12-3 
(p. 373). A control is included in more than one row in Table 14-2 if there is more than 
one C for that control on the control risk matrix. 


Tests of Controls (Column 3) For each internal control in column 2, the auditor 
designs a test of control to verify its effectiveness. Observe that the tests of controls in 
Table 14-2 relate directly to the internal controls. For each control, there should be at 
least one test of control, but there can be more than one. 


Deficiencies (Column 4) Deficiencies identified by the auditor indicate the absence 
of effective controls. The auditor should evaluate control deficiencies by consider- 
ing potential misstatements that could occur and any compensating controls. An 
auditor can respond to a deficiency in internal control in a financial statement audit 
by expanding substantive tests of transactions to determine whether the deficiency 
resulted in a significant number of misstatements. 


Substantive Tests of Transactions (Column 5) These tests help auditors determine 
whether monetary misstatements exist in sales transactions. In Table 14-2, the sub- 
stantive tests of transactions directly relate to the objectives in the first column. 

It is essential for auditors to understand the relationships among the columns in 
Table 14-2. 


¢ The first column includes the six transaction-related audit objectives. The gen- 
eral objectives are the same for any class of transactions, but the specific objec- 
tives vary for sales, cash receipts, or any other classes of transactions. 

* Column 2 lists one or more illustrative internal controls for each transaction-related 
audit objective. Each control must be related to one or more audit objectives. 

* Column 3 includes one test of control that tests the internal control in column 2. A 
test of control has no meaning unless it tests a specific control. The table con- 
tains one test of control in column 3 for each internal control in column 2, but 
the auditor can decide to use more than one test of control for a given control. 

* Column 4 includes internal control deficiencies. They represent a lack of 
effective internal controls and are determined using the same approach used for 
identifying controls. 

¢ The last column includes common substantive tests of transactions that sup- 
port a specific transaction-related audit objective in column 1. The substantive tests 
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of transactions are not directly related to the key control or test of control col- 
umns, but the extent of substantive tests of transactions depends, in part, on 
which key controls exist, the results of the tests of controls, and any internal 
control deficiencies for the transaction-related audit objective. 


The information presented in Table 14-2 is intended to help auditors design audit 
programs that satisfy the transaction-related audit objectives in a given set of circum- 
stances. This methodology helps the auditor design an effective and efficient audit pro- 
gram that responds to the unique risks of material misstatements at each client. 

After the appropriate audit procedures for a given set of circumstances have been 
designed, they must, of course, be performed. However, it is likely to be inefficient 
to do the audit procedures as they are stated in the design format of Table 14-2. In 
converting from a design format audit program to a performance format audit 
program, procedures are combined. This achieves the following: 


Design and Performance 
Format Audit 
Procedures 


¢ Eliminates duplicate procedures. 

¢ Makes sure that when a given document is examined, all procedures to be per- 
formed on that document are done at that time. 

¢ Enables the auditor to do the procedures in the most effective order. For exam- 
ple, by footing the journal and reviewing the journal for unusual items first, the 
auditor gains a better perspective in doing the detailed tests. 


Figure 14-6 (p. 467) illustrates a performance format audit program for sales 
and cash receipts for Hillsburg Hardware. It is a summary of the audit procedures in 
Tables 14-2 and 14-3 (p. 465). The numbers for the audit procedures in Figure 14-6 
correspond to the numbers at the end of the tests of control and substantive audit 
procedures in Tables 14-2 and 14-3. These numbers are included to help you see the 
relationship between the two tables and Figure 14-6. 


CONCEPT CHECK 


|. What three types of authorizations are commonly used as internal controls for sales? 
Explain the importance of each. 


2. List the transaction-related audit objectives for the audit of sales transactions. For each 
objective, state one internal control that the client can use to reduce the likelihood of 
misstatements. 


SALES RETURNS AND ALLOWANCES 
The transaction-related audit objectives and the client’s methods of controlling mis- ‘OBJECTIVE 14-4 


statements are essentially the same for processing credit memos as those described for Rey he metocclog anton 

sales, with two differences. The first is materiality. In many instances, sales returns and trols over sales transactions to 

allowances are so immaterial the auditor can ignore them. controls over sales returns and 
The second difference is emphasis on the occurrence objective. For sales returns and _ allowances. 

allowances, auditors usually emphasize testing recorded transactions to uncover any 

theft of cash from the collection of accounts receivable that was covered up by a ficti- 

tious sales return or allowance. (Although auditors usually emphasize the occurrence 

objective for sales returns and allowances transactions, the completeness objective is 

especially important in tests of account balances to determine if sales and returns are 

understated at year-end.) 
Naturally, other objectives should not be ignored. But because the objectives and 

methodology for auditing sales returns and allowances are essentially the same as for 

sales, we do not include a detailed study of them. If you need to audit sales returns 

and allowances, you should be able to apply the same logic to arrive at suitable con- 

trols, tests of controls, and substantive tests of transactions to verify the amounts. 
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METHODOLOGY FOR DESIGNING TESTS OF CONTROLS AND 
SUBSTANTIVE TESTS OF TRANSACTIONS FOR CASH RECEIPTS 


Understand internal control, 
and design and perform tests of 
controls and substantive tests of 
transactions for cash receipts. 


Determine Whether 
Cash Received Was 
Recorded 
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Prepare Proof of 
Cash Receipts 


Auditors use the same methodology for designing tests of controls and substantive tests 
of transactions for cash receipts as they use for sales. Cash receipts tests of controls and 
substantive tests of transactions audit procedures are developed around the same frame- 
work used for sales, but of course the specific objectives are applied to cash receipts. 
Given the transaction-related audit objectives, the auditor follows this process: 


¢ Determine key internal controls for each audit objective 

* Design tests of control for each control used to support a reduced control risk 

* Design substantive tests of transactions to test for monetary misstatements for 
each objective 


As in all other audit areas, the tests of controls depend on the controls the audi- 
tor identifies, the extent they will be relied on to reduce assessed control risk, and 
whether the company being audited is publicly traded. 

Figure 14-5 (p. 466) presents the control risk matrix for cash receipts for Hillsburg 
Hardware. It is based on the information in the sales and cash receipts flowchart in 
Figure 14-3 (p. 454). 

Table 14-3 lists key internal controls, common tests of controls, and common 
substantive tests of transactions to satisfy each of the transaction-related audit objec- 
tives for cash receipts for Hillsburg Hardware Co. Table 14-3 follows the same format 
used for sales as shown in Table 14-2 (p. 457). The tests of controls and substantive 
tests of transactions for cash receipts are combined with those for sales in the perfor- 
mance format audit program in Figure 14-6 (p. 467). 

Because the methodology for cash receipts is similar to that for sales, our discus- 
sion is not as detailed as our discussion of the internal controls, tests of controls, and 
substantive tests of transactions for the audit of sales. Instead, we focus on the sub- 
stantive audit procedures that are most likely to be misunderstood. 

An essential part of the auditor’s responsibility in auditing cash receipts is to identify 
deficiencies in internal control that increase the likelihood of fraud. To expand on Table 14-3, 
we emphasize those audit procedures that are designed primarily for the discovery of fraud. 
We omit discussion of some procedures only because their purpose and the methodology 
for applying them should be apparent from the description provided in Table 14-3. 


The most difficult type of cash embezzlement for auditors to detect is when it occurs 
before the cash is recorded in the cash receipts journal or other cash listing, especially 
if the sale and cash receipt are recorded simultaneously. For example, if a grocery 
store clerk takes cash and intentionally fails to record the sale and receipt of cash on 
the cash register, it is extremely difficult to discover the theft. To prevent this type of 
fraud, internal controls such as those included in the second objective in Table 14-3 
are implemented by many companies. The type of control will, of course, depend on 
the type of business. For example, the controls for a retail store in which the cash is 
received by the same person who sells the merchandise and enters cash receipts in a 
cash register should be different from the controls for a company in which all receipts 
are received through the mail several weeks after the sales have taken place. 

It is normal practice to trace from prenumbered remittance advices or prelists of 
cash receipts to the cash receipts journal and subsidiary accounts receivable records as a 
substantive test of the recording of actual cash received. This test will be effective only if a 
prelisting or other record of payments was prepared at the time payments were received. 


A useful audit procedure to test whether all recorded cash receipts have been deposited 
in the bank account is a proof of cash receipts. In this test, the total cash receipts re- 
corded in the cash receipts journal for a given period, such as a month, are reconciled 
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TABLE 14-3 


Transaction-Related 
Audit Objective 


Recorded cash receipts 
are for funds actually 
received by the company 
(occurrence). 


Cash received is recorded 
in the cash receipts 
journal (completeness). 


Key Existing Controls* 


Accountant independently 
reconciles bank account (Cl). 


Batch totals of cash receipts 
are compared with computer 
summary reports (C4). 


Prelisting of cash receipts is 
prepared (C2). 

Checks are restrictively 
endorsed (C3). 

Batch totals of cash receipts 
are compared with computer 
summary reports (C4). 

Statements are sent to 
customers each month (C5). 


Test of Controls! 


Observe whether 
accountant reconciles 
bank account (3). 

Examine file of batch 
totals for initials of data 
control clerk (8). 


Observe prelisting of cash 
receipts (4). 

Observe endorsement of 
incoming checks (5). 

Examine file of batch 
totals for initials of data 
control clerk (8). 

Observe whether monthly 
statements are sent (6). 


Deficiencies* 


Prelisting of cash is 
not used to verify 
recorded cash 
receipts (D1). 


Transaction-Related Audit Objectives, Key Existing Controls, Tests of Controls, Deficiencies, 
and Substantive Tests of Transactions for Cash Receipts—Hillsburg Hardware Co. 


Substantive Tests 
of Transactions! 


Review cash receipts journal 
and master file for 
unusual transactions and 
amounts (I). 

Trace cash receipts entries 
from the cash receipts 
journal entries to the bank 
statement (19). 

Prepare a proof of cash 
receipts (18). 


Obtain prelisting of cash 
receipts and trace amounts 
to the cash receipts journal, 
testing for names, amounts, 
and dates (15). 

Compare the prelisting with 
the duplicate deposit 


slip (16). 


Cash receipts are deposited 
and recorded at the 
amounts received 
(accuracy). 


Cash receipts are correctly 
included in the accounts 
receivable master 
file and are correctly 
summarized (posting and 
summarization). 


Accountant independently 
reconciles bank account (Cl). 


Batch totals of cash receipts 
are compared with computer 
summary reports (C4). 

Statements are sent to 
customers each month (C5). 


Computer automatically posts 
transactions to the accounts 
receivable master file and 
general ledger (C8). 

Accounts receivable master file 
is reconciled to the general 
ledger on a monthly basis (C9). 


Statements are sent to 
customers each month (C5). 


Observe whether 
accountant reconciles 
bank account (3). 

Examine file of batch 
totals for initials of data 
control clerk (8). 

Observe whether monthly 
statements are sent (6). 


Examine evidence that 
accounts receivable 
master file is reconciled 
to general ledger (7). 

Examine evidence that 
accounts receivable 
master file is reconciled 
to general ledger (7). 

Observe whether monthly 
statements are sent (6). 


Obtain prelisting of cash 
receipts and trace amounts 
to the cash receipts journal, 
testing for names, amounts, 
and dates (15). 

Prepare proof of cash 
receipts (18). 


Trace selected entries from 
the cash receipts journal 
to the accounts receivable 
master file and test for 
dates and amounts (20). 

Trace selected credits from 
the accounts receivable 
master file to the cash 
receipts journal and test for 
dates and amounts (21). 

Use audit software to foot and 
cross-foot the sales journal 
and trace totals to the 
general ledger (2). 


Cash receipts transactions 
are correctly classified 
(classification). 


Cash receipts transactions are 
internally verified (C6). 


Examine evidence of 


internal verification (15). 


Examine prelisting for proper 
account classification (17). 


Cash receipts are recorded 
on the correct dates 
(timing). 


Procedures require recording of 
cash on a daily basis (C7). 


Observe unrecorded cash 
at a point in time (4). 


Compare date of deposit per 
bank statement to the dates 
in the cash receipts journal 
and prelisting of cash 
receipts (16). 


* Controls (C) and Deficiencies (D) are from control matrix for cash receipts in Figure 14-5 (p. 466). 
} The number in parentheses after each test of control and substantive test of transaction refers to an audit procedure in the performance format audit program in 


Figure 14-6 (p. 467). 


with the actual deposits made to the bank during the same period. A difference in the 
two may be the result of deposits in transit and other items, but the amounts can be 
reconciled and compared. This procedure is not useful in discovering cash receipts that 
have not been recorded in the journals or time lags in making deposits, but it can help 
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Internal Control 


Accountant independently reconciles bank account (Cl). G 


Cash Receipts Transaction-Related Audit Objectives 


accounts receivable master file and are correctly 


Cash received is recorded in the cash receipts 
summarized (posting and summarization). 


Recorded cash receipts are for funds actually 
journal (completeness). 


received by the company (occurrence). 
Cash receipts are correctly included in the 


amounts received (accuracy). 
Cash receipts transactions are correctly classified 


(classification). 
Cash receipts are recorded on the correct 


fay Cash receipts are deposited and recorded at the 
dates (timing). 


Prelisting of cash receipts is prepared (C2). & 


Checks are restrictively endorsed (C3). Gc 


Batch totals of cash receipts are compared with computer summary S E iE 


reports (C4). 


CONTROLS 


Statements are sent to customers each month (C5). c E G 
Cash receipts transactions are internally verified (C6). Cc 


Procedures require recording of cash on a daily basis (C7). G 


Computer automatically posts transactions to the accounts receiv- S 
able master file and to the general ledger (C8). 


Accounts receivable master file is reconciled to the general ledger on Cc 


a monthly basis (C9). 


receipts (D1). 


DEFICIENCY 


Ea Assessed control risk 
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of Accounts Receivable 


Test to Discover Lapping 


Prelisting of cash is not used to verify recorded cash D 


Low Medium Low Low Low Low 


C = Control; D = Significant deficiency or material weakness 


uncover recorded cash receipts that have not been deposited, unrecorded deposits, un- 
recorded loans, bank loans deposited directly into the bank account, and similar mis- 
statements. Ordinarily, this somewhat time-consuming procedure is used only when 
the controls are deficient. In rare instances, when controls are extremely weak, the 
period covered by the proof of cash receipts may cover the entire year. 


Lapping of accounts receivable is the postponement of entries for the collection 
of receivables to conceal an existing cash shortage. The embezzlement is perpetrated by a 
person who handles cash receipts and then enters them into the computer system. He 
or she defers recording the cash receipts from one customer and covers the shortages 
with receipts of another. These in turn are covered from the receipts of a third customer 
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FIGURE 14-6 


Audit Program for Tests of Controls and Substantive Tests of Transactions for Sales 


and Cash Receipts for Hillsburg Hardware Co. (Performance Format) 


Hillsburg Hardware Co. 


Tests of Controls and Substantive Tests of Transactions Audit Procedures for Sales and Cash Receipts 
(Sample size and the items in the sample are not included.) 


General 


SOR OO OSS OTE OS eo 


Shipment of Goods 


Review journals and master file for unusual transactions and amounts. 
Use audit software to foot and cross-foot the sales and cash receipts journals and trace the totals to the general ledger. 
Observe whether accountant reconciles the bank account. 

Observe whether cash is prelisted and the existence of any unrecorded cash. 
Observe whether restrictive endorsement is used on cash receipts. 

Observe whether monthly statements are sent. 

Observe whether accountant compares master file total with general ledger account. 
Examine file of batch totals for initials of data control clerk. 
Examine the approved price list in the inventory master file for accuracy and proper authorization. 


10. Account for a sequence of shipping documents. 
Il. Trace selected shipping documents to the sales journal to be sure that each one has been included. 


Billing of Customers and Recording the Sales in the Records 


12. Account for a sequence of sales invoices in the sales journal. 
13. Trace selected sales invoice numbers from the sales journal to 


accounts receivable master file and test for amount, date, and invoice number. 


. duplicate sales invoice and check for the total amount recorded in the journal, date, customer name, and account classification. 
Check the pricing, extensions, and footings. Examine underlying documents for indication of internal verification. 


. bill of lading and test for customer name, product description, quantity, and date. 


. duplicate sales order and test for customer name, product description, quantity, date, and indication of internal verification. 
. customer order and test for customer name, product description, quantity, date, and credit approval. 
14. Trace recorded sales from the sales journal to the file of supporting documents, which includes a duplicate sales invoice, bill of lading, 
sales order, and customer order. 


Processing Cash Receipts and Recording the Amounts in the Records 


15. Obtain the prelisting of cash receipts and trace amounts to the cash receipts journal, testing for names, amounts, dates, and internal 


verification. 


16. Compare the prelisting of cash receipts with the duplicate deposit slip, testing for names, amounts, and dates. Trace the total from the 
cash receipts journal to the bank statement, testing for a delay in deposit. 

17. Examine prelisting for proper account classification. 

18. Prepare a proof of cash receipts. 

19. Trace cash receipt entries from the cash receipts journal to the bank statement, testing for dates and amounts of deposits. 

20. Trace selected entries from the cash receipts journal to entries in the accounts receivable master file and test for dates and amounts. 

21. Trace selected credits from the accounts receivable master file to the cash receipts journal and test for dates and amounts. 


WHY THE DELAY? 
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Ann Mundy was an internal auditor for Speedtrack 
Convenience Stores. Each store was responsible for 
making daily deposits into a local bank account and 
providing a daily sales report to the central office. 
While reviewing monthly bank reconciliations, she 
observed that all the deposits in transit at month- 
end cleared the next day, except for the deposit at 
one store, which cleared a day later. She did not 
think this was unusual and did not investigate further. 
The following month, Ann was performing the 
same procedure and obtained the same results. All 
the deposits cleared the next day, except for the 
deposit for one store, which cleared a day later. The 
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delayed deposit was for the same store that had had 
a delayed deposit the previous month. Upon inves- 
tigation, Ann discovered that the store manager had 
stolen the receipts for one day. Because stores had 
to report daily sales, the manager reported the sales 
for the next day as having occurred the previous 
day. The manager had to repeat this process every 
day to hide the theft, which made it appear that 
there was an extra-day delay in the deposit clearing 
the bank. The manager was immediately fired, and 
Speedtrack instituted new procedures that required 
same-day reporting of sales and procedures to in- 
vestigate immediately any delay in cleared deposits. 
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a few days later. The employee must continue to cover the shortage through repeated 
lapping, replace the stolen money, or find another way to conceal the shortage. 

This embezzlement can be easily prevented by separation of duties and a mandatory 
vacation policy for employees who both handle cash and enter cash receipts into the sys- 
tem. It can be detected by comparing the name, amount, and dates shown on remittance 
advices with cash receipts journal entries and related duplicate deposit slips. Because this 
procedure is relatively time-consuming, it is ordinarily performed only when specific 
concerns with embezzlement exist because of a deficiency in internal control. 


AUDIT TESTS FOR UNCOLLECTIBLE ACCOUNTS 


Apply the methodology for 
controls over the sales and 
collection cycle to controls 
related to uncollectible 
accounts receivable. 


Understand the effect of tests 
of controls and substantive tests 
of transactions on substantive 
tests of details of balances. 
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The same as for sales returns and allowances, the auditor’s primary concern in the 
audit of the write-off of uncollectible accounts receivable is the possibility of client 
personnel covering up an embezzlement by writing off accounts receivable that have 
already been collected (the occurrence transaction-related audit objective). The major 
control for preventing this fraud is proper authorization of the write-off of uncollect- 
ible accounts by a designated level of management only after a thorough investigation 
of the reason the customer has not paid. 

Normally, verification of the accounts written off takes relatively little time. 
Typically, the auditor examines approvals by the appropriate persons. For a sample of 
accounts written off, it is also usually necessary for the auditor to examine correspon- 
dence in the client's files establishing their uncollectibility. In some cases, the auditor 
also examines credit reports such as those provided by Dun & Bradstreet. After the 
auditor has concluded that the accounts written off by general journal entries are 
proper, selected items should be traced to the accounts receivable master file to test 
whether the write-off was properly recorded. 

Realizable value is an essential balance-related audit objective for accounts receivable 
because collectibility of receivables is often a significant concern. Ideally, clients establish 
several controls to reduce the likelihood of uncollectible accounts. We've already dis- 
cussed credit approval by an appropriate person. Two other controls are: 


* The preparation of a periodic aged accounts receivable trial balance for review 
and follow-up by appropriate management personnel. 

* A policy of writing off uncollectible accounts when they are no longer likely to 
be collected. 


The estimation of bad debt expense, which is the fifth class of transactions in the 
sales and collection cycle, obviously relates to realizable value and the write-off of 
uncollectible accounts. However, because the estimation of bad debts is based on the 
year-end accounts receivable balances, the auditor evaluates the estimate for uncol- 
lectible accounts and related controls as part of the tests of details of ending accounts 
receivable balances, which we discuss in Chapter 16. 


EFFECT OF RESULTS OF TESTS OF CONTROLS 
AND SUBSTANTIVE TESTS OF TRANSACTIONS 


The results of the tests of controls and substantive tests of transactions have a signifi- 
cant effect on the remainder of the audit, especially on substantive tests of details of 
balances. The parts of the audit most affected by the tests of controls and substantive 
tests of transactions for the sales and collection cycle are the balances in accounts re- 
ceivable, cash, bad debt expense, and allowance for doubtful accounts. 

Furthermore, if the test results are unsatisfactory, it is necessary to do additional 
substantive testing of sales, sales returns and allowances, write-off of uncollectible 
accounts, and processing cash receipts. Auditors of accelerated filer public companies 
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Types of Audit Tests for the Sales and Collection Cycle (see 
Figure 14-1 on p. 447 for accounts) 


FIGURE 14-7 


Accounts Receivable Cash in Bank 


<— Sales transactions ———> |~<— Cash receipts transactions —> 


Audited by Audited by 
TOC, STOT, and SAP TOC, STOT, and SAP, 


Ending balance Ending balance 


Audited by Audited by 
SAP and TDB, SAP and TDB 


Tests of controls Substantive Substantive Tests of 
(including procedures to tests of analytical details of 
obtain an understanding transactions procedures balances 

of internal control) (TOC) (STOT) (SAP) (TDB) 


Sufficient 
appropriate 
evidence 


must also consider the impact of the unsatisfactory test results on the audit of internal 
control over financial reporting. 

At the completion of the tests of controls and substantive tests of transactions, audi- 
tors must analyze each exception, for both public and nonpublic company audits, to deter- 
mine its cause and the implication of the exception on assessed control risk, which may 
affect the supported detection risk and related remaining substantive tests. The methodol- 
ogy and implications of exceptions analysis are explained more fully in the next chapter. 

The most significant effect of the results of the tests of controls and substan- 
tive tests of transactions in the sales and collection cycle is on the confirmation of 
accounts receivable. The type of confirmation, the size of the sample, and the tim- 
ing of the test are all affected. The effect of the tests on accounts receivable, bad debt 
expense, and allowance for uncollectible accounts is considered in Chapter 16. 

Figure 14-7 illustrates the major accounts in the sales and collection cycle and the 
types of audit tests used to audit these accounts. This figure was introduced in the pre- 
ceding chapter (p. 411) and is presented here for further review. 


CONCEPT CHECK 
I. Describe whether the auditor is more concerned about the occurrence or complete- 
ness objective related to cash receipts. 


2. How might the write-off of accounts receivable increase the risk of fraud related to cash 
receipts? 


SUMMARY 


This chapter deals with designing tests of controls and substantive tests of transactions 
for each of the five classes of transactions in the sales and collection cycle, including sales, 
cash receipts, sales returns and allowances, write-off of uncollectible accounts receivable, 
and bad debt expense. 

The methodology for designing tests of controls and substantive tests of transac- 
tions is, in concept, the same for each of the five classes of transactions and includes the 
following steps: 


¢ Understand internal control 
¢ Assess planned control risk 
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* Determine the extent of tests of controls 
* Design tests of controls and substantive tests of transactions to meet transaction- 
related audit objectives 


In designing tests of controls for each class of transactions, auditors focus on testing 
internal controls that they intend to rely upon to reduce control risk. First, the auditor 
identifies internal controls, if any exist, for each transaction-related audit objective. After 
assessing control risk for each objective, the auditor then determines the extent of tests of 
controls that must be performed. 

If the auditor is reporting on the effectiveness of internal control over financial re- 
porting, extensive tests of controls must be performed to provide the basis for the audi- 
tor’s report. For audits of non-accelerated filers and nonpublic companies, the decision to 
perform tests of controls is based on the effectiveness of controls and the extent to which 
the auditor intends to rely on them to reduce control risk. 

The auditor also designs substantive tests of transactions for each class of transactions 
to determine whether the monetary amounts of transactions are correctly recorded. Like 
tests of controls, substantive tests of transactions are designed for each transaction-related 
audit objective. 

After the design of tests of controls and substantive tests of transactions for each audit 
objective and each class of transactions is completed, the auditor organizes the audit pro- 
cedures into a performance format audit program. The purpose of this audit program is to 


help the auditor complete the audit tests efficiently. 


ESSENTIAL TERMS 


Business functions for the sales and 
collection cycle—the key activities that 
an organization must complete to execute 
and record business transactions for sales, 
cash receipts, sales returns and allowances, 
write-off of uncollectible accounts, and 
bad debt expense 


Classes of transactions in the sales and 
collection cycle—the categories of trans- 
actions for the sales and collection cycle in 
a typical company: sales, cash receipts, sales 
returns and allowances, write-off of uncol- 
lectible accounts, and bad debt expense 


Design format audit program—the au- 
dit procedures resulting from the auditor's 
decisions about the appropriate audit pro- 
cedures for each audit objective; this audit 
program is used to prepare a performance 
format audit program 


Direction of tests—the starting point for 
testing the occurrence and completeness 
transaction-related audit objectives; vouch- 
ing from journals to source documents tests 
for occurrence and tracing from source doc- 
uments to journals tests for completeness 


Lapping of accounts receivable—the 
postponement of entries for the collection 
of receivables to conceal an existing cash 
shortage 


Performance format audit program— 
the audit procedures for a class of trans- 
actions organized in the format in which 
they will be performed; this audit program 
is prepared from a design format audit pro- 
gram 


Proof of cash receipts—an audit proce- 
dure to test whether all recorded cash re- 
ceipts have been deposited in the bank ac- 
count by reconciling the total cash receipts 
recorded in the cash receipts journal for a 
given period with the actual deposits made 
to the bank 


Sales and collection cycle—involves the 
decisions and processes necessary for the 
transfer of the ownership of goods and 
services to customers after they are made 
available for sale; it begins with a request 
by a customer and ends with the conver- 
sion of material or service into an account 
receivable, and ultimately into cash 


REVIEW QUESTIONS 


14-1 (OBJECTIVE 14-2) Describe the following documents and records and explain their 
use in the sales and collection cycle: bill of lading, credit memo, remittance advice, and 
accounts receivable trial balance. 
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14-2 (OBJECTIVE 14-2) Explain the importance of proper credit approval for sales. What 
effect do adequate controls in the credit function have on the auditor’s evidence 
accumulation? 


14-3 (OBJECTIVE 14-2) Explain the important aspects of billing customers. Describe the 
files in the accounting system which would be immediately updated upon the generation 
of sales invoice. 


14-4 (OBJECTIVE 14-2) BestSellers.com sells fiction and nonfiction books and e-books 
to customers through the company’s Web site. Customers place orders for books via the 
Web site by providing their name, address, credit card number, and expiration date. What 
internal controls could BestSellers.com implement to ensure that shipments of books 
occur only for customers who have the ability to pay for those books? At what point will 
BestSellers.com be able to record the sale as revenue? 


14-5 (OBJECTIVE 14-3) State one test of control and one substantive test of transactions 
that the auditor can use to verify the following sales transaction-related audit objective: 
Recorded sales are stated at the proper amounts. 


14-6 (OBJECTIVE 14-3) List the most important duties that should be segregated in the 
sales and collection cycle. Explain why it is desirable that each duty be segregated. 


14-7 (OBJECTIVE 14-3) Explain the circumstances under which proper authorization is 
required as a control activity throughout a sales transaction. 


14-8 (OBJECTIVE 14-3) Explain the purpose of footing and cross-footing the sales journal 
and tracing the totals to the general ledger. 


14-9 (OBJECTIVE 14-4) What is the difference between the auditor’s approach in 
verifying sales returns and allowances and that for sales? Explain the reasons for the 
difference. 


14-10 (OBJECTIVE 14-5) Explain why auditors usually emphasize the detection of fraud in 
the audit of cash receipts. Is this consistent or inconsistent with the auditor’s responsibil- 
ity in the audit? Explain. 

14-11 (OBJECTIVE 14-5) List the transaction-related audit objectives for the verification of 


cash receipts. For each objective, state one internal control that the client can use to reduce 
the likelihood of misstatements. 


14-12 (OBJECTIVE 14-5) List several audit procedures that the auditor can use to deter- 
mine whether all cash received was recorded. 


14-13 (OBJECTIVE 14-5) Can proof of cash receipts check whether all cash receipts have 
been deposited? 


14-14 (OBJECTIVE 14-5) Explain what is meant by lapping and discuss how the auditor 
can uncover it. Under what circumstances should the auditor make a special effort to 
uncover lapping? 


14-15 (OBJECTIVE 14-6) What audit procedures are most likely to be used to verify 
accounts receivable written off as uncollectible? State the purpose of each of these 
procedures. 


14-16 (OBJECTIVES 14-3, 14-5) Under what circumstances is it acceptable to perform 
tests of controls and substantive tests of transactions for sales and cash receipts at an 
interim date? 


14-17 (OBJECTIVES 14-3, 14-5, 14-7) State the relationship between the confirmation of 
accounts receivable and the results of the tests of controls and substantive tests of 
transactions. 


14-18 (OBJECTIVE 14-7) Calvin Lee, CPA, performed tests of controls and substantive 
tests of transactions for sales and collection cycle in an audit of the financial statements 
for the year ended December 31, 2016. He noted that, possibly due to a change in per- 
sonnel of the client’s accounting department, the test results were not as satisfactory as 
expected. Discuss how Calvin should react to such test results. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


14-19 (OBJECTIVES 14-3, 14-5) The following questions deal with internal controls in the 
sales and collection cycle. Choose the best response. 


a. The accounting system will not post a sales transaction to the sales journal without a 
valid bill of lading number. This control is most relevant to which transaction-related 


objective for sales? 
(1) Accuracy (3) Completeness 
(2) Occurrence (4) Posting and summarization 


b. The accounting system automatically obtains the unit price based on scans of bar 
codes for merchandise sold. This control is most relevant to which transaction- 
related objective for sales? 

(1) Accuracy (3) Completeness 
(2) Occurrence (4) Posting and summarization 


c. Which of the following controls would be most effective in detecting a failure to re- 

cord cash received from customers paying on their accounts? 

(1) A person in accounting reconciles the bank deposit to the cash receipts journal. 

(2) Transactions recorded in the cash receipts journal are posted on a real-time basis 
to the accounts receivable master file. 

(3) Monthly statements are sent to customers and any discrepancies are resolved by 
someone independent of cash handling and accounting. 

(4) Deposits of cash received are made daily. 


14-20 (OBJECTIVES 14-3, 14-6) For each of the following types of misstatements (parts a. 
through c.), select the control that should have prevented the misstatement: 


a. Which of the following controls most likely will be effective in offsetting the ten- 
dency of sales personnel to maximize sales volume at the expense of high bad debt 
write-offs? 

(1) Employees responsible for authorizing sales and bad debt write-offs are denied 
access to cash. 

(2) Employees involved in the credit-granting function are separated from the sales 
function. 

(3) Shipping documents and sales invoices are matched by an employee who does 
not have the authority to write off bad debts. 

(4) Subsidiary accounts receivable records are reconciled to the control account by an 
employee independent of the authorization of credit. 


b. A sales invoice for $5,200 was computed correctly but, by mistake, was entered as 
$2,500 to the sales journal and posted to the accounts receivable master file. The cus- 
tomer remitted only $2,500, the amount on his monthly statement. 

(1) Sales invoice numbers, prices, discounts, extensions, and footings are indepen- 
dently checked. 

(2) The customers’ monthly statements are verified and mailed by a responsible per- 
son other than the bookkeeper who prepared them. 

(3) Prelistings and predetermined totals are used to control postings. 

(4) Unauthorized remittance deductions made by customers or other matters in dis- 
pute are investigated promptly by a person independent of the accounts receiv- 
able function. 


c. Shipments occurring in December 2016 did not get recorded until the first few days 
of January 2017. 
(1) The system automatically assigns bill of lading numbers and ensures no dupli- 
cates are issued. 
(2) As goods leave the shipping dock, the system generates a bill of lading and asso- 
ciated sales invoice, which is automatically recorded in the sales journal. 
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(3) The accounting system requires entry of a valid bill of lading number provided 
by the shipping department before a sales transaction is accepted for entry. 

(4) The system prevents the creation of a bill of lading without a customer order dated 
prior to the shipping date. 


14-21 (OBJECTIVES 14-2, 14-3) The following questions deal with audit evidence for the 
sales and collection cycle. Choose the best response. 


a. An auditor is performing substantive tests of transactions for sales. One step is to trace 
a sample of debit entries from the accounts receivable master file back to the support- 
ing duplicate sales invoices. What will the auditor intend to establish by this step? 

(1) Sales invoices represent existing sales. 

2) All sales have been recorded. 

3) Allsales invoices have been correctly posted to customer accounts. 

4) Debit entries in the accounts receivable master file are correctly supported by sales 

invoices. 


b. Which audit procedure is most effective in testing credit sales for overstatement? 
(1) Trace a sample of postings from the sales journal to the sales account in the gen- 
eral ledger. 
(2) Vouch a sample of recorded sales from the sales journal to shipping documents. 
(3) Prepare an aging of accounts receivable. 
(4) Trace a sample of initial sales orders to sales recorded in the sales journal. 


c. To determine whether internal control relative to the revenue cycle of a wholesaling en- 
tity is operating effectively in minimizing the failure to prepare sales invoices, an auditor 
would most likely select a sample of transactions from the population represented by the 
(1) sales order file. (3) shipping document file. 

(2) customer order file. (4) sales invoice file. 
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DISCUSSION QUESTIONS AND PROBLEMS 


Required 


14-22 (OBJECTIVES 14-2, 14-3, 14-4, 14-5) Items 1 through 8 are selected questions of the 
type generally found in internal control questionnaires used by auditors to obtain an 
understanding of internal control in the sales and collection cycle. In using the question- 
naire, a “yes” response to a question indicates a possible internal control, whereas a “no” 
indicates a potential deficiency. 


1. Does the computer system automatically approve a credit sale based on preapproved 
credit limits maintained in a customer master file? 

2. Are controlled sequentially numbered shipping documents used and is the sequence 
of the shipping documents properly accounted for to identify missing documents by 
staff? 

3. Is there a mechanism for proper cancellation of shipping documents? 

4. Is the accounts receivable master file reconciled to the general ledger on a monthly 
basis? 

5. Does the accountant independently reconcile the bank account? 

6. Are batch totals of cash receipts compared with computer summary reportof the 
cash receipts journal by data control clerk? 

7. Is there any mechanism to internally verify if cash and credit sales transactions are 
charged to the correct general ledger account? 

8. Is recording of cash receipts performed on a daily basis? 


a. For each of the preceding questions, state the transaction-related audit objectives 
being fulfilled if the control is in effect. 

b. For each control, list a test of control to test its effectiveness. 

c. For each of the preceding questions, identify the nature of the potential financial 
misstatements. 

d. For each of the potential misstatements in part c., list a substantive audit procedure to 
determine whether a material misstatement exists. 


14-23 (OBJECTIVES 14-2, 14-3) Auditing standards require the auditor to obtain an under- 
standing of the entity and its environment as a basis for assessing the risks of material mis- 
statements. Business models differ across organizations and industries, leading to unique 
business processes needed to account for transactions. While the core business functions 
for the sales and collection cycle discussed in this chapter are generally relevant to all orga- 
nizations, the underlying business processes and related documents and records are often 
unique to each organization. Below are four descriptions of different businesses. 


1. The Starbucks Coffee Company sells regular and specialty coffees and teas in over 
20,000 stores spanning more than 60 countries. Customers use cash, debit or credit 
cards, pre-paid Starbucks cards, or mobile payment apps to purchase individual 
drinks that are served to them within minutes. 

2. Amazon.com is one of the world’s largest online retailers of all kinds of products. 
While consumers can find a wide variety of products available at Amazon.com, the 
company is known for its huge selection of new and used books that can be pur- 
chased on its Web site. 

3. Most people have a personal physician who provides medical care when needed, in- 
cluding annual physicals and other medical services. Patients make appointments to 
be seen by their physician, who examines the patient and prescribes treatments and 
medications when needed. Insured patients often pay a co-payment, with the balance 
paid by the insurance company. 
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4. 


The majority of universities generate a significant portion of their revenue from tu- 
ition. Universities bill students in advance for classes that will be taken in an upcom- 
ing term. For full-time students, most universities charge a set tuition amount after 
students enroll in a minimum number of courses per term. 


Analyze each of the above independent business scenarios to answer each of the following 
questions: 


a. 


b. 


c. 


Using the eight business functions for the sales and collection cycle illustrated in 
Table 14-1 on page 448 as a guide, briefly describe the underlying business processes 
related to each of the eight functions for the sales and cash collections for the above 
independent scenarios. 

What documents or other source evidence would you use to test the occurrence 
transaction-related audit objective for sales for each of the four scenarios? 

For which of the four scenarios would the sales returns and allowances business 
function not be applicable? 


d. For which of the four scenarios would the write-off of uncollectible accounts and bad 


debt expense business functions not be applicable? 


14-24 (OBJECTIVES 14-3, 14-4, 14-5) The following are commonly performed tests of con- 
trols and substantive tests of transactions audit procedures in the sales and collection cycle: 


1 


2. 
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4. 
5. 
6. 


7. 
8. 


Compare date of recording of sale in sales journal with sales invoice and shipping 
documents to see if there is any discrepancy. 

Examine evidence such as initials of the accountant that accounts receivable master 
file is reconciled to the general ledger. 


. Recompute prices and extensions on sales invoices and trace price on sales invoices 


to approved price list or price master file. 


. Observe whether statements were sent to customers on a monthly basis which de- 


tails the amounts outstanding. 


. Examine sales returns for receiving reports signed by authorized official. 
. Obtain prelisting of cash receipts and trace amounts to the cash receipts journal, test- 


ing for names, amounts, and dates. 


. Trace recorded cash receipts entries from the cash receipts journal entries to the 


bank statement for a month. 


. Identify whether each audit procedure is a test of control or a substantive test of 


transactions. 


. State which of the six transaction-related audit objectives each of the audit proce- 


dures fulfilled. 


. Identify the type of evidence used for each audit procedure, such as inspection and 


observation. 


14-25 (OBJECTIVES 14-3, 14-4) The following is a list of possible errors or fraud (1 through 
8) involving sales and controls (a. through k.) that may prevent or detect the errors or fraud: 


Possible Errors or Fraud 
iL. 
2. 
3. 


Goods are removed from inventory for unauthorized orders. 

Credit sales are made to customers with unsatisfactory credit ratings. 

Invoices are sent to co-participants in a fraudulent scheme, and sales are recorded for 
fictitious transactions. 

Goods shipped to customers do not agree with goods ordered by customers. 
Invoices are sent for shipped goods, but are not recorded in the sales journal. 
Invoices are sent for shipped goods, and are recorded in the sales journal, but are not 
posted to any customer accounts. 

Invoices for goods sold are posted to incorrect customer accounts. 

Invalid transactions granting credit for sales returns are recorded. 


Internal Controls 


Customer orders are compared with an approved customer list. 
Sales orders are prepared for each customer order. 
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Required 


Required 


Required 


Required 


c. Shipping clerks compare goods received from warehouse with details on shipping 
documents. 

. Prenumbered credit memos are used for granting credit for goods returned. 

. Goods returned for credit are approved by the supervisor of the sales department. 

Approved sales orders are required for goods to be released from the warehouse. 

. Monthly statements are mailed to customers with outstanding balances. 

. Shipping clerks compare goods received from warehouse with approved sales orders. 
Sales invoices are compared with shipping documents and approved customer or- 
ders before invoices are mailed. 

j. Control amounts posted to the accounts receivable ledger are compared with the 

control totals of invoices. 

k. Daily sales summaries are compared with control total of invoices. 


™ og mo a 


For each error or fraud, select one internal control that if properly designed and imple- 
mented, most likely would be effective in preventing or detecting the errors and fraud. 
Each response in the list of controls may be used once, more than once, or not at all.* 


14-26 (OBJECTIVES 14-2, 14-3) The following sales procedures were encountered during 
the annual audit of Marvel Wholesale Distributing Company: 

Customer orders are received by the sales order department. A clerk computes the ap- 
proximate dollar amount of the order and sends it to the credit department for approval. Credit 
approval is stamped on the order and sent to the accounting department. A computer is then 
used to generate two copies of a sales invoice. The order is filed in the customer order file. 

The customer copy of the sales invoice is held in a pending file awaiting notification 
that the order was shipped. The shipping copy of the sales invoice is routed through the 
warehouse, and the shipping department has authority for the respective departments 
to release and ship the merchandise. Shipping department personnel pack the order and 
manually prepare a three-copy bill of lading: The original copy is sent to the customer, 
the second copy is sent with the shipment, and the other is filed in sequence in the bill of 
lading file. The sales invoice shipping copy is sent to the accounting department with any 
changes resulting from lack of available merchandise. 

A clerk in accounting matches the received sales invoice shipping copy with the sales 
invoice customer copy from the pending file. Quantities on the two invoices are com- 
pared and prices are compared to an approved price list. The customer copy is then mailed 
to the customer, and the shipping copy is sent to the data processing department. 

The data processing clerk in accounting enters the sales invoice data into the com- 
puter, which is used to prepare the sales journal and update the accounts receivable master 
file. She files the shipping copy in the sales invoice file in numerical sequence. 


a. To determine whether the internal controls operated effectively to minimize in- 
stances of failure to invoice a shipment, the auditor would select a sample of transac- 
tions from the population represented by the 
(1) customer order file. 

(2) bill of lading file. 
(3) customers’ accounts receivable master file. 
(4) sales invoice file. 


b. To gather audit evidence that uncollected items in customers’ accounts represented 
existing trade receivables, the auditor would select a sample of items from the popu- 
lation represented by the 
(1) customer order file. 

(2) bill of lading file. 
(3) customers’ accounts receivable master file. 
(4) sales invoice file. 


c. To determine whether the internal controls operated effectively to minimize in- 
stances of failure to post invoices to customers’ accounts receivable master file, the 
auditor would select a sample of transactions from the population represented by the 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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) customer order file. 
2) bill of lading file. 
) 


any 


customers’ accounts receivable master file. 
(4) sales invoice file.* 


—_~—~ ~~ 
WwW 


14-27 (OBJECTIVE 14-3) The Committee of Sponsoring Organizations of the Treadway 
Commission (COSO) issued a report called Fraudulent Financial Reporting: 1998-2007, 
An Analysis of Public Companies. Download the report at www.coso.org to answer the 
following questions (information on fraud techniques can be found on pp. 17—18 of the 
report): 


a. 


b. 


Cc. 


How many fraud companies were included in the report? What percentage of the 
frauds involved improper revenue recognition? 

What are the two broad categories of improper revenue recognition included in 
Table 9 of the report? What is the difference between the two types of improper rev- 
enue recognition? 

Review the specific techniques used to overstate revenue. Describe a conditional sale 
and a bill and hold sale. 


14-28 (OBJECTIVES 14-3, 14-5) The following are common audit procedures for tests of 
sales and cash receipts: 


qT 


2; 


\O CON D 
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4. 
5. 


2: 


Obtain a copy of the current price list and agree for a sample of invoices that relevant 
or current prices have been used. 

Discuss with members of sales team the process for setting sales discounts and re- 
view the sales discount report for evidence of review by the sales director. 


. Trace selected sales journal entries to supporting documents including sales invoice, 


bill of lading, sales order and customer order. 


. Use audit software to foot and cross-foot the sales journal and trace totals to the gen- 


eral ledger to check if there is any discrepancy. 


. Trace the credit entries in the accounts receivable master file to its source to see 


whether it relates to cash actually collected, goods returned, bad debt written-off or 
an issue of credit memo. 


. Observe endorsement of incoming checks and prelisting of cash receipts. 

. Observe whether accountant reconciles bank account regularly. 

. Examine prelisting for proper account classification. 

. Account for numerical sequence of the sales invoices selected from the sales journal 


and watch for duplicate numbers or invoices outside the normal sequence. 


. Identify whether each audit procedure is a test of control or a substantive test of 


transactions. 


. State which transaction-related audit objective(s) each of the audit procedures 


fulfills. 


. For each test of control in part a., state a substantive test that could be used to deter- 


mine whether there was a monetary misstatement. 


14-29 (OBJECTIVE 14-5) The following is a list of possible errors or fraud (1 through 5) 
involving cash receipts and controls (a. through g.) that may prevent or detect the errors 
or fraud: 


Possible Errors or Fraud 
il 


Customer checks are properly credited to customer accounts and are properly de- 
posited, but errors are made in recording receipts in the cash receipts journal. 
Customer checks are misappropriated before being forwarded to the cashier for 
deposit. 


. Customer checks are received for less than the customers’ full account balances, but 


the customers’ full account balances are credited. 
Customer checks are credited to incorrect customer accounts. 
Different customer accounts are each credited for the same cash receipt. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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Required 


Required 


Internal Controls 


a. Customer orders are compared with an approved customer list. 

b. Prenumbered credit memos are used for granting credit for returned goods. 

c. Remittance advices are separated from the checks in the mailroom and forwarded to 
the accounting department. 

d. The cashier examines each check for proper endorsement. 

e. Total amounts posted to the accounts receivable subsidiary records from remittance 
advices are compared with the validated bank deposit slip. 

f. Monthly statements are mailed to customers with outstanding balances. 

g. Anemployee, other than the bookkeeper, periodically prepares a bank reconciliation. 


Required For each error or fraud, select one internal control that if properly designed and imple- 
mented, most likely would be effective in preventing or detecting the errors and fraud. 
Each response in the list of controls may be used once, more than once, or not at all.* 


14-30 (OBJECTIVE 14-5) You have been asked to perform the audit of sales and collection 

cycle of the following two companies: 
Company 1-Book Discovery is a family-owned bookstore selling both new and sec- 
ond-handed books in Hong Kong. The bookstore is managed by the shop-owner Mr. 
Lee, his wife Mrs. Lee, two permanent staff (Calvin Chan and Susan Wong) and three 
part-time staff. All sales are for cash and payment is made at a cash registerand a till 
receipt is provided to each customer. The cash register is staffed by Mr. Lee most of the 
time. When Mr. Lee is not in the shop, the cash register is then staffed by Calvin Chan, 
who has worked for the shop for more than 20 years. Calvin is also responsible for book- 
keeping and depositing cash in the bank nearby. Book Discovery makes most of its sales 
during the weekends. It has been Calvin’s practice to deposit the cash every Tuesdays 
and Fridays to the bank. The salary of the part-time staff, which is based on the number 
of hours worked in a day, is paid in cash from the cash register. 
Company 2-Shelton Ltd. is a medium-sized manufacturer and wholesaler of stationery 
items to different bookstores in Hong Kong. All its sales are made on credit. Shelton Ltd. 
has the following policies: 


1. Members of staff who are related are not allowed to work in the same team (accounts 
receivable, accounts payable, treasury, payroll) within the accounting department. 

2. Cash receipts should be dealt with by two staff with specific responsibility. 

3. Monthly customer statements should be sent out before the 3rd day of the next 
month after being reviewed by a responsible supervisor. 

4. Bank reconciliation statements should be prepared and reviewed monthly. 


Required a. Regarding Book Discovery, 
(1) Identify the deficiencies in the procedures for the cash collection. 
(2) Evaluate whether preparation of a proof of cash receipts is effective as an audit 
procedure for the cash collection cycle. 
b. Regarding Shelton Ltd., 
(1) Explain the overall purpose of the above four policies in the prevention of poten- 
tial fraud or financial statement misstatement. 
(2) State the objective(s) of each of the policy in the prevention of fraud. 
(3) Suggest an additional policy which strengthens the existing control environment 
on cash collection. 
(4) Suggest one substantive audit procedure for detecting potential fraud suggested 
in (1) above. 
14-31 (OBJECTIVES 14-3, 14-5) Items 1 through 10 present various internal control strengths 
or internal control deficiencies. 
1. Credit is granted by a credit department. 
2. Once shipment occurs and is recorded in the sales journal, all shipping documents 
are marked “recorded” by the accounting staff. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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3. Sales returns are presented to a sales department clerk, who prepares a written, pre- 
numbered receiving report. 

4. Cash receipts received in the mail are received by a secretary with no record-keeping 
responsibility. 

5. Cash receipts received in the mail are forwarded unopened with remittance advices 
to accounting. 

6. The cash receipts journal is prepared by the treasurer’s department. 

7. Cash is deposited weekly. 

8. Statements are sent monthly to customers. 

9. Write-offs of accounts receivable are approved by the controller. 

0. The bank reconciliation is prepared by individuals independent of cash receipts 
record keeping. 


a. For each of the preceding 1-10 items, indicate whether the item represents an: Required 
A. Internal control strength for the sales and collection cycle. 
B. Internal control deficiency for the sales and collection cycle. 

b. For each item that you answered (A), indicate the transaction-related audit objective(s) 
to which the control relates. 

c. For each item that you answered (B), indicate the nature of the deficiency.* 


14-32 (OBJECTIVE 14-3) YourTeam.com is an online retailer of college and professional sports 
team memorabilia, such as hats, shirts, pennants, and other sports logo products. Consumers 
select the college or professional team from a pull-down menu on the company’s Web site. For 
each listed team, the Web site provides a product description, picture, and price for all products 
sold online. Customers click on the product number of the items they wish to purchase. The 
following are internal controls YourTeam.com has established for its online sales: 


1. Only products shown on the Web site can be purchased online. Other company 
products not shown on the Web site listing are unavailable for online sale. 

2. The online sales system is linked to the perpetual inventory system, which verifies 
quantities on hand before processing the sale. 

3. Before the sale is authorized, YourTeam.com obtains credit card authorization codes 
electronically from the credit card agency. 

4. Online sales are rejected if the customer’s shipping address does not match the credit 
card’s billing address. 

5. Before the sale is finalized, the online screen shows the product name, description, 
unit price, and total sales price for the online transaction. Customers must click on 
the Accept or Reject sales button to indicate approval or rejection of the online sale. 

6. Once customers approve the online sale, the online sales system generates a Pending 
Sales file, which is an online data file that is used by warehouse personnel to process 
shipments. Online sales are not recorded in the sales journal until warehouse personnel 
enter the bill of lading number and date of shipment into the Pending Sales data file. 


a. For each control, identify the transaction-related audit objective(s) being fulfilled if Required 
each control is in effect. 

b. For each control, describe potential financial misstatements that could occur if the 
control was not present. 


CASE 


14-33 (OBJECTIVE 14-4) The Kwan Pharmaceutical Company, a drug manufacturer, occa- 
sionally receives requests from customers for credit memos. The Company has the fol- 
lowing internal controls for recording sales returns and evaluating the adequacy of the 
Accounts Receivable Allowance (A/R Allowance). 


1. All customer requests for credits are documented in a log and are forwarded to the 
Controller. 

2. The Controller reviews each credit request for reasonableness and discusses it with 
the appropriate personnel related to the initial sale. 
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3. The Controller documents the Credit Memo on a form explaining the reason for the 
credit and the amount of the credit. 


4. The Controller and the CFO both physically sign the Credit Memo paperwork. 


5. The credit is issued by a separate department prior to the reduction of the A/R 
Allowance for the customer, or is refunded by check. 


6. The Controller updates the accounting software for the credit memo. 
7. Ona quarterly basis, the Controller evaluates the adequacy of the A/R Allowance. 


Sample of the Balance Sheet (in 000’s): 


12/3 1/09 12/31/08 
A/R 1,500 1,000 
A]R Allowance (100) (100) 
Net A/R 1,400 900 


Required As the Senior auditor, it is your responsibility to design the audit plan to test Sales Returns 
and Allowances. 


a. In the form of a chart (see Table 14-2) for Kwan Pharmaceutical Co, design an audit 
program for Sales Returns (Credit Memos): 


(1) List the audit objectives to be achieved. 

(2) List the key controls from the summary above. 

(3) Suggest tests of controls for each objective. 

(4) Suggest substantive tests of transactions for each objective. 


b. Suggest testing to evaluate the adequacy of the Sales Return Allowance. 


c. What does the trend of the A/R Allowance figures suggest to you? How would you 
modify your testing scope to address what you see? 


INTEGRATED CASE APPLICATION— 
PINNACLE MANUFACTURING: PART V 


of internal control and made an initial assessment of control risk for each transaction-related 
audit objective for acquisition and cash disbursement transactions. The purpose of Part V is to 
continue the assessment of control risk by determining the appropriate tests of controls and 
substantive tests of transactions. In order to do this, you must complete the steps needed to 
prepare a high-quality performance format audit program for tests of controls and substan- 
tive tests of transactions for acquisitions and cash disbursements. 

Assume in Part IV that you identified the following as the key controls you want to 
rely on (even though your answers were likely different from these): 


14-34 (OBJECTIVES 14-3, 14-5) In Part IV of this case study, you obtained an understanding 


. Segregation of the purchasing, receiving, and cash disbursements functions 

. Use of prenumbered voucher packages, properly accounted for 

. Use of prenumbered checks, properly accounted for 

. Use of prenumbered receiving reports, properly accounted for 

. Internal verification of document package before check preparation 

. Review of supporting documents and signing of checks by an independent, authorized 
person 

7. Cancellation of documents prior to signing of the check 

8. Monthly reconciliation of the accounts payable master file with the general ledger 
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9. Independent reconciliation of the monthly bank statements 


a. Prepare an audit file listing the nine controls or get them online. Required 

b. After each control, identify the transaction-related audit objective(s) that it partially 
or fully satisfies. 

c. Immediately below the control, list one audit procedure to test the control. Use the 
most reliable test of control evidence that you can think of. Write the audit procedure 
in good form. 

d. Immediately below the test of control, list one substantive test of transactions audit 
procedure to test whether the control failed to be effective. Use the most reliable sub- 
stantive tests of transactions evidence that you can think of. 

e. Create a separate audit schedule labeled “Acquisitions Substantive Tests of Trans- 
actions.” Decide and write one substantive test of transactions audit procedure for 
each transaction-related audit objective for acquisitions. The audit procedures must be 
different from the ones in requirement d. The schedule should be designed as follows: 


Acquisitions Substantive Tests of Transactions 


Occurrence Write the substantive audit procedure 
Completeness Write the substantive audit procedure 
Etc. 


f. Using a separate heading labeled “Cash Disbursements Substantive Tests of Trans- 
actions,” decide and write one substantive test of transactions audit procedure for 
each transaction-related audit objective for cash disbursements. The audit proce- 
dures must be different from the ones in requirements d. and e. The audit schedule 
should be designed the same as the one in requirement e. 

g. Prepare a performance audit program for acquisitions and cash disbursements using all 
audit procedures in requirements c. through f. See Figure 14-6 (p. 467) for a format. To the 
extent possible, follow the approach in procedure 13 a. through e. in Figure 14-6 of hav- 
ing “one starting point” procedure followed by other related procedures. Do this for both 
acquisitions and cash disbursements. Be sure to eliminate any duplicate audit procedures. 


ACL PROBLEM 


14-35 (OBJECTIVES 14-3) This problem requires the use of ACL software, which can ACD 
be accessed through the textbook Web site. Information about downloading and using 

ACL and the commands used in this problem can also be found on the textbook Web 

site. You should read all of the reference material preceding the instructions for “Quick 

Sort” before locating the appropriate command to answer questions a. through f. For this 

problem use the file labeled “Shipments” in the “Sales_and_collection” subfolder of the 
ACL_Rockwood project. This file includes all shipments recorded as sales in 2014. The 

suggested command or other source of information needed to solve the problem require- 

ment is included at the end of each question. 


a. Determine the total number of shipments recorded as sales in calendar year 2014 as | Required 
listed at the bottom of the worksheet. 
b. Sort the ship_date column in both ascending and descending order. What concerns 
do you have about shipments recorded as sales in 2014, if any? (Quick Sort) 
c. Are there any gaps or duplicates in Shipping Numbers? What might be a plausible 
explanation for gaps or duplicates observed? (Gaps and Duplicates) 
d. Create a new file of shipments summarized by customer. Which customer accounts 
for the most sales activity by total number of shipments? Which customer accounts 
for the most sales activity by the total number of items shipped? Are these amounts 
significant relative to total shipments? (Summarize and Quick Sort) 
e. Using the file of shipments by customer created in part d. above, sort by customer 
number. Do you have any concerns based on this information? (Quick Sort) 
f. To help decide the number of shipments to select for testing, you decide to stratify on 
the number of items shipped after excluding all shipments with fewer than 100 items. 
Print the output. (Filter and Stratify) 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


15-1 Explain the concept of rep- 
resentative sampling. 

15-2 Distinguish between statistical 
and nonstatistical sampling and 
between probabilistic and non- 
probabilistic sample selection. 

15-3 Select samples using 
probabilistic and non- 
probabilistic methods. 

15-4 Define and describe audit 
sampling for exception rates. 

15-5 Use nonstatistical sampling in 
tests of controls and substan- 
tive tests of transactions. 

15-6 Define and describe 
attributes sampling and a 
sampling distribution. 

15-7 Use attributes sampling in 
tests of controls and substan- 
tive tests of transactions. 
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AUDIT SAMPLING FOR 
TESTS OF CONTROLS AND 
SUBSTANTIVE TESTS 

SOF TRANSACTIONS 


Sometimes an Isolated Exception Is the Tip of the Iceberg 


David Chen was an experienced assistant on the audit of Sol Systems, a manufacturer of solar 
panels. While performing tests of controls over sales transactions, he discovered that one of 
the sales transactions selected 
for testing was missing ship- 
ping information. When asked 
about the missing documenta- 
tion, the controller suggested 
this was an isolated clerical 
mistake. An hour later, he pro- 
vided Chen with the shipping 
document, which appeared to 
be valid. Since this was the 
only one in the sample with a 
problem, Chen thought that 
the results of the test would 
be considered acceptable un- 
der the sampling plan his firm had established, even if the transaction was considered an ex- 
ception. Still, the transaction was for a fairly large amount, and Chen was concerned that the 
documentation was not initially available. 


Chen consulted with Cindy Hubbard, the experienced senior on the engagement. Her initial 
reaction was to accept the documentation so Chen could move on to other testing. But after 
considering it for a few minutes, she asked Chen to look further into the transaction. Chen 
discovered that the receivable had not been paid. Instead, a journal entry had been recorded to 
credit the receivable from the sale. Through a series of journal entries, the receivable ultimately 
ended up recorded as an asset in a long-term asset account. He examined additional transac- 
tions involving this customer and found that they had been handled the same way. 


Hubbard escalated the findings to the engagement partner. The firm’s forensic auditors dis- 
covered that Sol was engaged in a large-scale fraud to overstate sales and earnings. The firm 
resigned from the engagement and reported their findings to the SEC. Chen was promoted to 
audit senior a year earlier than normal for assistants. 
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Chapter 14 dealt with designing tests of controls and substantive tests of transactions for the sales and collection 
cycle. Many of these procedures involve the use of sampling. As demonstrated by the story about David Chen and 
the audit of Sol Systems, appropriately applying audit sampling is a challenging part of the audit. This chapter dis- 
cusses nonstatistical and statistical sampling for tests of controls and substantive tests of transactions. The discus- 
sion is based on the sales and collection cycle, but the sampling concepts apply equally to all other cycles. 


The clarified audit standards define audit sampling as: 


The selection and evaluation of less than 100 percent of the population of audit relevance such that the auditor expects 
the items selected to be representative of the population and, thus, likely to provide a reasonable basis for conclusions 


about the population. 


Source: Copyright by American Institute of CPAs. All rights reserved. Used with permission. 


We begin by discussing representative samples and the risks associated with sampling. 


REPRESENTATIVE SAMPLES 


When selecting a sample from a population, the auditor strives to obtain a represen- 
tative sample. A representative sample is one in which the characteristics in the 
sample are approximately the same as those of the population. This means that the 
sampled items are similar to the items not sampled. Assume a client’s internal con- 
trols require a clerk to attach a shipping document to every duplicate sales invoice, 
but the clerk fails to follow the procedure exactly 3 percent of the time. If the auditor 
selects a sample of 100 duplicate sales invoices and finds three are missing attached 
shipping documents, the sample is highly representative. If two or four such items are 
found in the sample, the sample is reasonably representative. If no or many missing 
items are found, the sample is nonrepresentative. 

In practice, auditors never know whether a sample is representative, even after all 
testing is complete. (The only way to know if a sample is representative is to subse- 
quently audit the entire population.) However, auditors can increase the likelihood of 
a sample being representative by using care in designing the sampling process, sample 
selection, and evaluation of sample results. A sample result can lead to an incorrect 
conclusion due to sampling error or nonsampling error. The risk of these two types of 
errors occurring is called sampling risk and nonsampling risk. 

Sampling risk is the risk that an auditor reaches an incorrect conclusion 
because the sample is not representative of the population. Sampling risk is an 
inherent part of sampling that results from testing less than the entire population. 
For example, assume the auditor decided that a control is not effective if there is 
a population exception rate of 6 percent. Assume the auditor accepts the control 
as effective based on tests of the control with a sample of 100 items that had two 
exceptions. If the population actually has an 8 percent exception rate, the auditor 
incorrectly accepted the population because the sample was not sufficiently repre- 
sentative of the population. 

Auditors have two ways to control sampling risk: 


1. Adjust sample size 
2. Use an appropriate method of selecting sample items from the population 


Increasing sample size reduces sampling risk, and vice versa. At one extreme, a 
sample of all the items of a population has a zero sampling risk. At the other extreme, 
a sample of one or two items has an extremely high sampling risk. 

Using an appropriate sample selection method increases the likelihood of repre- 
sentativeness. This does not eliminate or even reduce sampling risk, but it does allow 
the auditor to measure the risk associated with a given sample size if statistical meth- 
ods of sample selection and evaluation are used. 


Explain the concept of 
representative sampling. 
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Nonsampling risk is the risk that the auditor reaches an incorrect conclusion 
for any reason not related to sampling risk. The two causes of nonsampling risk are 
the auditor’s failure to recognize exceptions and inappropriate or ineffective audit 
procedures. 

An auditor might fail to recognize an exception because of exhaustion, boredom, 
or lack of understanding of what might constitute an exception. In the preceding 
example, assume three shipping documents were not attached to duplicate sales 
invoices in a sample of 100. If the auditor concluded that no exceptions existed, that 
is a nonsampling error. An ineffective audit procedure for detecting the exceptions 
in question would be to examine a sample of shipping documents and determine 
whether each is attached to a duplicate sales invoice, rather than to examine a sample 
of duplicate sales invoices to determine if shipping documents are attached. In this 
case, the auditor has done the test in the wrong direction by starting with the shipping 
document instead of the duplicate sales invoice. Careful design of audit procedures, 
proper instruction, supervision, and review are ways to control nonsampling risk. 


STATISTICAL VERSUS NONSTATISTICAL SAMPLING AND 
PROBABILISTIC VERSUS NONPROBABILISTIC SAMPLE 


SELECTION 


Statistical Versus 
Nonstatistical Sampling 


Distinguish between statistical 
and nonstatistical sampling and 
between probabilistic and non- 
probabilistic sample selection. 
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Before discussing the methods of sample selection to obtain representative samples, 
it is useful to make distinctions between statistical versus nonstatistical sampling, and 
between probabilistic versus nonprobabilistic sample selection. 


Audit sampling methods can be divided into two broad categories: statistical sampling 
and nonstatistical sampling. These categories are similar in that they both involve 
three phases: 


1. Plan the sample 
2. Select the sample and perform the tests 
3. Evaluate the results 


The purpose of planning the sample is to make sure that the audit tests are per- 
formed in a manner that provides the desired sampling risk and minimizes the likeli- 
hood of nonsampling error. Selecting the sample involves deciding how a sample is 
selected from the population. The auditor can perform the audit tests only after the 
sample items are selected. Evaluating the results is the drawing of conclusions based 
on the audit tests. 

Assume that an auditor selects a sample of 100 duplicate sales invoices from a 
population, tests each to determine whether a shipping document is attached, and 
determines that there are three exceptions. Let’s look at those actions step-by-step: 


Action Step 
* Decide that a sample size of 100 is needed. |. Plan the sample. 
* Decide which 100 items to select from the population. 2. Select the sample and perform the tests. 


* Perform the audit procedure for each of the 100 items and 
determine that three exceptions exist. 


* Reach conclusions about the likely exception rate in the total 3. Evaluate the results. 
population when the sample exception rate equals 3 percent. 


Statistical sampling differs from nonstatistical sampling in that, by applying 
mathematical rules, auditors can quantify (measure) sampling risk in planning the 
sample (step 1) and in evaluating the results (step 3). (You may remember calculating 
a statistical result at a 95 percent confidence level in a statistics course. A 95 percent 
confidence level provides a 5 percent sampling risk.) 
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In nonstatistical sampling, auditors do not quantify sampling risk. However, 
a properly designed nonstatistical sample that considers the same factors as a prop- 
erly designed statistical sample can provide results that are as effective as a properly 
designed statistical sample. 


Both probabilistic and nonprobabilistic sample selection fall under step 2. When 
using probabilistic sample selection, the auditor randomly selects items such that 
each population item has a known probability of being included in the sample. This 
process requires great care and uses one of several methods discussed shortly. In 
nonprobabilistic sample selection, the auditor selects sample items using non- 
probabilistic methods that approximate a random sampling approach. Auditors can 
use one of several nonprobabilistic sample selection methods. 


Auditing standards permit auditors to use either statistical or nonstatistical sampling 
methods. However, it is essential that either method be applied with due care. All 
steps of the process must be followed carefully. When statistical sampling is used, the 
sample must be a probabilistic one and appropriate statistical evaluation methods must 
be used with the sample results to make the sampling risk computations. Auditors 
may make nonstatistical evaluations when using probabilistic selection, but it is never 
acceptable to evaluate a nonprobabilistic sample using statistical methods. We will 
now discuss different selection methods. 


Probabilistic Versus 
Nonprobabilistic 
Sample Selection 


Applying Statistical and 


Nonstatistical Sampling 
in Practice and Sample 
Selection Methods 


SAMPLE SELECTION METHODS 


There are a number of techniques that auditors can use to select a sample. However, 
only probabilistic techniques are applicable when using statistical sampling. 
Probabilistic sample selection methods include the following: 


1. Simple random sample selection 
2. Systematic sample selection 
3. Probability proportional to size sample selection 


Nonprobabilistic sample selection methods include: 


1. Haphazard sample selection 
2. Block sample selection 


Auditors can also use probabilistic methods even when using nonstatistical sam- 
pling. We will discuss each of these techniques, beginning with probabilistic sample 
selection methods. 


Statistical sampling requires a probabilistic sample to measure sampling risk. For 
probabilistic samples, the auditor uses no judgment about which sample items are 
selected, except in choosing which probabilistic selection method to use. 


Simple Random Sample Selection In a simple random sample, every possible 
combination of population items has an equal chance of being included in the sample. 
Auditors use simple random sampling to sample populations when there is no need to 
emphasize one or more types of population items. Say, for example, auditors want to 
sample a client’s cash disbursements for the year. They might select a simple random 
sample of 60 items from the cash disbursements journal, apply appropriate auditing 
procedures to the 60 items selected, and draw conclusions about all recorded cash 
disbursement transactions. 

When auditors obtain a simple random sample, they must use a method that 
ensures all items in the population have an equal chance of selection. Suppose an 
auditor decides to select a sample from a total of 12,000 cash disbursement transac- 
tions for the year. A simple random sample of one transaction will be such that each of 


Select samples using 
probabilistic and 
nonprobabilistic methods. 


Probabilistic Sample 
Selection Methods 
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FIGURE I5-| Computer Generation of Random Numbers — Hillsburg Hardware Co. 


Random Number Generation 


Number of Variables —z 
Number of Random Numbers: 


Distribution: Uniform CV 


Between 3689 and |9452 


Random Numbers Selected Sorted in Ascending Order 


4635 5440 5019 5841 
4955 9312 5101 5890 
3787 8338 5166 6037 
5332 9402 5332 6145 
5666 5166 5419 6375 
6880 9174 5440 6376 
5749 3997 5666 6496 
5832 7752 5715 6635 
5738 8395 5738 6880 
8935 9294 5749 TA27. 
6375 6376 5754 7752 
6145 5419 5832 8012 

8012 8159 


the 12,000 transactions has an equal chance of being selected. The auditor will select 
one random number between 1 and 12,000. Assume that number is 3,895. The audi- 
tor will select and test only the 3,895th cash disbursement transaction. For a random 
sample of 100, each population item also has an equal chance of being selected. 

Auditors most often generate random numbers by using one of three computer 
sample selection techniques: electronic spreadsheets, random number generators, and 
generalized audit software. Figure 15-1 shows the random selection of sales invoices 
for the audit of Hillsburg Hardware Co. using an electronic spreadsheet program. In 
the example, the auditor wants 50 sample items from a population of sales invoices 
numbered from 3689 to 9452. The program requires only input parameters to create 
a sample for the auditor to select. Such programs possess great flexibility, are able to 
generate random dates or ranges of sets of numbers (such as page and line numbers or 
sales invoice numbers for multiple divisions), and provide output in either sorted or 
selection order. 

Random numbers may be obtained with or without replacement. With replace- 
ment means an element in the population can be included in the sample more than 
once. In selection without replacement, an item can be included only once. Although 
both selection approaches are consistent with sound statistical theory, auditors rarely 
use replacement sampling. 


Systematic Sample Selection In systematic sample selection (also called sys- 
tematic sampling), the auditor calculates an interval and then selects the items for 
the sample based on the size of the interval. The interval is determined by dividing 
the population size by the desired sample size. In a population of sales invoices 
ranging from 652 to 3,151, with a desired sample size of 125, the interval is 20 
[(3,151 — 651)/125]. The auditor first selects a random number between 0 and 19 
(the interval size) to determine the starting point for the sample. If the randomly 
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selected number is 9, the first item in the sample will be invoice number 661 
(652 + 9). The remaining 124 items will be 681 (661 + 20), 701 (681 + 20), and so 
on through item 3,141. 

The advantage of systematic selection is its ease of use. In most populations, a sys- 
tematic sample can be drawn quickly and the approach automatically puts the num- 
bers in sequence, making it easy to develop the appropriate documentation. 

A concern with systematic selection is the possibility of bias. Because of the 
way systematic selection is done, once the first item in the sample is selected, all 
other items are chosen automatically. This causes no problem if the characteristic 
of interest, such as a possible control deviation, is distributed randomly through- 
out the population, but this may not always be the case. For example, if a control 
deviation occurred at a certain time of the month or only with certain types of 
documents, a systematic sample can have a higher likelihood of failing to be rep- 
resentative than a simple random sample. Therefore, when auditors use systematic 
selection, they must consider possible patterns in the population data that can 
cause sample bias. 


Probability Proportional to Size and Stratified Sample Selection In many auditing 
situations, it is advantageous to select samples that emphasize population items with 
larger recorded amounts. There are two ways to obtain such samples: 


1. Take a sample in which the probability of selecting any individual population 
item is proportional to its recorded amount. This method is called sampling with 
probability proportional to size (PPS), and it is evaluated using nonstatistical sam- 
pling or monetary unit statistical sampling. 

2. Divide the population into subpopulations, usually by dollar size, and take larger 
samples from the subpopulations with larger sizes. This is called stratified sam- 
pling, and it is evaluated using nonstatistical sampling or variables statistical 
sampling. 

These selection methods and their related evaluation methods are discussed in 

more detail in Chapter 17. 


Nonprobabilistic sample selection methods are those that do not meet the technical 
requirements for probabilistic sample selection. Because these methods are not based 
on mathematical probabilities, the representativeness of the sample may be difficult 
to determine. 


Haphazard Sample Selection Haphazard sample selection is the selection of 
items without any conscious bias by the auditor. In such cases, the auditor se- 
lects population items without regard to their size, source, or other distinguishing 
characteristics. 

The most serious shortcoming of haphazard sample selection is the difficulty of 
remaining completely unbiased in the selection. Because of the auditor’s training and 
unintentional bias, certain population items are more likely than others to be included 
in the sample. 


Block Sample Selection In block sample selection auditors select the first item in a 
block, and the remainder of the block is chosen in sequence. For example, assume the 
block sample will be a sequence of 100 sales transactions from the sales journal for the 
third week of March. Auditors can select the total sample of 100 by taking 5 blocks of 
20 items, 10 blocks of 10, 50 blocks of 2, or one block of 100. 

It is ordinarily acceptable to use block samples only if a reasonable number of 
blocks is used. If few blocks are used, the probability of obtaining a nonrepresentative 
sample is too great, considering the possibility of employee turnover, changes in the 
accounting system, and the seasonal nature of many businesses. For example, in the 
previous example, sampling 10 blocks of 10 from the third week of March is far less 
appropriate than selecting 10 blocks of 10 from 10 different months. 


Nonprobabilistic Sample 


Selection Methods 
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Although haphazard and block sample selection appear to be less logical than 
other sample selection methods, they are often useful in situations where the nature 
of the data makes it more difficult to use a probabilistic method. For example, assume 
that the auditor wants to trace credits from the accounts receivable master files to the 
cash receipts journal and other authorized sources as a test for fictitious credits in the 
master files, but the credits are not numbered in a way that a random sample can be 
easily selected. In this situation, many auditors use a haphazard or block approach, 
because it is simpler than other selection methods. However, for many nonstatistical 
sampling applications involving tests of controls and substantive tests of transactions, 
auditors prefer to use a probabilistic sample selection method to increase the likeli- 
hood of selecting a representative sample. 


SAMPLING FOR EXCEPTION RATES 


Define and describe audit 
sampling for exception rates. 
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Auditors use sampling for tests of controls and substantive tests of transactions to de- 
termine whether controls are operating effectively and whether the rate of monetary 
errors is below tolerable limits. To do this, auditors estimate the percent of items in a 
population containing a characteristic or attribute of interest. This percent is called 
the occurrence rate or exception rate. For example, if an auditor determines that 
the exception rate for the internal verification of sales invoices is approximately 3 per- 
cent, then on average 3 of every 100 invoices are not properly verified. 

Auditors are interested in the following types of exceptions in populations of 
accounting data: 


1. Deviations from the client’s established controls 
2. Monetary misstatements in populations of transaction data 
3. Monetary misstatements in populations of account balance details 


Knowing the exception rate is particularly helpful for the first two types of excep- 
tions, which involve transactions. Therefore, auditors make extensive use of audit 
sampling that measures the exception rate in doing tests of controls and substantive 
tests of transactions. With the third type of exception, auditors usually need to esti- 
mate the total dollar amount of the exceptions because they must decide whether the 
misstatements are material. When auditors want to know the total amount of a mis- 
statement, they use methods that measure dollars, not the exception rate. 

The exception rate in a sample is used to estimate the exception rate in the entire 
population, meaning it is the auditor’s “best estimate” of the population exception 
rate. The term exception should be understood to refer to both deviations from the 
client’s control procedures and amounts that are not monetarily correct, whether 
because of an unintentional accounting error or any other cause. The term deviation 
refers specifically to a departure from prescribed controls. 

Assume, for example, that the auditor wants to determine the percentage of dupli- 
cate sales invoices that do not have shipping documents attached. Because the auditor 
cannot check every invoice, the actual percentage of missing shipping documents 
remains unknown. The auditor obtains a sample of duplicate sales invoices and deter- 
mines the percentage of the invoices that do not have shipping documents attached. 
The auditor then concludes that the sample exception rate is the best estimate of the 
population exception rate. 

Because the exception rate is based on a sample, there is a significant likelihood 
that the sample exception rate differs from the actual population exception rate. 
This difference is called the sampling error. The auditor is concerned with both the 
estimate of the sampling error and the reliability of that estimate, called sampling 
risk. Assume the auditor determines a 3 percent sample exception rate, and a sam- 
pling error of 1 percent, with a sampling risk of 10 percent. The auditor can state 
that the interval estimate of the population exception rate is between 2 percent and 
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4 percent (3 percent + 1) with a 10 percent risk of being wrong (and a 90 percent 
chance of being right). 

In using audit sampling for exception rates, the auditor wants to know the most 
the exception rate is likely to be, rather than the width of the confidence interval. So, 
the auditor focuses on the upper limit of the interval estimate, which is called the esti- 
mated or computed upper exception rate (CUER) in tests of controls and substan- 
tive tests of transactions. Using figures from the preceding example, an auditor might 
conclude that the CUER for missing shipping documents is 4 percent at a 5 percent 
sampling risk, meaning the auditor concludes that the exception rate in the popula- 
tion is no greater than 4 percent with a 5 percent risk of the exception rate exceeding 4 
percent. Once it is calculated, the auditor can consider CUER in the context of specific 
audit objectives. If testing for missing shipping documents, for example, the auditor 
must determine whether a 4 percent exception rate indicates an acceptable control 
risk for the occurrence objective. 


CONCEPT CHECK 
1. State what is meant by a representative sample and explain its importance in sampling 
audit populations. 


2. Explain the major difference between statistical and nonstatistical sampling. Are both 
methods acceptable according to auditing standards? 


APPLICATION OF NONSTATISTICAL AUDIT SAMPLING 
We will now examine the application of nonstatistical audit sampling in testing trans- ‘OBJECTIVE 15-5 


actions for control deviations and monetary misstatements. Statistical sampling is ae ae 
Z : 2 ‘ 2 3 Use nonstatistical sampling in 

examined later in this chapter. Before doing so, key terminology are defined and sum- _ acts of controls and substantive 
marized in Table 15-1. The same terminology is used for statistical sampling. Peer neneriona: 

The auditor first determines whether to apply nonstatistical sampling to those 
attributes where sampling applies. As previously discussed, there are three phases when 
sampling for tests of controls and substantive tests of transactions. The auditor must (1) 
plan the sample; (2) select the sample and perform the audit procedures; and (3) evaluate 


\ iS Terms Used in Audit Sampling 


Term Definition 


Terms Related to Planning 


Characteristic or attribute The characteristic being tested in the application 


Acceptable risk of overreliance (ARO) The risk that the auditor is willing to take of accepting a control as effective or a rate of 
monetary misstatements as tolerable, when the true population exception rate is greater 
than the tolerable exception rate 


Tolerable exception rate (TER) Exception rate that the auditor will permit in the population and still be willing to conclude 
the control is operating effectively and/or the amount of monetary misstatements in the 
transactions established during planning is acceptable 


Estimated population exception rate (EPER) Exception rate that the auditor expects to find in the population before testing begins 


Initial sample size Sample size decided after considering the above factors in planning 


Terms Related to Evaluating Results 


Exception Exception from the attribute in a sample item 


Sample exception rate (SER) Number of exceptions in the sample divided by the sample size 


Computed upper exception rate (CUER) The highest estimated exception rate in the population at a given ARO 
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State the Objectives 
of the Audit Test 


Decide Whether Audit 


Sampling Applies 


the results to conclude on the acceptability of the population. These three phases involve 
14 well-defined steps. Auditors should follow these steps carefully to ensure proper 
application of both the auditing and sampling requirements. We use the example audit 
of Hillsburg Hardware Co. to illustrate the steps in the following discussion. 


Plan the Sample 


1. State the objectives of the audit test. 

Decide whether audit sampling applies. 

Define attributes and exception conditions. 

Define the population. 

Define the sampling unit. 

Specify the tolerable exception rate. 

Specify acceptable risk of overreliance. 

Estimate the population deviation or exception rate. 
9. Determine the initial sample size. 


SoS SP eS 


Select the Sample and Perform the Audit Procedures 


10. Select the sample. 
11. Perform the audit procedures. 


Evaluate the Results 
12. Generalize from the sample to the population. 
13. Analyze exceptions. 
14. Decide the acceptability of the population. 


The objectives of the test must be stated in terms of the transaction cycle being tested. 
Typically, auditors define the objectives of tests of controls and substantive tests of 
transactions as follows: 


* Test the operating effectiveness of controls 
¢ Determine whether the transactions contain monetary misstatements 


The objectives of these tests in the sales and collection cycle are usually to test the 
effectiveness of internal controls over sales and cash receipts and to determine whether 
sales and cash receipts transactions contain monetary misstatements. Auditors nor- 
mally define these objectives as a part of designing the audit program, which was dis- 
cussed for the sales and collection cycle in Chapter 14. You can find the audit program 
for the sales and collection cycle for Hillsburg Hardware in Figure 14-6 (p. 467). 


Audit sampling applies whenever the auditor plans to reach conclusions about a 
population based on a sample. The auditor should examine the audit program and 
select those audit procedures where audit sampling applies. To illustrate, assume the 
following partial audit program: 


1. Review sales transactions for large and unusual amounts (analytical procedure). 
2. Observe whether the duties of the accounts receivable clerk are separate from 
handling cash (test of control). 
3. Examine a sample of duplicate sales invoices for 
a. credit approval by the credit manager (test of control). 
b. existence of an attached shipping document (test of control). 
c. inclusion of a chart of accounts number (test of control). 
4. Select a sample of shipping documents and trace each to related duplicate sales 
invoices (test of control). 
5. Compare the quantity on each duplicate sales invoice with the quantity on related 
shipping documents (substantive test of transactions). 


Audit sampling does not apply for the first two procedures in this audit program. 
The first is an analytical procedure for which sampling is inappropriate. The second 
is an observation procedure for which no documentation exists to perform audit 
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8S ee Audit Procedures— Hillsburg Hardware Co. 


Procedure Comment 


Shipment of Goods 


It is possible to do this by selecting a random sample and accounting for all ship- 
ping documents selected. This requires a separate set of random numbers 
because the sampling unit is different from that used for the other tests. 


10. Account for a sequence of shipping documents. 


Il. Trace selected shipping documents to the sales journal to be No exceptions are expected, and a 6 percent TER is considered acceptable at an 
sure that each one has been included. ARO of 10 percent. A sample size of 40 is selected. The shipping documents 
are traced to the sales journal. This is done for all 40 items. There are no 
exceptions for either test. The results are considered acceptable. There is no 
further information about this portion of the tests in this illustration. 


Billing of Customers and Recording the Sales in the Records 


The audit procedures for billing and recording sales (procedures |2 to 14) are 
the only ones included for illustration throughout this chapter. 


12. Account for a sequence of sales invoices in the sales journal. 


13. Trace selected sales invoice numbers from the sales journal to 

a. accounts receivable master file and test for amount, date, and 
invoice number. 

b. duplicate sales invoice and check for the total amount recorded 
in the journal, date, customer name, and account classification. 
Check the pricing, extensions, and footings. Examine underlying 
documents for indication of internal verification. 

c. bill of lading and test for customer name, product description, 
quantity, and date. 

d. duplicate sales order and test for customer name, product 
description, quantity, date, and indication of internal verification. 

e. customer order and test for customer name, product descrip- 
tion, quantity, date, and credit approval. 


14. Trace recorded sales from the sales journal to the file of supporting 
documents, which includes a duplicate sales invoice, bill of lading, 
sales order, and customer order. 


Note: Random selection and statistical sampling are not applicable for the nine general audit procedures in Figure 14-6 (p. 467). Advanced statistical techniques, 
such as regression analysis, can be applicable for analysis of the results of analytical procedures. Except for audit procedure |8, random selection may be 
possible for cash receipt procedures |5 through 21. Random selection can also be used for procedure 2. 


sampling. Audit sampling can be used for the remaining three procedures. Audit sam- 
pling generally applies to manual controls. Automated controls can be tested using 
the computer assisted auditing techniques described in Chapter 12. Table 15-2 indi- 
cates the audit procedures for the sales cycle for Hillsburg Hardware Co. where audit 
sampling is appropriate. 


When audit sampling is used, auditors must carefully define the characteristics (at- 
tributes) being tested and the exception conditions. Unless each attribute is carefully 
defined in advance, the staff person who performs the audit procedures will have no 
guidelines to identify exceptions. 

Attributes of interest and exception conditions for audit sampling are taken 
directly from the auditor’s audit procedures. Table 15-3 (p. 492) shows nine attributes 
of interest and exception conditions taken from audit procedures 12 through 14 in the 
audit of Hillsburg’s billing function. Samples of sales invoices will be used to verify 
these attributes. The absence of the attribute for any sample item will be an exception 
for that attribute. Both missing documents and immaterial misstatements result in 
exceptions unless the auditor specifically states otherwise in the exception conditions. 


Define Attributes and 
Exception Conditions 


The population is those items about which the auditor wishes to generalize. Auditors 


can define the population to include any items they want, but when they select the ear ORs 
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TABLE (3-3 Billing Function 


Attribute 


|. Existence of the sales invoice number in the sales 
journal (procedure 12). 


Attributes Defined— Tests of Hillsburg Hardware Co.’s 


Exception Condition 


No record of sales invoice number in the sales journal. 


2. Amount and other data in the master file agree 
with sales journal entry (procedure | 3a). 


3. Amount and other data on the duplicate sales 
invoice agree with the sales journal entry 
(procedure |3b). 


The amount recorded in the master file differs from the 
amount recorded in the sales journal. 


Customer name and account number on the invoice differ 
from the information recorded in the sales journal. 


4. Evidence that pricing, extensions, and footings 
are checked (initials and correct amounts) 
(procedure | 3b). 


Lack of initials indicating verification of pricing, extensions, 
and footings. 


5. Quantity and other data on the bill of lading 
agree with the duplicate sales invoice and sales 
journal (procedure | 3c). 


Quantity of goods shipped differs from quantity on the 
duplicate sales invoice. 


6. Quantity and other data on the sales order agree 
with the duplicate sales invoice (procedure |3d). 


Quantity on the sales order differs from the quantity on 
the duplicate sales invoice. 


7. Quantity and other data on the customer 
order agree with the duplicate sales invoice 
(procedure |3e). 


Product number and description on the customer order 
differ from information on the duplicate sales invoice. 


8. Credit is approved (procedure |3e). 


Lack of initials indicating credit approval. 


9. For recorded sales in the sales journal, the file of 
supporting documents includes a duplicate sales 


Bill of lading is not attached to the duplicate sales invoice 
and the customer order. 


invoice, bill of lading, sales order, and customer 
order (procedure 14). 


sample, it must be selected from the entire population as it has been defined. The au- 
ditor should test the population for completeness and detail tie-in before a sample is 
selected to ensure that all population items are subjected to sample selection. 

The auditor may generalize only about that population that has been sampled. For 
example, when performing tests of controls and substantive tests of sales transac- 
tions, the auditor generally defines the population as all recorded sales invoices for the 
year. If the auditor samples from only one month’s transactions, it is invalid to draw 
conclusions about the invoices for the entire year. 

The auditor must carefully define the population in advance, consistent with the 
objectives of the audit tests. In some cases, it may be necessary to define separate pop- 
ulations for different audit procedures. For example, in the audit of the sales and col- 
lection cycle for Hillsburg Hardware Co., the direction of testing in audit procedures 
12 through 14 in Table 15-2 (p. 491) proceeds from sales invoices in the sales journal 
to source documentation. In contrast, the direction of testing for audit procedures 10 
and 11 proceeds from the shipping documents to the sales journal. Thus, the auditor 
defines two populations—a population of sales invoices in the sales journal and a 
population of shipping documents. 


The sampling unit is defined by the auditor based on the definition of the population 
and objective of the audit test. The sampling unit is the physical unit that corresponds 
to the random numbers the auditor generates. It is often helpful to think of the sam- 
pling unit as the starting point for doing the audit tests. For the sales and collection 
cycle, the sampling unit is typically a sales invoice or shipping document number. For 
example, if the auditor wants to test the occurrence of sales, the appropriate sampling 
unit is sales invoices recorded in the sales journal. If the objective is to determine 
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whether the quantity of the goods described on the customer’s order is accurately 
shipped and billed, the auditor can define the sampling unit as the customer’s order, 
the shipping document, or the duplicate sales invoice, because the direction of the au- 
dit test doesn’t matter for this audit procedure. 

Audit procedure 14 in Table 15-2 is a test for the occurrence of recorded sales. 
What is the appropriate sampling unit? It is the duplicate sales invoice. Is the appro- 
priate sampling unit for audit procedure 11 the shipping document? Yes, because 
this tests that existing sales are recorded (completeness). Either the duplicate sales 
invoice or the shipping document is appropriate for audit procedures 13a through 13e 
because these are all nondirectional tests. 

To perform audit procedures 12 through 14, the auditor will define the sampling 
unit as the duplicate sales invoice. Audit procedures 10 and 11 will have to be tested 
separately using a sample of shipping documents. 


Establishing the tolerable exception rate (TER) for each attribute requires an 
auditor’s professional judgment. TER represents the highest exception rate the 
auditor will permit in the control being tested and still be willing to conclude the 
control is operating effectively (and/or the rate of monetary misstatements in the 
transactions is acceptable). For example, assume that the auditor decides that TER 
for attribute 8 in Table 15-3 is 9 percent. That means that the auditor has decided 
that even if 9 percent of the duplicate sales invoices are not approved for credit, 
the credit approval control is still effective in terms of the assessed control risk in- 
cluded in the audit plan. 

When determining TER, the auditor considers the degree of reliance to be placed 
on the control and the significance of the control to the audit. If only one internal 
control is used to support a low control risk assessment for an objective, TER will be 
lower for the attribute than if multiple controls are used to support a low control risk 
assessment for the same objective. Control deviations increase the risk of material 
misstatements in the accounting records, but do not necessarily result in misstate- 
ments. For example, a disbursement that does not have evidence of proper approval 
may have been properly authorized and recorded. For this reason, the tolerable rate of 
deviation for tests of controls is normally higher than the comparable tolerable rate of 
exception for monetary misstatements. 

TER can have a significant impact on sample size. A larger sample size is needed 
for a low TER than for a high TER. For example, a larger sample size is needed for the 
test of credit approval (attribute 8) if the TER is decreased from 9 percent to 6 percent. 
Since a lower TER is used for significant account balances, the auditor requires a larger 
sample size to gather sufficient evidence about the effectiveness of the control or 
absence of monetary misstatements. 

Most auditors use some type of template to document each sampling applica- 
tion. Figure 15-2 (p. 494) shows one example of a commonly used form. Notice 
that the top part of the form includes a definition of the objective, the population, 
and the sampling unit. 

Auditors determine the TER for each attribute being tested in audit procedures 12 
through 14 in Table 15-3 by deciding what exception rate is material. As Figure 15-2, 
indicates: 


¢ For attribute 1, the failure to record a sales invoice would be highly significant, 
so the lowest TER (4 percent) is chosen. 

* For attributes 2-5, the incorrect billing to a customer and recording the trans- 
action is potentially significant, but no misstatement is likely to be for the full 
amount of the invoice. As a result, the auditor chose a 5 percent TER for each of 
these attributes. 

* Attributes 6-9 have higher TERs because they are of less importance in the 
audit. 


Specify the Tolerable 
Exception Rate 
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Sampling Data Sheet: Tests of Hillsburg Hardware Co.’s 
Billing Function 


FIGURE 15-2 


Client: Hillsburg Hardware Year-end: 12/31/I6 
Audit Area: Tests of Controls and Substantive Tests of Transactions— Pop. size: 5,764 
Billing Function 


Define the objective(s): Examine duplicate sales invoices and related documents to determine 
whether the system has functioned as intended and as described in the audit program. 


Define the population precisely (including stratification, if any): Sales invoices for the 
period 1/1/16 to 10/31/16. First invoice number = 3689. Last invoice number = 9452. 


Define the sampling unit, organization of population items, and random selection procedures: 
Sales invoice number, recorded in the sales journal sequentially; computer generation of random 
numbers. 


Planned Audit Actual Results 


Calculated 
Initial Number Sample | Allowance for 

Ps sample of exception | Sampling Risk 

Description of Attributes size exceptions | _ rate (TER-SER) 


|. Existence of the sales invoice number 
in the sales journal (procedure 12). 75 


. Amount and other data in the master 
file agree with sales journal entry 
(procedure 13a). 


. Amount and other data on the 
duplicate sales invoice agree with the 
sales journal entry (procedure 1|3b). 


. Evidence that pricing, extensions, and 
footings are checked (initials and 
correct amounts) (procedure |3b). 


. Quantity and other data on the bill of 
lading agree with the duplicate sales 
invoice and sales journal (procedure | 3c). 


. Quantity and other data on the sales 
order agree with the duplicate sales 
invoice (procedure 13d). 


. Quantity and other data on the 
customer order agree with the duplicate 
sales invoice (procedure |3e). 


. Credit is approved 
(procedure |3e). 


. For recorded sales in the sales 
journal, the file of supporting 
documents includes a duplicate sales 
invoice, bill of lading, sales order, and 
customer order (procedure 14). 


Intended use of sampling results: 
1. Effect on Audit Plan: 


2. Recommendations to Management: 


Whenever auditors take a sample, they risk making incorrect conclusions about the 
population. The risk that the auditor concludes that controls are more effective than 
they actually are is the risk of overreliance. The risk of underreliance is the risk that 
the auditor will erroneously conclude that the controls are less effective than they ac- 
tually are. Underreliance affects the efficiency of the audit. The incorrect conclusion 
that a control is ineffective may lead to an unnecessary increase in assessed control 
risk and substantive tests. In contrast, overreliance on a control impacts the effective- 
ness of the audit, because reliance on an ineffective control leads to an inappropriate 
reduction in substantive tests. 

Auditors are normally more concerned with the risk of overreliance because it 
impacts the effectiveness of the audit. The acceptable risk of overreliance (ARO) 
measures the risk the auditor is willing to take of accepting a control as effective (or a 
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rate of misstatements as tolerable) when the true population exception rate is greater 
than TER. 

ARO represents the auditor’s measure of sampling risk. Assume that TER is 6 per- 
cent, ARO is high, and the true population exception rate is 8 percent. The control in 
this case is not acceptable because the true exception rate of 8 percent exceeds TER. The 
auditor, of course, does not know the true population exception rate. The ARO of high 
means that the auditor is willing to take a fairly substantial risk of concluding that the 
control is effective after all testing is completed, even when it is ineffective. If the control 
were found to be effective in this illustration, the auditor would have overrelied on the 
system of internal control (used a lower assessed control risk than was justified). 

In choosing the appropriate ARO for each attribute, auditors must use their 
best judgment. Their main consideration is the extent to which they plan to reduce 
assessed control risk as a basis for the extent of tests of details of balances. Auditors 
normally assess ARO at a lower level when auditing an accelerated filer public com- 
pany because the auditor needs greater assurance that the internal controls are effec- 
tive to support the opinion on internal control over financial reporting. In audits of 
non-accelerated filers and private companies, the appropriate ARO and extent of tests 
of controls depend on assessed control risk. For audits where there is extensive reli- 
ance on internal control, control risk will be assessed as low and therefore ARO will 
also be assessed as low. Conversely, if the auditor plans to rely on internal controls 
only to a limited extent, control risk will be assessed as high and so will ARO. 

For nonstatistical sampling, it is common for auditors to use ARO of high, medium, 
or low instead of a percentage. For statistical sampling, it is common for auditors to use 
a percent, such as 5% or 10%. A low ARO implies that the tests of controls are impor- 
tant and will correspond to a low assessed control risk and reduced substantive tests of 
details of balances. As summarized in Figure 15-2, ARO for the audit of the billing func- 
tion at Hillsburg Hardware Co. is assessed as low for all attributes, because it is an accel- 
erated filer public company and the auditor’s tests of controls must provide a basis for 
the opinion on internal control over financial reporting. As a result, the auditor requires 
a low risk of overrelying on controls. Stated another way, the auditor needs greater 
assurance and therefore a larger sample size to support the lower risk of overreliance. 

Like for TER, there is an inverse relationship between ARO and planned sample 
size. If the auditor reduces ARO from high to low, planned sample size must be 
increased. ARO represents the auditor’s risk of incorrectly accepting the control as 
effective, and a larger sample size is required to lower this risk. 

The auditor can establish different TER and ARO levels for different attributes 
of an audit test, depending on the importance of the attribute and related control. 
For example, auditors commonly use higher TER and ARO levels for tests of credit 
approval than for tests of the occurrence of duplicate sales invoices and bills of lading. 
This makes sense because the exceptions for the latter are likely to have a more direct 
impact on the correctness of the financial statements than the former. 

Tables 15-4 and 15-5 on the following page present illustrative guidelines for estab- 
lishing TER and ARO. The guidelines should not be interpreted as representing broad 
professional standards. However, they are typical of the types of guidelines CPA firms 
issue to their staff. 


Auditors should make an advance estimate of the population exception rate to plan 
the appropriate sample size. If the estimated population exception rate (EPER) 
is low, a relatively small sample size will satisfy the auditor's tolerable exception rate, 
because a less precise estimate is required. 

Auditors often use the preceding year’s audit results to estimate EPER. If prior- 
year results are not available, or if they are considered unreliable, the auditor can take 
a small preliminary sample of the current year’s population for this purpose. It is not 
critical that the estimate be precise because the current year’s sample exception rate 


Estimate the Population 


Exception Rate 
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EES ee ~Guidelines for ARO and TER for Nonstatistical Sampling: Tests of Controls 
Planned Reduction in Substantive Tests of Details of Balances Judgment Guideline 
Assessed control risk. Consider: ¢ Lowest assessed control risk * ARO of low 
Need to issue a separate report on internal control over financial reporting for ¢ Moderate assessed control risk * ARO of medium 
accelerated filer public companies ¢ Higher assessed control risk * ARO of high 
Nature, extent, and timing of substantive tests (extensive planned substantive * 100% assessed control risk * ARO is not applicable 
tests relate to higher assessed control risk and vice versa) 
Quality of evidence available for tests of controls (a lower quality of evidence 
available results in a higher assessed control risk and vice versa) 
Significance of the transactions and related account balances that the internal * Highly significant balances * TER of 4% 
controls are intended to affect * Significant balances * TER of 5% 
* Less significant balances * TER of 6% 


Note: The guidelines should recognize that 
be followed. 


there may be variations in AROs based on audit considerations. The guidelines above are the most conservative that should 


7 \: 8S ~Guidelines for ARO and TER for Nonstatistical Sampling: Substantive Tests of Transactions 


Planned Reduction in Results of Understanding 

Substantive Tests of Internal Control and Tests ARO for Substantive TER for Substantive 

Details of Balances of Controls Tests of Transactions Tests of Transactions 

Large Excellent High Percent or amount based on materiality 
Good Medium considerations for related accounts 
Not good Low 

Moderate Excellent High Percent or amount based on materiality 
Good Medium considerations for related accounts 
Not good Medium-low 

Small? Excellent High Percent or amount based on materiality 
Good Medium-high considerations for related accounts 
Not good Medium 


Note: The guidelines should also recognize 
should be followed. 


that there may be variations in AROs based on audit considerations. The guidelines above are the most conservative that 


'In this situation, both internal control and evidence about it are good. Substantive tests of transactions are least likely to be performed in this situation. 
2In this situation, little emphasis is being placed on internal controls. Neither tests of controls nor substantive tests of transactions are likely in this situation. 


Determine the Initial 
Sample Size 
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is ultimately used to estimate the population characteristics. If a preliminary sample 
is used, it can be included in the total sample, as long as appropriate sample selection 
procedures are followed. In the Hillsburg Hardware Co. audit, the estimated popula- 
tion exception rates for the attributes in Figure 15-2 (p. 494) are based on the previous 
year’s results, modified slightly to account for the change in personnel. 


Four factors determine the initial sample size for audit sampling: population size, 
TER, ARO, and EPER. Population size is not a significant factor and typically can 
be ignored, especially for large populations. Auditors using nonstatistical sampling 
decide the sample size using professional judgment rather than using a statistical for- 
mula. Once the three major factors affecting sample size have been determined, the 
auditor can decide an initial sample size. It is called an initial sample size because the 
exceptions in the actual sample must be evaluated before auditors can decide whether 
the sample is sufficiently large to achieve the objectives of the tests. 


Sensitivity of Sample Size to a Change in the Factors To understand the concepts 
underlying sampling in auditing, you need to understand the effect of increasing or 
decreasing any of the four factors that determine sample size, while the other factors 
are held constant. Table 15-6 shows the effect on sample size of independently in- 
creasing each factor. The opposite effect will occur for decreasing each factor. 

A combination of two factors has the greatest effect on sample size: TER minus 
EPER. The difference between the two factors is the precision of the initial sample 
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i \ RLS Effect on Sample Size of Changing Factors 


Type of Change Effect on Initial Sample Size 
Increase acceptable risk of overreliance Decrease 

Increase tolerable exception rate Decrease 

Increase estimated population exception rate Increase 

Increase population size Increase (minor effect) 


estimate. A smaller precision, which is called a more precise estimate, requires a larger 
sample. At one extreme, assume TER is 4% and EPER is 3%. In this case, precision is 
1%, which will result in a large sample size. Now assume TER is 8% and EPER is zero, 
for an 8% precision. In this case the sample size can be small and still give the auditor 
confidence that the actual exception rate is less than 8%, assuming no exceptions are 
found when auditing the sample. 

Figure 15-2 summarizes the different sample sizes selected for testing attributes 1 
through 9 for the Hillsburg audit. The largest sample (a size of 100) is selected for tests 
of attributes 2 through 5, because of the degree of precision required. For those attri- 
butes, the difference between TER and EPER is smallest, thus requiring a larger sample 
size than attributes 6 through 9. Although the difference between TER and EPER for 
attribute 1 is the same as that for attributes 2 through 5, the estimated population 
exception rate of zero justifies a smaller sample of 75 items. Because a less precise esti- 
mate is needed (TER minus EPER is larger) for attributes 7 and 8, a sample size of only 
50 items is needed. 


After auditors determine the initial sample size for the audit sampling application, 
they must choose the items in the population to include in the sample. Auditors can 
choose the sample using any of the probabilistic or nonprobabilistic methods we 
discussed earlier in this chapter. To minimize the possibility of the client altering the 
sample items, the auditor should not inform the client too far in advance of the sample 
items selected. The auditor should also control the sample after the client provides the 
documents. Several additional sample items may be selected as extras to replace any 
voided items in the original sample. 

The random selection for the Hillsburg audit procedures is straightforward except 
for the different sample sizes needed for different attributes. To overcome this prob- 
lem, auditors can select a random sample of 50 for use on all nine attributes, followed 
by another sample of 15 for all attributes except attributes 7 and 8, an additional 10 for 
attributes 1 through 5, and 25 more for attributes 2 through 5. 


Select the Sample 


SAMPLE SIZES Many important controls, such as controls Sample sizes near the low end of the range are 
FOR SMALL over the year-end closing process, may be performed appropriate for control reliance in normal finan- 
only once a year. Other controls, such as recon- cial statement audit situations. Sample sizes near 
POPULATIONS ciliations and exception reports, may operate ona or above the upper range are appropriate where 
AND weekly or monthly basis. The AICPA Audit Sampling other sources of evidence are less persuasive, 
Audit Guide provides guidance for testing the operat- where there are concerns about the operations 
INFREQUENTLY ing Seis of Sa populations. : : of the control, when controls have une or 
OPERATING where deficiencies have been experienced in the 


CONTROLS Gontrolicreauenc past. Auditors can use sampling parameters such 
2 : as risk and the tolerable exception rate to deter- 


mine sample sizes when the test is the sole source 
Quarterly (4) of evidence about the effectiveness of the control 
Monthly (12) and a high level of audit evidence is desired. 


and Population Size Items to Test 
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Semimonthly (24 
) Source: Based on Audit Sampling Audit Guide, American 


Weekly (52) Institute of Certified Public Accountants, 2014. 
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Figure 15-1 (p. 486) illustrates the selection of the first 50 sample items for 
Hillsburg Hardware using computer generation of random numbers. 


The auditor performs the audit procedures by examining each item in the sample to 
determine whether it is consistent with the definition of the attribute and by main- 
taining a record of all the exceptions found. When audit procedures have been com- 
pleted for a sampling application, the auditor will have a sample size and number of 
exceptions for each attribute. 

To document the tests and provide information for review, auditors commonly 
include a schedule of the results. Some auditors prefer to include a schedule listing all 
items in the sample; others prefer to limit the documentation to identifying the excep- 
tions. This latter approach is followed in Figure 15-3. 


Perform the Audit 
Procedures 


FIGURE I5-3 Inspection of Sample Items for Attributes 


CLIENT: Hillsburg Hardware 
INSPECTION OF SAMPLE ITEMS Prepared by MSW 
FOR ATTRIBUTES Date INV/I5/16 
YEAR-END: DECEMBER 3}, 2016 


Identity 


of Item Attributes 
Selected X = Exception 
SS SSS SS SSS SSS SSS SSS SSS SSS SSS SSS SSS SSS SS Sa S| 


Invetce ma leeseleae || ez 9 | 10 
no. 


3787 X 
3924 Xx 
3990 
4058 
4117 
4222 
4488 
4635 
4955 
4969 
5101 
5166 
5419 
5832 
5890 
6157 
6229 
6376 
6635 
7127 
8338 
887| 
9174 
937\ 


No. 
Exceptions 
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Sample 
Size 


Arens, Alvin, et 3A¥diting and AssuRaré SeidesPEBGAKT GDbAGEtibH PodtIDI FAP ROG ASGITED DHE SADE KOO taECTION CYCLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?doclD=5 185606. 
Created from undip-ebooks on 2021-07-13 01:42:48. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


The sample exception rate (SER) can be easily calculated from the actual sample 
results. SER equals the actual number of exceptions divided by the actual sample size. 
Figure 15-3 summarizes the exceptions found for tests of attributes 1 through 9. In 
this example, the auditor found zero exceptions for attribute 1 and two exceptions for 
attribute 2, making the SER 0 percent (0 + 75) for attribute 1, and 2 percent for attri- 
bute 2 (2 + 100). 

When evaluating a sample for tests of controls and substantive tests of transactions, 
the auditor should evaluate sampling risk. However, when nonstatistical sampling is 
used, sampling risk cannot be directly measured. One way to evaluate sampling risk is 
to subtract the sample exception rate from the tolerable exception rate to find the cal- 
culated allowance for sampling risk (TER — SER), and evaluate whether it is sufficiently 
large to conclude that the true population exception rate is acceptable. For example, if 
an auditor takes a sample of 100 items for an attribute and finds no exceptions (SER = 
0) and TER is 5 percent, the calculated allowance for sampling risk is 5 percent (TER of 
5 percent — SER of 0 = 5 percent). If the auditors had found four exceptions, the calcu- 
lated allowance for sampling risk would have been 1 percent (TER of 5 percent — SER of 
4 percent). It is much more likely that the true population exception rate is less than or 
equal to the tolerable exception rate in the first case than in the second one. Therefore, 
most auditors would probably find the population acceptable based on the first sample 
result and not acceptable based on the second. The auditor’s consideration of whether 
the calculated allowance for sampling risk is sufficiently large also depends on the 
sample size used. If the sample size in the previous example had been only 20 items, the 
auditor would have been much less confident that finding no exceptions was an indica- 
tion that the true population exception rate does not exceed TER. 

When SER exceeds the EPER used in designing the sample (i-e., more exceptions 
were found than originally expected), the auditor can conclude that the sample results 
do not support the preliminary assessed control risk, assuming the initial sample size 
was appropriately determined. In that case, auditors are likely to conclude that there is 
an unacceptably high risk that the true exception rate in the population exceeds TER. 

The SER and the calculated allowance for sampling risk (TER — SER) for Hillsburg 
Hardware are summarized in Figure 15-4 (p. 500). 


In addition to determining SER for each attribute and evaluating whether the true (but 
unknown) exception rate is likely to exceed the tolerable exception rate, auditors must 
analyze individual exceptions to determine the breakdown in the internal controls 
that allowed them to happen. Exceptions can be caused by many factors, such as care- 
lessness of employees, misunderstood instructions, or intentional failure to perform 
procedures. The nature of an exception and its causes have a significant effect on the 
qualitative evaluation of the system. For example, if all the exceptions in the tests of 
internal verification of sales invoices occurred while the person normally responsible 
for performing the tests was on vacation, this would affect the auditor’s evaluation of 
the internal controls and the subsequent investigation differently than if the excep- 
tions arose from the incompetence of the regular employee. 
The exception analysis is illustrated for Hillsburg in Figure 15-5 (p. 501). 


When generalizing from the sample to the population, if the sample exception rate 
is less than the expected rate used in planning the sample, the auditor will conclude 
that the control being tested can be used to reduce assessed control risk as planned, 
assuming a careful analysis of the exceptions does not indicate the possibility of other 
significant problems with internal controls. 

As Figure 15-4 illustrates, SER exceeds EPER for attributes 2, 4, 5, and 8. As a 
result, the calculated allowance for sampling risk is too small and the auditor con- 
cluded that the results of these tests are unacceptable. When the auditor determines 
that the results of the tests are unacceptable, the auditor must follow one of four 
courses of action: 


Generalize from 
the Sample to the 
Population 


Analyze Exceptions 


Decide the Acceptability 


of the Population 
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Sampling Data Sheet: Tests of Hillsburg Hardware Co.’s 
Billing Function 


FIGURE 15-4 


Client: Hillsburg Hardware Year-end: 12/31/16 
Audit Area: Tests of Controls and Substantive Tests of Transactions— Pop. size: 5,764 
Billing Function 


Define the objective(s): Examine duplicate sales invoices and related documents to determine 
whether the system has functioned as intended and as described in the audit program. 


Define the population precisely (including stratification, if any): Sales invoices for the 
period 1/1/16 to 10/31/16 . First invoice number = 3689. Last invoice number = 9452. 


Define the sampling unit, organization of population items, and random selection procedures: 
Sales invoice number, recorded in the sales journal sequentially; computer generation of random 
numbers. 


Planned Audit Actual Results 


Calculated 
Initial Number | Sample | Allowance for 
ae , sample of exception | Sampling Risk 
Description of Attributes size exceptions| rate (TER-SER) 


|. Existence of the sales invoice number 
in the sales journal (procedure 12). 75 4.0 


. Amount and other data in the master 
file agree with sales journal entry 
(procedure 13a). 


. Amount and other data on the 
duplicate sales invoice agree with the 
sales journal entry (procedure 13b). 5.0 


. Evidence that pricing, extensions, and SER 
footings are checked (initials and exceeds 
correct amounts) (procedure 13b). TER 


. Quantity and other data on the bill of 
lading agree with the duplicate sales 
invoice and sales journal (procedure 13c). 


. Quantity and other data on the sales 
order agree with the duplicate sales 
invoice (procedure 13d). 


. Quantity and other data on the 
customer order agree with the duplicate 
sales invoice (procedure |3e). : 9.0 


SER 
exceeds 
TER 


. Credit is approved 
(procedure 1I3e). 


. For recorded sales in the sales 
journal, the file of supporting 
documents includes a duplicate sales 
invoice, bill of lading, sales order, and 
customer order (procedure 14). 


Intended use of sampling results: 


|. Effect on Audit Plan: Controls tested through attributes |, 3, 6, 7, and 9 can be viewed as operating effectively 
given the size of the allowance for sampling risk (e.g., TER — SER). Additional emphasis is needed in confirmation, 
allowance for uncollectible accounts, cutoff tests, and price tests for the financial statement audit due to results of 
tests for attributes 2, 4, 5, and 8. 


2. Effect on Report on Internal Control: The allowance for sampling risk is too small or SER exceeds TER for 
attributes 2, 4, 5, and 8. These findings have been communicated to management to allow an opportunity for 
correction of the control deficiency to be made before year-end. If timely correction is made by management, the 
corrected controls will be tested before year-end for purposes of reporting on internal control over financial 
reporting. 


3. Recommendations to Management: Each of the exceptions should be discussed with management. Specific 
recommendations are needed to correct the internal verification of sales invoices and to improve the approach to 
credit approvals. 
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Revise TER or ARO This alternative should be followed only when the auditor has 
concluded that the original specifications were too conservative. Relaxing either 
TER or ARO may be difficult to defend if the auditor is ever subject to review by a 
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FIGURE I5-5 | Analysis of Exceptions 


CLIENT: Hillsburg Hardware 


ANALYSIS OF EXCEPTIONS Prepared by: MSW 
YEAR-END: December 31, 2016 Date: | 1/15/16 


Attribute 


Number of Nature of 
exceptions exceptions 


Effect on the financial statement 
audit and other comments* 


2 


Both errors were posted to 
the wrong account and were 
still outstanding after several 
months. The amounts were 
for $2,500 and $7,900. 


—In six cases there were no 


—lIn two cases the wrong price 
was used but the errors were 
under $200 in each case. 

—lIn one case there was a 
pricing error of $5,000. 

—In one case freight was not 
charged. (Three of the last 
four exceptions had initials 
for internal verification.) 


In each case the date on the 
duplicate sales invoice was 
several days later than the 
shipping date. 


Just 106 items were shipped 
and billed though the sales 
order was for | 12 items. The 
reason for the difference was 
an error in the perpetual 
inventory master file. The 
perpetuals indicated that | 12 
items were on hand, when 
there were actually 106. The 
system does not backorder 
for undershipments smaller 
than 25%. 


Credit was not approved. 
Four of these were for new 
customers. Discussed with 
Chulick, who stated his busy 
schedule did not permit 
approving all sales. 


initials for internal verification. 


Because the allowance for 
sampling risk is small (e.g., 

TER — SER), additional 
substantive work is needed. 
Perform expanded confirmation 
procedures and review older 
uncollected balances thoroughly. 


As a result, have independent 
client personnel recheck a 
random sample of 500 duplicate 
sales invoices under our control. 
Also, expand the confirmation of 
accounts receivable. 


Do extensive tests of the sales 
cutoff by comparing recorded 
sales with the shipping documents. 


No expansion of tests of controls 
or substantive tests. The system 
appears to be working effectively. 


Expand the year-end procedures 
extensively in evaluating 
allowance for uncollectible 
accounts. This includes scheduling 
of cash receipts subsequent to 
year-end for all outstanding 
accounts receivable to determine 
collectibility at year-end. 


consideration. 
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*This column documents conclusions about implications for the financial statement audit. The control deficiencies 

have been communicated to management to allow an opportunity for correction of the deficiency before year-end. 
If timely correction is made by management, the corrected controls will be tested before year-end for purposes of 
reporting on internal control over financial reporting. 


court or a commission. Auditors should change these requirements only after careful 


Expand the Sample Size An increase in the sample size has the effect of decreasing 
sampling risk if the actual sample exception rate does not increase. Of course, SER 
may also increase or decrease if additional items are selected. Increasing the sample 
size is appropriate if the auditor believes the initial sample was not representative, or if 


541 


it is important to obtain evidence that the control is operating effectively. This is likely 
if the auditor is reporting on internal control, or if the control relates to highly signifi- 
cant account balances such as receivables or inventory. 


Revise Assessed Control Risk If the results of the tests of controls and substantive 
tests of transactions do not support the preliminary assessed control risk, the auditor 
should revise assessed control risk upward. This will likely result in the auditor in- 
creasing substantive tests of transactions and tests of details of balances. For example, 
if tests of controls of internal verification procedures for verifying prices, extensions, 
and quantities on sales invoices indicate that those procedures are not being followed, 
the auditor should increase substantive tests of transactions for the accuracy of sales. 
If the substantive tests of transactions results are unacceptable, the auditor must in- 
crease tests of details of balances for accounts receivable. 

The auditor should decide whether to increase sample size or to revise assessed 
control risk on the basis of cost versus benefit. If the sample is not expanded, the 
auditor must revise assessed control risk upward and therefore perform additional 
substantive tests. The cost of additional tests of controls must be compared with that 
of additional substantive tests. If an expanded sample continues to produce unaccept- 
able results, additional substantive tests will still be necessary. 

For accelerated filer public companies, the auditor must evaluate the control 
deficiencies to determine their effect on the auditor’s report on internal control. If the 
deficiencies constitute a material weakness but are corrected before year-end, the audi- 
tor may be able to test management’s corrected controls. The auditor may also be able 
to identify additional compensating controls. If the auditor is unable to test corrected 
controls or identify compensating controls and the deficiencies are deemed to be mate- 
rial weaknesses, the audit report on internal control must be an adverse opinion. 


Communicate with the Audit Committee or Management Communication is de- 
sirable, in combination with one of the other three actions just described, regardless of 
the nature of the exceptions. When the auditor determines that the internal controls 
are not operating effectively, management should be informed in a timely manner. If 
the tests were performed prior to year-end, this may allow management to correct the 
deficiency before year-end. The auditor is required to communicate in writing to those 
charged with governance, such as the audit committee, regarding significant deficien- 
cies and material weaknesses in internal control. 
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SAMPLING IN 
PRACTICE 


A recent survey of sampling experts at the six larg- 
est audit firms provides interesting insights into the 
sampling policies of these firms. Half of the firms use 
a statistical sampling approach when sampling for 
tests of controls, and the other half use a nonstatis- 
tical approach. Consistent with auditing standards, 
the firms using a nonstatistical approach note that 
sample sizes in their firm guidance are comparable 
to those that would be determined with a statistical 
approach. When it comes to determining a sample 
size for tests of controls, the majority of the firms 
surveyed use the tables in the AICPA Audit Sampling 
Audit Guide, although one firm indicated that they 
use their own audit software. In contrast, the firms 
tend to use audit software to determine sample sizes 
for substantive tests of details. 

In terms of the inputs used when determining 
sample size for tests of controls, the firms tend to 
use a high level of confidence of 90-95%, consistent 
with a high level of assurance. The firms typically 
use zero expected deviations when determining 
sample sizes for tests of controls. The tolerable 


exception rate used by the firms is frequently in 
the range of 6—10%; however, two of the larg- 

est audit firms indicated that 10% is the standard 
tolerable exception rate. The firms use various 
responses if a control exception is identified dur- 
ing testing, but typically they identify alternative 
compensating controls or increase substantive 
testing, rather than increase the sample size 

for the test of control. In response to PCAOB 
criticism of audit firms’ approaches to testing 
revenue, the firms surveyed recently increased their 
use of sampling of revenue transactions to test 
occurrence and accuracy rather than relying more 
extensively on substantive analytical procedures. 


Sources: (1) B.E. Christensen, R.J. Elder, and S.M. Glover, 
“Behind the Numbers: Insights into Large Audit Firm 
Sampling Practices,” Accounting Horizons (March 2015), 

pp. 61-81; (2) Public Company Accounting Oversight Board 
Staff Audit Practice Alert No. 12, Matters Related to Auditing 
Revenue in an Audit of Financial Statements, September 9, 2014 
(www.pcaobus.org). 
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As Figure 15-4 (p. 500) illustrates, in the Hillsburg audit, the results for attributes 
2, 4, 5, and 8 were unacceptable. Because the sales transactions tested at Hillsburg 
represented transactions recorded only through October 31, 2016, timely commu- 
nication of these deficiencies may allow Hillsburg management to correct the noted 
deficiencies in time for the auditor to test the corrected controls before year-end for 
purposes of auditing internal control over financial reporting. 

In Figure 15-5 (p. 501), the last column summarizes the follow-up actions the 
auditor plans to do regardless of whether the control deficiencies were corrected. No 
follow-up actions are required to address the exception noted for attribute 6, given the 
large difference between SER and TER. The conclusions reached about each attribute 
are also documented at the bottom of Figure 15-4. 


The auditor needs to retain adequate records of the procedures performed, the meth- 
ods used to select the sample and perform the tests, the results found in the tests, and 
the conclusions reached. Documentation is needed for both statistical and nonstatis- 
tical sampling to evaluate the combined results of all tests and to defend the audit if 
the need arises. Figures 15-2 through 15-6 illustrate the type of documentation com- 
monly found in practice. 

Figure 15-6 (p. 504) illustrates the evidence-planning worksheet used in the audit 
of Hillsburg Hardware to decide the tests of balances for accounts receivable. After 
completing tests of controls and substantive tests of transactions, the auditor should 
complete rows 3 through 7 of the worksheet. (You may recall that rows 1 and 2 were 
completed in Chapter 9.) Rows 3 through 5 document control risk for sales, cash 
receipts, and additional controls. The control risk assessments in Figure 15-6 are the 
same as the preliminary assessments in the control risk matrices for Hillsburg Hardware 
in earlier chapters on pages 373 and 466, with the following modifications : 


Documentation and 
Evidence Planning 


* Control risk is high for the accuracy objective for sales because of the unsatisfac- 
tory results for attribute 4 (procedure 13b). 

* Control risk is high for the realizable value objective for accounts receivable 
based on the results for attribute 8 related to credit approval for sales transac- 
tions (procedure 13e). 

* The occurrence (completeness) objective for cash receipts relates to the com- 
pleteness (existence) objective for accounts receivable. 


Finally, note in Figure 15-6 that all substantive tests of transactions results were 
satisfactory except for the accuracy and cutoff objectives for sales. Refer back to 
Figure 15-5 and you can see that: 


* Substantive tests of transactions results for the accuracy objective were only fair 
because of exceptions found for attribute 2 (procedure 13a). 

* Results were unacceptable for the cutoff objective because of unsatisfactory 
results for attribute 5 (procedure 13c). 


All of the steps involved in nonstatistical sampling are summarized in Figure 15-7 
(p. 505). Although this figure deals with nonstatistical sampling, the 14 steps in the 
figure also apply to statistical sampling, which is covered next. 


STATISTICAL AUDIT SAMPLING 
The statistical sampling method most commonly used for tests of controls and OBJECTIVE 15-6 


substantive tests of transactions is attributes sampling. (When the term attributes ; 
eee ‘ 2 ; Z rae : ‘ee Define and describe attri- 

sampling is used in this text, it refers to attributes statistical sampling. Nonstatistical putes sampling and a sampling 

sampling also has attributes, which are the characteristics being tested for in the pop- distribution. 

ulation, but attributes sampling is a statistical method.) 
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FIGURE 15-6 


Evidence-Planning Worksheet to Decide Tests of Details of Balances for Hillsburg 
Hardware Co.— Accounts Receivable 


Acceptable audit risk 


Detail tie-in 


Medium 


Existence 


Medium 


Completeness 


Medium 


Accuracy 


Medium 


Classification 


Medium 


Medium 


Realizable value 


Medium 


Medium 


Inherent risk 


Medium 


Medium 


Medium 


Control risk— 
Sales 


Medium 


Medium 


Not 
applicable 


Control risk— 
Cash receipts 


Medium 


Not 
applicable 


Not 
applicable 


Control risk— 
Additional controls 


Substantive tests 
of transactions— 
Sales 


Good Good Good Fair Good 
results results results results results results 


Unacceptable Not Not 
applicable applicable 


Substantive tests 
of transactions— 
Cash receipts 


Good Good Good Good Good Good Not Not 
results results results results results results applicable applicable 


Substantive analytical 
procedures 


Planned detection 
risk for tests of 
details of balances 


Planned audit 
evidence for tests of 
details of balances 


Differences Between 


Nonstatistical Sampling 
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Sampling Distribution 


Attributes Sampling and 


Performance materiality 


$265,000 


The application of attributes sampling for tests of controls and substantive tests of 
transactions has far more similarities to nonstatistical sampling than differences. The 
same 14 steps are used for both approaches, and the terminology is essentially the 
same. The main differences are (1) the calculation of initial sample sizes developed 
from statistical probability distributions using tables or audit software and (2) the 
calculation of estimated upper exception rates using audit software or tables similar to 
those for calculating sample sizes. 


Auditors base their statistical inferences on sampling distributions. A sampling 
distribution is a frequency distribution of the results of all possible samples of a 
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FIGURE 15-7 Summary of Audit Sampling Steps 


PLAN THE SAMPLE 


. State the objectives 

. Decide whether audit sampling applies 

. Define attributes and exception conditions 
. Define population 

. Define sampling unit 

. Specify tolerable exception rate 

. Specify acceptable risk of overreliance 

. Estimate population exception rate 

. Determine initial sample size 


SELECT THE SAMPLE 


OANADAUAWN — 


. Select sample 


PERFORM THE TESTS 
Number of 


. Perform audit procedures exceptions in 
sample and actual 
sample size 


EVALUATE THE RESULTS 


Computed . Generalize from sample to population 
UPPely Actual exceptions in sample 
exception Actual sample size 


| ; : 
Wels Acceptable risk of overreliance 


13. Analyze exceptions 
14. Decide acceptability of population 


'Many auditors using nonstatistical methods calculate tolerable exception rate minus sample exception rate and evaluate 
whether the difference is sufficiently large. 


specified size that could be obtained from a population containing some specific 
characteristics. Sampling distributions allow the auditor to make probability state- 
ments about the likely representativeness of any sample that is in the distribution. 
Attributes sampling is based on the binomial distribution, in which each possible 
sample in the population has one of two possible values, such as yes/no, black/white, 
or control deviation/no control deviation. 

Assume that in a population of sales invoices, 5 percent have no shipping docu- 
ments attached as required by the client’s internal controls. If the auditor takes a 
sample of 50 sales invoices, how many will be found that have no shipping docu- 
ments? Simple multiplication would estimate 2.5 exceptions (5% of 50), but that 
number is impossible because there is no such thing as half an exception. In reality, 
the sample could contain no exceptions or even more than ten. A binomial-based 
sampling distribution tells us the probability of each possible number of exceptions 
occurring. Table 15-7 illustrates the sampling distribution for the example popula- 
tion with a sample of 50 items from a very large population and an exception rate 
of 5 percent. To calculate the probability of obtaining a sample with at least one 
exception, subtract the probability of no exceptions occurring from 1 (100 percent). 
By doing so, we find the likelihood of finding a sample with at least one exception is 
1—.0769, or 92.31 percent. 

Each population exception rate and sample size has a unique sampling distribu- 
tion. The distribution for a sample size of 100 from a population with a 5 percent 
exception rate differs from the previous example, as will the distribution for a sample 
of 50 from a population with a 3 percent exception rate. 
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TABLE 15-7 Probability of Each Exception Rate—5 Percent Population 
Exception Rate and Sample Size of 50 
Number of Exceptions Percentage of Exception Probability Cumulative Probability 
0 0 0769 0769 
| 2 .2025 2794 
2 4 2611 5405 
3 6 2199 .7604 
4 8 .1360 8964 
5 10 0656 .9620 
6 12 .0260 .9880 
7 14 .0120 1.0000 


Of course, auditors do not take repeated samples from known populations. They 
take one sample from an unknown population and get a specific number of excep- 
tions in that sample. But knowledge about sampling distributions enables auditors to 
make statistically valid statements about the population. If the auditor selects a sample 
of 50 sales invoices to test for attached shipping documents and finds one exception, 
the auditor could examine the probability table in Table 15-7 and know there is a 20.25 
percent probability that the sample came from a population with a 5 percent excep- 
tion rate, and a 79.75 percent (1 —.2025) probability that the sample was taken from a 
population having some other exception rate. Based on the cumulative probabilities 
column in Table 15-7, an auditor could estimate a 27.94 percent probability that the 
sample came from a population with more than a 5 percent exception rate and a 72.06 
percent (1 — .2794) probability that the sample was taken from a population having 
an exception rate of 5 percent or less. Because it is also possible to calculate the prob- 
ability distributions for other population exception rates, auditors use these to draw 
statistical conclusions about the unknown population being sampled. These sampling 
distributions are the basis for the tables and sampling software used by auditors for 
attributes sampling. 


Use attributes sampling in tests 
of controls and substantive tests 
of transactions. 
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APPLICATION OF ATTRIBUTES SAMPLING 


The steps discussed for nonstatistical sampling are equally applicable to attributes 
sampling. In this section, we'll focus on the differences between the two sampling 
methods. 

Plan the Sample 


1. State the objectives of the audit test. Same for attributes and nonstatistical sampling. 

2. Decide whether audit sampling applies. Same for attributes and nonstatistical 
sampling. 

3. Define attributes and exception conditions. Same for attributes and nonstatistical 

sampling. 

Define the population. Same for attributes and nonstatistical sampling. 

Define the sampling unit. Same for attributes and nonstatistical sampling. 

Specify the tolerable exception rate. Same for attributes and nonstatistical sampling. 

Specify acceptable risk of overreliance. The concepts of specifying this risk are the 

same for both statistical and nonstatistical sampling, but the method of quantifi- 

cation is usually different. For nonstatistical sampling, most auditors use low, me- 

dium, or high acceptable risk, whereas auditors using attributes sampling assign a 


No Me 
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specific amount, such as 10 percent or 5 percent risk. The methods differ because 
auditors need to evaluate results statistically. 

8. Estimate the population exception rate. Same for attributes and nonstatistical 
sampling. 

9. Determine the initial sample size. Four factors determine the initial sample size 
for both statistical and nonstatistical sampling: population size, TER, ARO, and 
EPER. In attributes sampling, auditors determine sample size by using audit soft- 
ware with a sampling module or tables developed from statistical formulas. 


If auditors use audit software to determine sample size, they enter values for pop- 
ulation size, TER, ARO, and EPER and the software returns the appropriate sample 
size based on sampling distributions as discussed above. Alternatively, auditors can 
use tables such as those shown in Table 15-8 (p. 508), which come from the AICPA 
Audit Sampling Audit Guide. The top one shows sample sizes for a 5 percent ARO, 
while the bottom one is for a 10 percent ARO. 


Use of the Tables When auditors use the tables to determine initial sample size, they 
follow these four steps: 


i. Select the table corresponding to the ARO. 
ii. Locate the TER at the top of the table. 
iii. Locate the EPER in the far left column. 
iv. Read down the appropriate TER column until it intersects with the appropriate 
EPER row. The number at the intersection is the initial sample size. 


Using the Hillsburg Hardware Co. example, assume that an auditor is willing to 
reduce assessed control risk for the agreement between sales orders and invoices if 
the number of exceptions in the population (attribute 6 in Table 15-3 on p. 492) does 
not exceed 7 percent (TER), at a 5 percent ARO. On the basis of past experience, the 
auditor sets EPER at 1 percent. On the 5 percent ARO table, locate the 7 percent TER 
column, and read down the column until it intersects with the 1 percent EPER row. 
The initial sample size is 66. 

Is 66 a large enough sample size for this audit? It is not possible to decide until 
after the tests have been performed. If the actual exception rate in the sample turns 
out to be greater than 1 percent, the auditor will be unsure of the effectiveness of the 
control. The reasons will become apparent in the following sections. 


Effect of Population Size In the preceding discussion, auditors ignored the size of the 
population in determining the initial sample size. Statistical theory shows that in popu- 
lations where attributes sampling applies, population size is a minor consideration in 
determining sample size. Because most auditors use attributes sampling for reasonably 
large populations, the reduction of sample size for smaller populations is ignored here. 


Select the Sample and Perform the Audit Procedures 


10. Select the sample. The only difference in sample selection for statistical and non- 
statistical sampling is the requirement that probabilistic methods must be used 
for statistical sampling. Either simple random or systematic sampling is used for 
attributes sampling. Audit or spreadsheet software can generate a sample using 
either of these probabilistic methods. 


11. Perform the audit procedures. Same for attributes and nonstatistical sampling. 


Evaluate the Results 
12. Generalize from the sample to the population. For attributes sampling, the auditor 
calculates the computed upper exception rate (CUER, also referred to as upper 
precision limit) at a specified ARO, again using special computer programs or 
tables developed from statistical formulas. The calculations are illustrated in ta- 
bles like Table 15-9 (p. 509). These are “one-sided tables,” meaning they represent 
the upper exception rate for a given ARO. 
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5s Determining Sample Size for Attributes Sampling* 


5 PERCENT RISK OF OVERRELIANCE 


Estimated Population Tolerable Exception Rate (in Percent) 

Exception Rate a 

(in Percent) 

0.00 149 99 74 59 49 42 36 32 29 19 14 
0.25 236 157 117 93 78 66 58 51 46 30 22 
0.50 313 157 117 93 78 66 58 51 46 30 22 
0.75 386 208 117 93 78 66 58 51 46 30 22 
1.00 DSM) 156 93 78 66 58 51 46 30 22 
1.25 303 156 124 78 66 58 5| 46 30 DD; 
1.50 392 192 124 103 66 58 5| 46 30 my 
1.75 227 153 103 88 77 51 46 30 DD 
2.00 ys 181 127 88 77 68 46 30 my 
25 390 208 127 88 77 68 6l 30 DD: 
2.50 234 150 109 77 68 6l 30 D2; 
D5 286 173 109 95 68 6l 30 22 
3.00 361 195 129 95 84 6l 30 D2; 
BD) 458 238 148 112 84 6l 30 22 
3.50 280 167 112 84 76 40 22 
3.75 34! 185 129 100 76 40 22 
4.00 42 221 146 100 89 40 DD: 
5.00 478 240 158 116 40 30 
6.00 266 179 50 30 
7.00 298 68 37 

10 PERCENT RISK OF OVERRELIANCE 


Estimated Population Tolerable Exception Rate (in Percent) 


Exception Rate 
(in Percent) 


0.00 114 76 57 45 38 32 28 25 22 15 I] 
0.25 194 129 96 77 64 55 48 42 38 25 18 
0.50 194 129 96 77 64 55 48 42 38 25 18 
0.75 265 129 96 77 64 55 48 42 38 25 18 
1.00 398 176 96 77 64 55 48 42 38 25 18 
1.25 221 132 77 64 55 48 42 38 25 18 
1.50 265 132 105 64 5) 48 42 38 25 18 
1.75 390 166 105 88 55 48 42 38 25 18 
2.00 198 132 88 75 48 42 38 25 18 
25) 262 132 88 75 65 42 38 25 18 
2.50 353 158 110 75 65 58 38 25 18 
Ds 47| 209 132 94 65 58 52 25 18 
3.00 258 132 94 65 58 52 25 18 
3.25 306 153 113 82 58 52 25 18 
3.50 400 194 113 82 73 52 25 18 
3.75 225 131 98 73 52 25 18 
4.00 274 149 98 73 65 25 18 
5.00 318 160 i) 78 34 18 
6.00 349 182 116 43 25 
7.00 385 199 52 25 
8.00 424 60 25 


Notes: |. This table assumes a large population. 2. Tables do not include higher estimated population exception rates, and sample sizes over 500 are not reported. 
3. Sample sizes are the same in certain columns even when estimated population exception rates differ because of the method of constructing the tables. 
Sample sizes are calculated for attributes sampling by using the expected number of exceptions in the population, but auditors can deal more conveniently with 
estimated population exception rates. For example, in the 15 percent column for tolerable exception rate, at an ARO of 5 percent, the initial sample size for 
most EPERs is 30. One exception, divided by a sample size of 30, is 3.3 percent. Therefore, for all EPERs greater than zero but less than 3.3 percent, the initial 
sample size is the same. 

*Source: Data from AICPA Audit Sampling Audit Guide, March |, 2014 (www.aicpa.org). 
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RLS ee Evaluating Sample Results Using Attributes Sampling* 


5 PERCENT RISK OF OVERRELIANCE 


Actual Number of Exceptions Found 


Sample Size 4 5 6 

20 14.0 2\\./ 28.3 Bagi 40.2 45.6 50.8 He) 60.7 65.4 69.9 
25 11.3 17.7 23.2 28.2 33.0 37.6 42.0 46.3 50.4 54.4 58.4 
30 9.6 14.9 19.6 MO) 28.0 31.9 35.8 Bo 43.0 46.6 50.0 
35 8.3 12.9 17.0 20.7 24.3 27.8 31.1 BA 37.5 40.6 ASV) 
40 73 11.4 15.0 18.3 21.5 24.6 DTS) 30.4 33.3 36.0 38.8 
45 6.5 10.2 13.4 16.4 19.2 22.0 24.7 27.3 29.8 32.4 34.8 
50 Byy) oe: 12.1 14.8 17.4 1939) DBA DAY 27.1 29.4 31.6 
55 Sa! 8.4 IT. 13.5 15.9 18.2 20.5 22.6 24.8 26.9 28.9 
60 Gee) 77 10.2 12.5 14.7 16.8 18.8 20.8 22.8 24.8 26.7 
65 46 7.1 a 115 13.6 15.5 17.5 19.3 21.2 23.0 Meal 
70 42 6.6 8.8 10.8 12.7 14.5 16.3 18.0 19.7 21.4 23.1 
75 40 6.2 8.2 10.1 11.8 13.6 15.2 16.9 18.5 20.1 21.6 
80 ohy/ 5.8 Mell Che) I. 12.7 14.3 15.9 17.4 18.9 20.3 
90 oe) by 62) 8.4 9.9 11.4 12.8 14.2 15.5 16.9 18.2 
100 3.0 47 6.2 76 9.0 10.3 11.5 12.8 14.0 15.2 16.4 
125 Dg 3.8 5.0 6.1 72 8.3 9.3 10.3 11.3 12.3 13.2 
150 2.0 oe Gey) 5.1 6.0 6.9 78 8.6 9.5 10.3 Il 
200 1.5 24 Br) 3.9 46 By) Dh) 6.5 UD 78 8.4 


10 PERCENT RISK OF OVERRELIANCE 


Actual Number of Exceptions Found 


6 
20 10.9 18.1 24.5 30.5 36.1 Falls 46.8 51.9 56.8 61.6 66.2 
25 8.8 14.7 20.0 24.9 29.5 34.0 38.4 42.6 46.8 50.8 54.8 
30 74 12.4 16.8 21.0 24.9 28.8 32.5 36.2 39.7 43.2 46.7 
35 6.4 10.7 14.5 18.2 21.6 24.9 28.2 lat 34.5 37.6 40.6 
40 5.6 9.4 12.8 16.0 19.0 22.0 24.9 27.7 30.5 33.2 35.9 
45 5.0 8.4 11.4 14.3 17.0 y/ 22.3 24.8 Miles 29.8 B28) 
50 46 76 10.3 12.9 15.4 17.8 20.2 22.5 24.7 27.0 29.2 
55 42 6.9 oi 11.8 14.1 16.3 18.4 20.5 22.6 24.6 26.7 
60 3.8 6.4 8.7 10.8 12.9 15.0 16.9 18.9 20.8 22.7 24.6 
65 3.5 Sy) 8.0 10.0 12.0 AO) 15.7 17.5 19.3 21.0 22.8 
70 3.3 55 Ue) 933 11.1 222) 14.6 16.3 18.0 19.6 2\| 
75 3.1 5.1 7.0 8.7 10.4 12.1 1307) 52 16.8 18.3 19.8 
80 2S) 48 6.6 8.2 9.8 11.3 12.8 14.3 15.8 17.2 18.7 
90 2.6 43 5.9 Us 8.7 10.1 11.5 12.8 14.1 iSy4i 16.7 
100 De) ao) ey) 6.6 Ue) 9.1 10.3 HES 12.7 I) 15.0 
125 1.9 3.1 43 DS 6.3 73 8.3 9.3 10.2 WN 2i Pall 
150 1.6 2.6 3.6 aE 5.3 6.1 7.0 78 8.6 9.4 10.1 
200 1.2 2.0 DS 34 40 46 2bs) 5.9 6.5 7.1 7.6 


Note: This table presents computed upper exception rates as percentages. Table assumes a large population. Sample sizes greater than 200 not shown. 
*Source: Data from AICPA Audit Sampling Audit Guide, March |, 2014 (www.aicpa.org). 


Use of the Tables Use of tables to compute CUER involves four steps: 


i. Select the table corresponding to the auditor’s ARO. This ARO should be the 
same as the ARO used for determining the initial sample size. 
ii. Locate the actual number of exceptions found in the audit tests at the top of the 
table. 
iii. Locate the actual sample size in the far left column. 
iv. Read down the appropriate actual number of exceptions column until it intersects 
with the appropriate sample size row. The number at the intersection is the CUER. 
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Need for Professional 
Judgment 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


To use the evaluation table for Hillsburg Hardware, assume an actual sample size 
of 70 and one exception in attribute 6. Using an ARO of 5 percent, CUER equals 6.6 
percent. In other words, the CUER for attribute 6 is 6.6 percent at a 5 percent ARO. 
Does this mean that if 100 percent of the population were tested, the true exception 
rate would be 6.6 percent? No, the true exception rate remains unknown. What this 
result means is this: if the auditor concludes that the true exception rate does not 
exceed 6.6 percent, there is a 95 percent probability that the conclusion is right and a 
5 percent chance that it is wrong. 

It is possible to have a sample size that is not equal to those provided for in the 
attributes sampling evaluation tables. When this occurs, it is common for auditors to 
interpolate to estimate the data points that fall between those listed in the table. 

These tables assume a very large (infinite) population size, which results in a more 
conservative CUER than for smaller populations. As with sample size, the effect of 
population size on CUER is typically very small, so it is ignored. 


13. Analyze exceptions. Same for attributes and nonstatistical sampling. 

14. Decide the acceptability of the population. The methodology for deciding the accept- 
ability of the population is similar for attributes and nonstatistical sampling. 
Because attributes sampling is a statistical sampling approach, it allows the auditor 
to quantify the allowance for sampling risk and the upper exception rate. For at- 
tributes sampling, the auditor compares CUER with TER for each attribute. Before 
the population can be considered acceptable, the CUER determined on the basis 
of the actual sample results must be less than or equal to TER when both are based 
on the same ARO. In our example, when the auditor specified a TER of 7 percent 
at a 5 percent ARO and the CUER was 6.6 percent, the requirements of the sample 
have been met. In this case, the control being tested can be used to reduce assessed 
control risk as planned, provided a careful analysis of the cause of exceptions does 
not indicate the possibility of a significant problem in an aspect of the control not 
previously considered. Recall that with nonstatistical sampling, the auditor cannot 
calculate CUER but instead compares TER with the sample exception rate (SER) 
and uses his or her judgment to decide whether the difference is sufficiently large. 

When the CUER is greater than the TER, it is necessary to take specific action. 
The four courses of action discussed for nonstatistical sampling are equally appli- 
cable to attributes sampling. 


Figure 15-8 illustrates the sampling documentation completed for the tests 
of attributes 1 through 9 in Table 15-3 for Hillsburg Hardware Co. using attri- 
butes sampling. Notice that much of the information in Figure 15-8 is consistent 
with information presented in the nonstatistical sampling example illustrated in 
Figure 15-4 (p. 500). The key differences between Figures 15-4 and 15-8 are the audi- 
tor’s judgment about ARO and the initial sample size determined when planning the 
audit, and the calculation of CUER using the actual test results. Notice that the ARO 
judgment is numerical (5 percent) in the attributes sampling application (Figure 15-8). 
The numerical judgment about ARO is considered along with the assessments of 
EPER and TER to determine the initial sample sizes for each attribute using Table 15-8 
(p. 508). The CUER in Figure 15-8 is determined using Table 15-9 (p. 509) based on the 
sample exceptions identified and the actual sample size tested. 


A criticism occasionally leveled against statistical sampling is that it reduces the au- 
ditor’s use of professional judgment. A comparison of the 14 steps discussed in this 
chapter for nonstatistical and attributes sampling shows that this criticism is unwar- 
ranted. For proper application, attributes sampling requires auditors to use profes- 
sional judgment in most of the steps. To select the initial sample size, auditors depend 
primarily on TER and ARO, which require a high level of professional judgment, as 
well as EPER, which requires a careful estimate. Similarly, the final evaluation of the 
adequacy of the entire application of attributes sampling, including the adequacy of 
the sample size, must also be based on high-level professional judgment. 
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Attributes Sampling Data Sheet: Tests of Hillsburg 
Hardware Co.’s Billing Function 


FIGURE 15-8 


Client: Hillsburg Hardware Year-end: 12/31/16 


Audit Area: Tests of Controls and Substantive Tests of Transactions— Pop. size: 5,764 


Billing Function 


Define the objective(s): Examine duplicate sales invoices and related documents to determine 
whether the system has functioned as intended and as described in the audit program. 


Define the population precisely (including stratification, if any): Sales invoices for the 
period 1/1/16 to 10/31/16. First invoice number = 3689. Last invoice number = 9452. 


Define the sampling unit, organization of population items, and random selection procedures: 
Sales invoice number, recorded in the sales journal sequentially; computer generation of random 
numbers. 


Planned Audit Actual Results 


Initial Number | Sample 
ae y sample of exception 
Description of Attributes size exceptions| rate 


|. Existence of the sales invoice number 
in the sales journal (procedure 12). 


. Amount and other data in the master 
file agree with sales journal entry 
(procedure 13a). 


. Amount and other data on the 
duplicate sales invoice agree with the 
sales journal entry (procedure 13b). 


. Evidence that pricing, extensions, and 
footings are checked (initials and 
correct amounts) (procedure 13b). 


. Quantity and other data on the bill of 
lading agree with the duplicate sales 
invoice and sales journal (procedure 13c). 


. Quantity and other data on the sales 
order agree with the duplicate sales 
invoice (procedure 13d). 


» Quantity and other data on the 
customer order agree with the duplicate 
sales invoice (procedure |3e). 


. Credit is approved 
(procedure |3e). 


. For recorded sales in the sales 
journal, the file of supporting 
documents includes a duplicate sales 
invoice, bill of lading, sales order, and 
customer order (procedure 14). 


Intended use of sampling results: 


|. Effect on Audit Plan: Controls tested through attributes |, 3, 6, 7, and 9 can be viewed as 
operating effectively given that TER equals or exceeds CUER. Additional emphasis is needed in 
confirmation, allowance for uncollectible accounts, cutoff tests, and price tests for the financial 
statement audit due to results of tests for attributes 2, 4, 5, and 8. 


2. Effect on Report on Internal Control: CUER exceeds TER for attributes 2, 4, 5, and 8. These 
findings have been communicated to management to allow an opportunity for correction of the 
control deficiency to be made before year-end. If timely correction is made by management, the 
corrected controls will be tested before year-end for purposes of reporting on internal control over 
financial reporting. 


3. Recommendations to Management: Each of the exceptions should be discussed with 
management. Specific recommendations are needed to correct the internal verification of sales 
invoices and to improve the approach to credit approvals. 


CONCEPT CHECK 


|. Explain what is meant by analysis of exceptions and explain its importance. 


2. What are the steps of the audit sampling process that differ across statistical and nonsta- 


tistical sampling approaches? In what ways do they differ? 


Created from undip-ebooks on 2021-07-22 01:55:19. 


teodS Gidhal BunGy PeBtsdn Gob @ Poi, EST OF GONSTREL SAO DeSteBSTANTIVE TESTS OF TRANSACTIONS 


551 


SUMMARY 


In this chapter we described representative samples and discussed the differences between 
statistical and nonstatistical sampling and probabilistic and nonprobabilistic sample 
selection. We also described the 14 steps in sampling for exception rates used in tests of 
controls and substantive tests of transactions. Nonstatistical and statistical attributes sam- 
pling for exception rates were illustrated for the Hillsburg Hardware Co. 


ESSENTIAL TERMS 


Acceptable risk of overreliance 
(ARO)—the risk that the auditor is willing 
to take of accepting a control as effective 
or a rate of monetary misstatements as tol- 
erable when the true population exception 
rate is greater than the tolerable exception 
rate 


Attribute—the characteristic being tested 
for in the population 


Attributes sampling—a statistical, prob- 
abilistic method of sample evaluation that 
results in an estimate of the proportion of 
items in a population containing a charac- 
teristic or attribute of interest 


Audit sampling—testing less than 100 
percent of a population for the purpose of 
making inferences about that population 


Block sample selection—a nonproba- 
bilistic method of sample selection in 
which items are selected in measured 
sequences 


Computed upper exception rate 
(CUER)—the upper limit of the probable 
population exception rate; the highest ex- 
ception rate in the population at a given 
ARO 


Estimated population exception rate 
(EPER)—exception rate the auditor ex- 
pects to find in the population before test- 
ing begins 

Exception rate—the percent of items in 
a population that include deviations in 
prescribed controls or exceptions in mon- 
etary correctness 


Haphazard sample selection—a non- 
probabilistic method of sample selection 
in which items are chosen without regard 
to their size, source, or other distinguish- 
ing characteristics 


Initial sample size—sample size deter- 
mined by professional judgment (nonsta- 
tistical sampling) or by statistical tables 
(attributes sampling) 


Nonprobabilistic sample selection—a 
method of sample selection in which the 
auditor uses professional judgment to se- 
lect items from the population 


Nonsampling risk—the risk that the audi- 
tor fails to identify existing exceptions in 
the sample; nonsampling risk (nonsam- 
pling error) is caused by failure to recognize 
exceptions and by inappropriate or ineffec- 
tive audit procedures 

Nonstatistical sampling—a sampling 
procedure that does not permit the nu- 
merical measurement of the sampling risk 


Occurrence rate—see exception rate 


Probabilistic sample selection—a 
method of selecting a sample such that 
each population item has a known prob- 
ability of being included in the sample 
and the sample is selected by a random 
process 


Random sample—a sample in which ev- 
ery possible combination of elements in 
the population has an equal chance of con- 
stituting the sample 


Representative sample—a sample with 
characteristics the same as those of the 
population 

Sample exception rate (SER)—number 
of exceptions in the sample divided by the 
sample size 

Sampling distribution—a frequency 
distribution of the results of all possible 
samples of a specified size that could be 
obtained from a population containing 
some specific parameters 


Sampling risk—risk of reaching an incor- 
rect conclusion inherent in tests of less 
than the entire population because the 
sample is not representative of the popu- 
lation; sampling risk may be reduced by 
using an increased sample size and an 
appropriate method of selecting sample 
items from the population 
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Statistical sampling—the use of mathe- 
matical measurement techniques to calcu- 
late formal statistical results and quantify 
sampling risk 

Systematic sample selection—a proba- 
bilistic method of sampling in which the 
auditor calculates an interval (the popula- 


and a randomly selected starting point be- 
tween zero and the length of the interval 


Tolerable exception rate (TER)—the 
exception rate that the auditor will permit 
in the population and still be willing to 
conclude the control is operating effec- 
tively and/or the amount of monetary mis- 


statements in the transactions established 
during planning is acceptable 


tion size divided by the number of sample 
items desired) and selects the items for the 
sample based on the size of the interval 


REVIEW QUESTIONS 


15-1 (OBJECTIVE 15-1) Distinguish between sampling risk and nonsampling risk. How can 
each be reduced? 


15-2 (OBJECTIVE 15-2) What are the three main phases of audit sampling? Are these phases 
the same for statistical and nonstatistical sampling methods? 


15-3 (OBJECTIVE 15-2) Explain the difference between probabilistic and nonprobabilistic 
sample selection. 


15-4 (OBJECTIVE 15-3) Explain what is meant by haphazard sample selection and discuss 
one shortcoming of this sample selection method. 


15-5 (OBJECTIVE 15-3) Explain the difference between replacement sampling and nonre- 
placement sampling. Which method do auditors usually follow? Why? 


15-6 (OBJECTIVE 15-3) If an auditor wants to select samples that emphasize population 
items with larger recorded amounts, what are the two commonly used methods? 


15-7 (OBJECTIVE 15-3) Describe systematic sample selection and explain how an auditor 
will select 40 numbers from a population of 2,800 items using this approach. What are the 
advantages and disadvantages of systematic sample selection? 


15-8 (OBJECTIVE 15-3) Distinguish between probabilistic selection and statistical measure- 
ment. State the circumstances under which one can be used without the other. 


15-9 (OBJECTIVE 15-5) Is it correct to comment that audit sampling can be applied to all 
audit procedures in the sales and collection cycle? 


15-10 (OBJECTIVE 15-4) What is meant by an attribute in sampling for tests of controls and 
substantive tests of transactions? What is the source of the attributes that the auditor 
selects? 


15-11 (OBJECTIVE 15-4) Explain the difference between an attribute and an exception condi- 
tion. State the exception condition for the audit procedure: The duplicate sales invoice has 
been initialed, indicating the performance of internal verification. 


15-12 (OBJECTIVE 15-5) Define each of the following terms: 

a. Acceptable risk of overreliance (ARO) 

b. Computed upper exception rate (CUER) 

c. Estimated population exception rate (EPER) 

d. Sample exception rate (SER) 

e. Tolerable exception rate (TER) 
15-13 (OBJECTIVE 15-5) Describe what is meant by a sampling unit. Explain why the sam- 
pling unit for verifying the occurrence of recorded sales differs from the sampling unit for 
testing for the possibility of omitted sales. 
15-14 (OBJECTIVE 15-5) Distinguish between the TER and the CUER. How is each 
determined? 
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15-15 (oBjective 15-5) Identify the factors an auditor uses to decide the appropriate 
TER. Compare the sample size for a TER of 7% with that of 4%, all other factors being 
equal. 
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15-16 (OBJECTIVE 15-5) Explain the implication for placing extensive reliance on internal 
controls on the determination of ARO, sample size and the extent of using substantive 
tests of details of balances. 


15-17 (OBJECTIVE 15-5) State the relationship between the following: 
a. ARO and sample size 
b. Population size and sample size 
c. TER and sample size 
d. EPER and sample size 


15-18 (OBJECTIVE 15-5) When the CUER exceeds the TER, what courses of action are avail- 
able to the auditor? Under what circumstances should each of these be followed? 


15-19 (OBJECTIVE 15-6) Define attributes sampling. For which types of tests do auditors use 
attributes sampling? 


15-20 (OBJECTIVE 15-7) Assume that the auditor has selected 100 sales invoices from a 
population of 100,000 to test for an indication of internal verification of pricing and 
extensions. Determine the CUER at a 10% ARO if four exceptions are found in the sample 
using attributes sampling. Explain the meaning of the statistical results in auditing terms. 


15-21 (OBJECTIVE 15-7) List the major decisions that the auditor must make in using attri- 
butes sampling. State the most important considerations involved in making each decision. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


15-22 (OBJECTIVES 15-5, 15-7) The following items apply to determining sample sizes using 
random sampling from large populations for attributes sampling. Select the most appro- 
priate response for each question. 


a. If all other factors specified in a sampling plan remain constant, changing the ARO 
from 5% to 10% will cause the required sample size to 
(1) increase. (3) decrease. 
(2) remain the same. (4) become indeterminate. 


b. Of the four factors that determine the initial sample size in attributes sampling (pop- 
ulation size, tolerable exception rate, acceptable risk of overreliance, and expected 
population exception rate), which factor has the least effect on sample size? 

(1) Population size 

(2) Expected population exception rate 
(3) Tolerable exception rate 

(4) Acceptable risk of overreliance 


c. The sample size of a test of controls varies inversely with: 


Expected population Tolerable 
exception rate exception rate 
(1) No Yes 
(2) Yes No 
(3) No No 
(4) Yes Yes 


15-23 (OBJECTIVES 15-5, 15-7) The following items concern determining exception rates 
using random sampling from large populations using attributes sampling. Select the best 
response. 


a. The upper precision limit (CUER) in statistical sampling is 
(1) the percentage of items in a sample that possess a particular attribute. 
(2) the percentage of items in a population that possess a particular attribute. 
(3) a statistical measure, at a specified confidence level, of the maximum rate of 
occurrence of an attribute. 
(4) the maximum rate of exception that the auditor would be willing to accept in the 
population without altering the planned reliance on the attribute. 
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b. In addition to evaluating the frequency of deviations in tests of controls, an audi- 
tor should also consider certain qualitative aspects of the deviations. The auditor 
most likely would give additional consideration to the implications of a deviation 
if it was 
(1) the only deviation discovered in the sample. 

(2) identical to a deviation discovered during the prior year’s audit. 
(3) caused by an employee's misunderstanding of instructions. 
(4) initially concealed by a forged document. 


c. An auditor who uses statistical sampling for attributes in testing internal controls 

should reduce the planned reliance on a prescribed control when the 

(1) sample exception rate plus the allowance for sampling risk equals the tolerable rate. 

(2) sample exception rate is less than the expected rate of exception used in planning 
the sample. 

(3) tolerable rate less the allowance for sampling risk exceeds the sample exception 
rate. 

(4) sample exception rate plus the allowance for sampling risk exceeds the tolerable 
rate. 


15-24 (OBJECTIVES 15-1, 15-2, 15-6) The following questions concern audit sampling. Choose 
the best response. 


a. An advantage of statistical sampling over nonstatistical sampling is that statistical 
sampling helps an auditor 
(1) minimize the failure to detect errors and fraud. 
(2) eliminate the risk of nonsampling errors. 
(3) design more effective audit procedures. 
(4) measure the sufficiency of the audit evidence by quantifying sampling risk. 


b. Which of the following best illustrates the concept of sampling risk? 
(1) The documents related to the chosen sample may not be available to the auditor 
for inspection. 
(2) An auditor may fail to recognize errors in the documents from the sample. 
(3) A randomly chosen sample may not be representative of the population as a 
whole for the characteristic of interest. 
(4) An auditor may select audit procedures that are not appropriate to achieve the 
specific objective. 
c. For which of the following tests would an auditor most likely use attributes sampling? 
(1) Selecting accounts receivable for confirmation of account balances. 
(2) Inspecting employee time cards for proper approval by supervisors. 
(3) Making an independent estimate of the amount of a LIFO inventory. 
(4) Examining invoices in support of the valuation of fixed asset additions. 
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DISCUSSION QUESTIONS AND PROBLEMS 


tS 
oN 


Yan |) 
Joy 


Required 


Required 


15-25 (OBJECTIVES 15-1, 15-2, 15-5) Auditing standards provide general guidance to 
auditors regarding audit sampling but do not require statistical versus nonstatistical 
sampling or specify which sampling method auditors should use. Search the Internet 
for “PCAOB Audit Sampling” or go to pcaobus.org to locate the PCAOB’s auditing 
standard related to sampling (AU Section 350) and refer to the standard to answer the 
following questions. 


a. What are the costs and benefits of using statistical sampling versus nonstatistical 
sampling? 

b. What is the relationship among audit risk, sampling risk, and nonsampling risk? 

c. When is sampling not an appropriate method of performing tests of controls (refer to 
paragraph 32 of AU Section 350)? 

d. Define the risk of assessing control risk too low and the risk of assessing control 
risk too high. How do these risks impact the efficiency and effectiveness of the 
audit? 


15-26 (OBJECTIVE 15-3) You are a staff auditor and you are going to develop a sampling plan 
for selecting sales invoice in sales journal. The sales invoices are prenumbered and the 
invoice numbers for this year are as follows: 1st quarter: 1 to 1423; 2nd quarter: 1424 to 
4566; 3rd quarter: 4567 to 6924; 4th quarter: 6925 to 9300. You are required to select 60 
samples from the sales invoices. 


a. Define the sampling unit. 
b. If you choose to use the simple random sample section method, 
(1) Establish a numbering system for the population. 
(2) State the Excel selection formula if you are going to use the Excel RANDBETWEEN 
function in selecting the samples. 
(3) Select the sample items and capture your results in an Excel spreadsheet. 


c. If you choose to use systematic sample selection method, 
(1) Calculate the interval required under such sampling method. 
(2) State the Excel RANDBETWEEN function to determine the first item in the 
sample. 
(3) Assume the first sample item you obtained in (2) above is Invoice #52, determine 
the next four sample items for the population. 
(4) Evaluate the use of systematic sample selection method. 

d. Assume the sales amount during the year are as follows: 1st quarter: $14,230; 2nd 
quarter: $31,430; 3rd quarter, $23,580; 4th quarter: $23,760. Each quarter forms a 
subpopulation. Which quarter will you select the largest number of samples if strati- 
fied sampling method is chosen? Why? 
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15-27 (OBJECTIVES 15-3, 15-5, 15-7) Shield Retail Limited, based in Seoul, is engaging in 
manufacturing of leather goods. Prior to current year, it sold its products locally and 
all sales were recorded in Korean Won. This year, it expanded its business to sell leather 
goods to Asian countries including Japan, Hong Kong and Taiwan which accounts for 
less than 5% of its total sales. 

Shield Retail Limited has been a client of yours for several years and has instituted 
excellent internal controls for sales at your recommendation.Two of the existing controls 
are: (1) credit should be approved by computer by comparison to authorized credit limits 
preset in the system; and (2) sales invoices should be supported by authorized shipping 
documents and approved customer orders. Several customer orders may be combined to 
bill on the sales invoice. The smallest sales invoice number for the year is 53419 and the 
largest is 74243. The smallest customer order number is 69443 and the largest is 94442. 

In the audit of sales, one of the major concerns is the effectiveness of the controls in 
ensuring recorded sales are for shipments actually made. 


a. Is sampling suitable for the audit procedures for testing controls (1) and (2)? State the Required 
audit procedure that can be tested by sampling. 

b. What is the sampling unit for the audit procedure in part a.? 

c. Assume that you expect no exceptions in the sample for the audit procedure in part 
a but are willing to accept a TER of 6%. At a 5% ARO, what is the appropriate sample 
size for the audit test? You may complete this requirement using attributes sampling. 

d. After you determined the initial sample size in part c, you asked your audit trainee 
to select samples to test the internal control. You observed that the audit trainee (i) 
avoided all sales transaction with an amount smaller than 100,000 Korean Won and 
overseas sales; and (ii) used the same samples selected to test the completeness of 
sales to save time. The trainee explained that those sales amounts are not material so 
he selected the samples from local sales with larger amounts. Comment on the selec- 
tion method of the trainee. Further, design a proper random selection plan for select- 
ing sample from population, using systematic sample selection method. 


15-28 (oBjectIVE 15-7) The following is a partial audit program for the audit of sales 
transactions. 


1. Compare current year’s figures with that of prior years to see if there is unusual 
fluctuation. 
2. Review sales order for evidence of approval in relation to credit limits. 
3. Review sales invoices for evidence of clerical accuracy and prices in relation to pric- 
ing polices. 
4. Vouch goods dispatched notes to ensure details are correctly reflected on the sales 
invoices. 
. Vouch goods dispatched notes to ensure that items are properly accounted for in the 
correct period. 
. For cash sales, trace entries from cash book to the sales ledger. 
. Observe the procedures for banking in the cash sales by staff member. 


wm 


. Identify which audit procedures can be tested by using attributes sampling. Required 
. Assume an ARO of 10% and a TER of 7% for tests of controls and 6% for substantive 
tests of transactions. The ERER for tests of controls is 1.25%, and for substantive tests 
of transactions it is 1.0%. What is the initial sample size for each procedure identified 
in part a.? 
c. The auditor follows the initial sample size for the attribute in audit procedure 2 and 
notes two exceptions. Interpret the CUER. 


Te ND 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance S@hreptepods Gidvel Bui PeRtsdn GdE@ POT, ESTIS OFOGOMERRIGLSHAON DeSteEBSTANTIVE TESTS OF TRANSACTIONS 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-07-22 01:55:19. 


@@,.  |5-29 (opjectives 15-5, 15-7) You are going to perform the audit of sales and collection 
cycle for the year ended 31 December 2016 for a private company and are planning how 
to perform the steps for sampling for tests of controls and substantive tests of transactions 
for such cycle. 


Required a. To kick off with the planning process, 
(1) Discuss the objectives of the audit test for the sales and collection cycle. 
(2) One of the audit procedures is to examine sales invoices for credit approval by the 
credit manager. Decide whether audit sampling applies to this audit procedure. 
3) Outline the attribute and exception condition in the audit procedure in (2). 
(4) Define the population and the sampling unit in the audit procedure in (2). 
5) Conclude whether there is any difference in the above 4 steps for nonstatistical 
sampling and attributes sampling. 
b. If nonstatistical sampling is used, 
(1) Discuss whether you are going to set a high, medium or low ARO for the audit 
procedure in part a (2). 
2) List out some factors which may affect your determination of initial sample size. 
f attributes sampling is used, 
1) What changes will be made to your discussion in part b (1)? 
2) Determine the initial sample size to satisfy the auditor’s requirements using 
the attributes sampling from the appropriate part of Table 15-8 (p. 510) for the 
following three cases: 


Cc 


( 
JI 
( 
( 


I 2 3 
ARO (in percent) 5 5 10 
TER (in percent) 5 4 4 
EPER (in percent) 1 1 il 


(3) Isthere any difference in sample selection for attributes and nonstatistical sampling? 


If SER exceeds EPER used in planning the sample, what can you conclude? Discuss your 
possible actions. 


15-30 (OBJECTIVES 15-5, 15-7) The questions below relate to determining the CUER in audit 
sampling for tests of controls, using the following table: 


I 2 3 4 5 6 7 8 
ARO (in percent) 5 5 10 5 5 5 5 5 
Population size 50,000 500 5,000 5,000 5,000 900 5,000 500 
Sample size 200 100 200 200 50 100 100. 25 
Number of exceptions 4 2 4 4 1 10 0 0 
Required a. Using nonstatistical sampling, calculate TER — SER for each of columns 1 through 


8 and evaluate whether or not the calculated allowance for sampling risk is large 
enough to accept the population. Assume that TER is 5% for each column. 

b. For each of columns 1 through 8, determine CUER using attributes sampling from 
the appropriate part of Table 15-9 (p. 509). 

c. Using your understanding of the relationship between the four preceding factors and 
the CUER, state the effect on the CUER (increase or decrease) of changing each of the 
following factors while the other three are held constant: 

(1) A decrease in the ARO 

(2) A decrease in the population size 

(3) A decrease in the sample size 

(4) A decrease in the number of exceptions in the sample 

d. Compare your answers in part c. with the results you determined in part a. (nonsta- 
tistical sampling) or part b. (attributes sampling). Which of the factors appears to 
have the greatest effect on the CUER? Which one appears to have the least effect? 

e. Why is it necessary to compare the CUER with the TER? 
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15-31 (OBJECTIVE 15-7) You are going to review the work done by your audit staff regarding 
the sampling results for four considerably large populations for the sales and collection 


cycle: 

I 2 3 4 
EPER (in percent) 1 it 1 0 
TER (in percent) 5 5 20 5 
ARO (in percent) 10 5 5 5 
Actual sample size 50 50 50 50 
Actual number of exceptions in the 2 3 1 0 
sample 


a. Without referring to the attributes sampling tables, highlight any abnormali- Required 
ties you preliminarily noted in the work of your audit staff in determining the 
sample size. 

b. Referring to the attributes sampling tables in Table 15-8 to confirm whether the 
sample size determined by your audit staff is (i) appropriate, (ii) too large, or (iii) too 
small. Discuss the implications of selecting either a larger or smaller sample size than 
those determined using the tables. 

c. You noted that the audit staff ignored the size of the population in determining the 
sample size. Is he correct? 

d. Determine the SER and CUER for each population. Interpret your results. Using 
Population 4 as an illustration, how will you instruct your audit staff to respond to 
the result. 


Your audit staff drew the following conclusion for the results of population 3: “The CUER 
is determined to be 9.2 percent. If 100 percent of the population were tested, the true 
exception rate would be 9.2 percent.” Comment on this conclusion. 


15-32 (OBJECTIVES 15-5, 15-7) Annie Zhao is using attributes sampling in testing controls 
over sales transactions. She is testing five attributes related to sales invoices using an 
ARO of 5% (confidence level of 95%), and zero expected deviations for each attribute 
based on prior experience with the client. Annie has determined that the tolerable 
exception rate for each attribute is 5%. Using her firm’s audit software, she entered the 
population size (number of invoices), desired confidence level, TER, and EPER, and 
determined a sample size of 60 invoices. She used the audit software to select a random 
sample of invoices and performed the control tests. She found zero deviations for four 
of the five attributes and concluded that the control can be relied upon for each of 
those attributes. For the remaining attribute, she found one control deviation. In pro- 
jecting the sample results to the population for the attribute with one control deviation 
identified, Annie entered the confidence level, sample size, and one deviation into the 
audit software sampling module and determined that the computed upper exception 
rate for the attribute is 7.92%. 


a. Explain how Annie should interpret the CUER of 7.92%. Required 
b. What should Annie conclude about the effectiveness of the control attribute with 
one identified deviation? 
c. What are the alternatives for Annie if she concludes the control cannot be relied 
upon? 
d. Assume Annie discusses the deviation with the controller and learns this deviation 
occurred while a temporary employee was covering for the regular clerk, who was 
on vacation. Would this information be relevant in determining which of the alterna- 
tives in answer c. would be the most appropriate response? What testing and docu- 
mentation would be needed to conclude this control can be relied upon? 
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the tests of controls and substantive tests of transactions for sales transactions [see 
Figure 15-2 (p. 494) for examples of the types of attributes tested]. Based on her knowl- 
edge of Mercury’s operations in the area of sales, she decides that the EPER is likely 
to be 3% and that she is willing to accept a 5% risk that the true population exception 
rate is not greater than 6%. Given this information, Mason selects a random sample 
of 150 sales invoices from the 5,000 generated during the year and examines them for 
exceptions. She notes the following exceptions in her audit schedules. There is no other 


documentation. 
Invoice 
No. Comment 
5028 Sales invoice was originally footed incorrectly but was corrected by client 
before the bill was sent out. 
6791 Voided sales invoice examined by auditor. 
6810 Shipping document for a sale of merchandise could not be located. 
7364 Sales invoice for $2,875 has not been collected and is 6 months past due. 
7625 Client unable to locate the duplicate sales invoice. 
8431 Invoice was dated 3 days later than the date entered in the sales journal. 
8528 Customer order is not attached to the duplicate sales invoice. 


8566 Billing is for $100 less than it should be due to an unintentional pricing 
error. No indication of internal verification is included on the invoice. 


8780 Client unable to locate the duplicate sales invoice. 
9169 Credit not authorized, but the sale was for only $7.65. 
9974 Lack of indication of internal verification of price extensions and 


postings of sales invoice. 


Required a. Which of the preceding should be defined as an exception? 

b. Explain why it is inappropriate to set a single acceptable TER and EPER for the com- 
bined exceptions. 

c. Calculate SER for each attribute tested in the population. (You must decide which at- 
tributes should be combined, which should be kept separate, and which exceptions 
are actual exceptions before you can calculate SER.) 

d. Calculate TER — SER for each attribute and evaluate whether the calculated allowance 
for sampling risk is sufficiently large given the 5% ARO. Assume TER is 6% for each 
attribute. 

e. State the appropriate analysis of exceptions for each of the exceptions in the sample, 
including additional procedures to be performed. 

15-34 (OBJECTIVES 15-6, 15-7) The sampling data sheet below is missing selected informa- 
tion for six attributes involving tests of transactions for the sales and collection cycle. 


Planned Audit Actual Results 
Initial 
Sample Sample Number of 

Attributes EPER TER ARO Size Size Exceptions CUER 
Attribute 1 0% 6% 5% 49 50 1 
Attribute 2 0.50% 5% 10% — 80 0 2.9% 
Attribute 3 1% 10% 55 55 1 6.9% 
Attribute 4 1% 6% 5% 78 80 a 5.8% 
Attribute 5 0% 4% 74 80 0 3.7% 
Attribute 6 0.50% 6% 10% 64 — 2 7.5% 
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a. Use Table 15-8 (p. 508) and Table 15-9 (p. 509) to complete the missing information Required 
for each attribute. 

b. For which attributes are the sample results unacceptable? 

c. Compare attributes 1 and 3. Why does attribute 1 have the smaller sample size? 

d. Compare attributes 2 and 5. Why is CUER higher for attribute 5? 


CASE 


15-35 (OBJECTIVES 15-4, 15-5, 15-7) Jean-Paul Dupont, CPA is conducting a test of sales for 9 
months of the year ended December 31, 2011, for the audit of Garnier Mineral Enterprises. 
Included among her audit procedures are the following: 


1. Foot and cross-foot the sales journal and trace the balance to the general ledger. 

2. Review all sales transactions for reasonableness. 

3. Select a sample of recorded sales from the sales journal and trace the customer name 
and amounts to duplicate sales invoices and the related shipping document. 

4. Select a sample of shipping document numbers and perform the following tests: 

(a) Trace the shipping document to the related duplicate sales invoice. 

(b) Examine the duplicate sales invoice to determine whether copies of the shipping 
document, shipping order, and customer order are attached. 

(c) Examine the shipping order for an authorized credit approval. 

(d) Examine the duplicate sales invoice for an indication of internal verification of 
quantity, price, extensions, footings, and trace the balance to the accounts receiv- 
able master file. 

(e) Compare the price on the duplicate sales invoice with the approved price list and 
the quantity with the shipping document. 

(f) Trace the balance in the duplicate sales invoice to the sales journal and accounts 
receivable master file for customer name, amount, and date. 


a. For which of these procedures can audit sampling for exceptions be conveniently Required 
used? 

b. Considering the audit procedures Wever developed, what is the most appropriate 
sampling unit for conducting most of the audit sampling tests? 

c. Set up a sampling data sheet using attributes or nonstatistical sampling. For all tests 
of controls, assume a TER rate of 5% and an EPER of 1%. For all substantive tests of 
transactions, use a 4% TER and a 0% EPER. Use a 10% ARACR for all tests. 


INTEGRATED CASE APPLICATION — 
PINNACLE MANUFACTURING: PART VI 


15-36 (OBJECTIVES 15-3, 15-5, 15-7) In Part V of the Pinnacle Manufacturing case, you pre- 
pared a performance format audit program. In Part VI, sample sizes will be determined by 
using nonstatistical or attributes sampling, and the results of the tests will be evaluated. You 
should use nonstatistical sampling unless your professor tells you to use statistical sampling. 

After reviewing the audit program you created in Part V, the audit manager decided 
to make some modifications. You agreed with her changes. The modified program is in- 
cluded in Figure 15-9 (p. 522). 

The audit manager has decided that the tests should be performed for the first 10 months 
including the month ended 10/31/16. You determine that document numbers are as follows: 
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Document First number Last number 
Voucher 6734 33722 
Receiving report 9315 23108 
Check 12376 37318 
Purchase order 3162 17200 
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Required a. Using the audit program in Figure 15-9, prepare a nonstatistical sampling data sheet 
for acquisitions following the format in Figure 15-2 (p. 494). Prepare all parts of the 
sampling data sheet except those that are blank in Figure 15-2. A formatted sampling 
data sheet is available online. Use the following guidelines: 

(1) Use only one sampling data sheet. 

(2) Select the sampling unit that will permit you to perform the most acquisition 
audit procedures on the audit program. 

(3) Include all audit procedures on the audit program that are consistent with the 
sampling unit you selected. 

(4) Decide EPER, TER, and ARO for each attribute. Consider prior-year results for 
EPER. (See Figure 12-12 on p. 406 in Part IV.) Use your judgment for the other 
two factors. 

(5) Decide the sample size for each attribute. 

b. Do the same thing for cash disbursements that you did in requirement a. for acqui- 
sitions. You will not complete the actual results portion of the cash disbursements 
sampling data sheet. 

c. For acquisitions only, use an Excel spreadsheet to select random numbers for the 
largest sample size in the acquisitions sampling data sheet. Include the numbers in 
both random order and sorted numbers, from low to high. Document how you se- 
lected the numbers. 

d. Assume that you performed all audit procedures included in Figure 15-9 using the 
sample sizes in part (5) of requirement a. The only exceptions found when you 


FIGURE 15-9 Audit Program for Acquisitions and Cash Disbursements 


General 
|. Discuss the following items with client personnel and observe activities: 
a. Segregation of duties 
b. Use of an adequate chart of accounts 
c. Monthly reconciliation of accounts payable master file with the general ledger 
. Foot acquisitions and cash disbursements journals for a test month and trace postings to the 
general ledger. 
. Examine file of completed bank reconciliations. 
4. Account for a sequence of cancelled checks. 
. Reconcile recorded cash disbursements with cash disbursements on the bank statement for a test 
month. 


Acquisitions 
6. Trace entries in the acquisitions journal to related vendors’ invoices, receiving reports, and 
purchase orders. 
Examine indication of internal verification of dates, unit costs, prices, extensions and footings, 
account classifications, recording in the journal, and posting and summarization. 
Examine supporting documents for propriety. 
Compare prices on vendors’ invoices with approved price limits established by management. 
. Recompute information on vendors’ invoices. 
Examine vendors’ invoices for proper account classification. 
Compare dates of recorded acquisitions with dates on receiving reports. 
Examine voucher document package for indication of internal verification. 
7: Account for a sequence of purchase orders and voucher document packages. 
8. Trace a sample of receiving reports to the acquisitions journal. 


Cash Disbursements 
9. Select a sample of cancelled checks. 

a. Trace cancelled check to the related cash disbursements journal entry and date. 
Examine check for signature, proper endorsement, and cancellation by the bank. 
Compare date on cancelled check with bank cancellation date. 

. Recompute cash discounts. 
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performed the tests include the following: two missing indications of internal veri- 
fication on a vendor’s invoice, one acquisition of inventory transaction recorded for 
$2,000 more than the amount stated on the vendor's invoice (the vendor was also 
overpaid by $2,000), and two vendors’ invoices recorded as acquisitions several days 
after the receipt of the goods. Complete the sampling data sheet prepared in require- 
ment a. Use Figure 15-4 (p. 500) as a frame of reference for completing the sampling 
data sheet. 


ACL PROBLEM 


15-37 (OBJECTIVE 15-7) This problem requires the use of ACL software, which can be ACD 
accessed through the textbook Web site. Information about downloading and using : 

ACL and the commands used in this problem can also be found on the textbook Web 

site. You should read all of the reference material, especially the material on sampling, 

to answer questions a. through f. For this problem, use the “Invoices” file in the “Sales 

and Collection” subfolder under tables in the ACL_Rockwood project. This file contains 

information on sales invoices generated during calendar year 2014, including those that 

have been paid versus those still outstanding. Suggested commands, where applicable, are 

indicated at the end of the problem requirements. 


a. How many records are included in the Invoices file as noted at the bottom of the Required 
screen? 

b. Using the Invoices file, calculate the sample size and sampling interval for a record 
sample to be used for tests of transactions. Use a confidence level of 90%, upper 
error limit of 6% (tolerable error rate or precision), and expected error rate of zero. 
(Sampling/Calculate Sample Size; select “Record” radio button.) 

c. What is the sample size if you increase the confidence level to 95% and do not change 
the other sampling parameters? What is the sample size if you increase the upper er- 
ror limit to 8%, with a confidence level of 90% and expected error rate of zero? 

d. Select the sample based on the sample size determined in part b. (Sampling /Sample; 
select the “Record” radio button under “Sample type.” For “Sample Parameters” select 
the “Random” radio button and sample size you determined in part b., use a seed of 
5.) Save the file using a naming convention such as invoice_sample. 

e. What is the invoice number of the largest invoice selected for testing? Does your sam- 
pling plan consider invoice amount? (Quick Sort) 

f. Assume you found one error in the sample. Without using ACL, will your results 
be acceptable? Explain. Now use ACL to calculate the upper error limit frequency. 
(Sampling/Evaluate Error; input the confidence level, sample size, and one error.) 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


16-1 Describe the methodology 
for designing tests of details 
of balances using the audit 
risk model. 

16-2 Design and perform 
substantive analytical 
procedures for accounts in 
the sales and collection cycle. 

16-3 Design and perform tests 
of details of balances for 
accounts receivable. 

16-4 Obtain and evaluate accounts 
receivable confirmations. 

16-5 Design audit procedures 
for the audit of accounts 
receivable, using an evidence- 


planning worksheet as a guide. 


COMPLETING THE TESTS 


IN THE SALES AND 
COLLECTION CYCLE: 


@ ACCOUNTS RECEIVABLE 


Things Aren’t Always As They Appear 


The Wilsall Trading Company has been in operation for 10 years and has always presented solid 
financial statements. The same CPA firm has performed the audit since the inception of Wilsall 
and has become very familiar with the company, its operations, and its management. In 2011, the 
CPA firm decided (based on the risk assessment) to send a total of 30 positive confirmations to 
selected companies listed as accounts receivable on the balance sheet. The senior auditor was 
> put in charge of mailing and fol- 
VB THLE it A lowing up on the confirmations. 
Psa After three weeks, the busy sea- 
pee eg son was now in full swing and 
only 5 of the confirmations had 
been received. The senior was 
very busy with other work and 
grumbled to herself, “what a 
pain, no one ever returns these 
| eo. things...and if they do, they are 
i filled out incorrectly! | don’t have 
\\ os time for all of this follow up.” 
\\ \ = The senior enlisted the help of 
the staff auditor on the engage- 
ment, who assisted with the follow up of confirmations. The staff auditor didn’t really have a 
good understanding of the process and did not have much supervision because the senior was so 
busy. As the weeks rolled on, the staff auditor realized that there were a few confirmations that 
were just never going to come back and—figuring they were immaterial amounts—she made a 
note about the two missing confirmations and marked the workpaper as complete. The other 
testing areas proceeded normally, and none of the reviewers noticed the note about the missing 
A/R confirmations on the workpaper. Wilsall Trading Company showed positive results as usual 
and the CPA firm issued an unqualified opinion. Three months later, Wilsall Trading Company 
found itself in dire financial straits and began looking frantically for outside financing. Owners 
of the company wondered how they had ended up in this situation, considering the results 
they had showed at year-end. The CEO personally looked into the financial results and through 
intense questioning found that the Controller and the CFO had conspired to artificially inflate 
the results of the company by creating fictitious accounts receivable from fictitious companies 
which were written off after year-end by credit memos. Both the Controller and CFO were fired 
immediately and the CEO went after the CPA firm next. Was there something else the CPA firm 
could have done to detect this fraud during the audit? Granted, fraud committed with collusion 
between management can be hard to detect, but surely there must have been something else the 
CPA firm could have done, right? 
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In the preceding two chapters, we examined tests of controls and substantive tests of transactions for the sales and 
collection cycle. Both types of tests are part of phase II of the audit process. We now move to phase III and turn our 
attention to substantive analytical procedures and tests of details of balances for the sales and collection cycle. 

This chapter shows that it is essential for auditors to select the appropriate evidence to verify the account bal- 
ances in the sales and collection cycle, after considering performance materiality, identifying significant risks, 
performing risk assessment procedures to assess inherent and control risks, and performing tests of controls and 
substantive tests of transactions. This chapter examines designing substantive analytical procedures and tests of 
details of balances for the two key balance sheet accounts in the cycle: accounts receivable and the allowance for 
uncollectible accounts. 


METHODOLOGY FOR DESIGNING TESTS 
OF DETAILS OF BALANCES 


Figure 16-1 shows the methodology auditors follow in designing the appropriate tests ‘OBJECTIVE 16-1 0 


of details of balances for accounts receivable. This methodology was introduced in po. cribe the methodolo 
: ; By 
Chapter 13 and is now applied to the audit of accounts receivable. Joubseiinese aide hoi 
The methodology shown in Figure 16-1 relates directly to the evidence-planning _ balances using the audit risk 
worksheet first introduced in Chapter 9. The worksheet was partially completed on model. 
page 282 in that chapter for materiality and risk considerations (part of phase I) and was 
further completed as a part of the study of tests of controls and substantive tests of trans- 
actions on page 504 in Chapter 15 (phase II). We will continue to complete the worksheet 
as we proceed through phase III in this chapter. For now, you might want to look at the 
example of a completed worksheet in Figure 16-7 on page 544 to see what the completed 
worksheet looks like, to provide you an overview of the focus of this chapter. 


Methodology for Designing Tests of Details of 


FIGURE te) Balances for Accounts Receivable 


Identify significant risks and 
assess risk of material 
misstatement for accounts 
receivable 


2, 


Set performance materiality 
for accounts receivable 


Assess control risk for sales 
and collection cycle 


eel 


Design and perform tests of 
controls and substantive tests 
of transactions for 
sales and collection cycle 


———— 


Phase I 


Phase | 


Phase Il 


Design and perform substantive 
analytical procedures for Phase Ill 
accounts receivable balance 


Audit procedures 
Design tests of details of 


accounts receivable balance Sample size 
to satisfy balance-related 
audit objectives 


Phase III 


Items to select 


Timing 
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The appropriate evidence to be obtained from tests of details of balances must 
be decided on an objective-by-objective basis. Because several interactions affect the 
need for evidence from tests of details of balances, this audit decision can be complex. 
For example, the auditor must evaluate the potential for fraud and also consider inher- 
ent risk, which may vary by objective, as well as the results of tests of controls and the 
related control risk assessment, which also may vary by objective. The auditor must 
also consider the results of substantive tests of sales and cash receipts. 

In designing tests of details of balances for accounts receivable, auditors must sat- 
isfy each of the eight balance-related audit objectives first discussed on pages 162-165 
in Chapter 6. These eight general objectives are the same for all accounts. Specifically 
applied to accounts receivable, they are called accounts receivable balance-related 
audit objectives and are as follows:! 


1. Accounts receivable in the aged trial balance agree with related master file 
amounts, and the total is correctly added and agrees with the general ledger. 
(Detail tie-in) 

Recorded accounts receivable exist. (Existence) 

Existing accounts receivable are included. (Completeness) 

Accounts receivable are accurate. (Accuracy) 

Accounts receivable are correctly classified. (Classification) 

Cutoff for accounts receivable is correct. (Cutoff) 

Accounts receivable is stated at realizable value. (Realizable value) 

8. The client has rights to accounts receivable. (Rights) 


NAMA WN 


The columns in the evidence-planning worksheet in Figure 16-7 (p. 544) include 
the balance-related audit objectives. The auditor uses the factors in the rows to aid in 
assessing planned detection risk for accounts receivable, by objective. 

Students of auditing need to understand the entire methodology for designing 
tests of details of balances for accounts receivable and all other accounts. The following 
overview explains the methodology. Portions of the discussion are a review of infor- 
mation studied in earlier chapters, but they are intended to aid in understanding the 
relationship of each part of Figure 16-1 (p. 525) to designing tests of details of balances. 


Tests of accounts receivable are based on the auditor’s risk assessment procedures that 
provide an understanding of the client’s business and industry, discussed in Chapter 8. 
As part of this understanding, the auditor studies the client’s industry and external 
environment and evaluates management objectives and business processes to identify 
significant client business risks that could affect the financial statements, including 
accounts receivable. As part of gaining this understanding, auditors assess inherent 
risk for each objective for an account, such as accounts receivable, considering client 
business risk and the nature of the client and industry. For example, as a result of 
adverse changes in the industry’s economic environment, the auditor may increase 
inherent risk for net realizable value of accounts receivable. The auditor also performs 
preliminary analytical procedures that may indicate increased risk of misstatements 
in accounts receivable. 

As part of the assessment of the risk of material misstatement, the auditor deter- 
mines whether any of the risks identified are a significant risk. Significant risks rep- 
resent an identified and assessed risk of material misstatement that, in the auditor’s 
professional judgment, requires special audit consideration. Identifying significant 
risks as part of planning is important, given auditing standards require the auditor to 
obtain an understanding of the entity’s controls relevant to significant risks in order 
to evaluate the design and implementation of those controls, and the auditor must 
perform substantive tests related to assertions deemed to have significant risks. 


' Detail tie-in is included as the first objective here, compared with being objective 6 in Chapter 6, because tests for detail 
tie-in are normally done first. 


Arens, Alvin, et3i@%uditing and AssuRaré Sewvide3PEBGOKT Dds GEtibH PodtID FAP ROG ASGITED DHE SADE KOO taECTION CYCLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-22 01:55:19. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance St 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


For most audits, revenue recognition is considered to be a significant risk 
because auditing standards require the auditor to presume that revenue recognition 
is a specific fraud risk. When sales are made on account, the double-entry nature of 
accounting means this presumption typically also affects the auditor’s assessment of 
inherent risk for the following accounts receivable balance-related objectives: exis- 
tence, sales cutoff, and sales returns and allowances cutoff. It is common for clients 
to misstate cutoff either by error or through fraud. It is also common for clients to 
unintentionally or fraudulently misstate the allowance for uncollectible accounts 
(realizable value) because of the difficulty in determining the correct balance. Thus, 
the auditor may also identify the risk of misstatement related to the realizable value 
balance-related objective for accounts receivable as a significant risk. 


As studied in Chapter 8, the auditor first decides the preliminary judgment about 
materiality for the entire financial statements, and then allocates the preliminary 
judgment amount to each significant balance sheet account, including accounts 
receivable. This allocation is called setting performance materiality. Accounts receivable is 
typically one of the most material accounts in the financial statements for companies 
that sell on credit. For even small accounts receivable balances, the transactions in 
the sales and collection cycle that affect the balance in accounts receivable are almost 
certain to be highly significant. 


Internal controls over sales and cash receipts and the related accounts receivable are 
at least reasonably effective for most companies because management is concerned 
with keeping accurate records to maintain good relations with customers. Auditors 
are especially concerned with three aspects of internal controls: 


1. Controls that prevent or detect embezzlements 
2. Controls over cutoff 
3. Controls related to the allowance for uncollectible accounts 


Earlier, we studied transaction-related audit objectives in the sales and collection 
cycle (see Chapter 14). The auditor must relate control risk for transaction-related audit 
objectives to balance-related audit objectives in deciding planned detection risk and 
planned evidence for tests of details of balances. For the most part, this relationship is 
straightforward. Figure 16-2 (p. 528) shows the relationship for the two primary classes of 
transactions in the sales and collection cycle. For example, assume the auditor concluded 
that control risk for both sales and cash receipts transactions is low for the accuracy 
transaction-related audit objective. The auditor can therefore conclude that controls 
for the accuracy balance-related audit objective for accounts receivable are effective 
because the only transactions that affect accounts receivable are sales and cash receipts. 
Of course, if sales returns and allowances and write-off of uncollectible accounts receiv- 
able are significant, assessed control risk must also be considered for these two classes of 
transactions. 

Two aspects of the relationships in Figure 16-2 deserve special mention: 

1. For sales, the occurrence transaction-related audit objective affects the exis- 
tence balance-related audit objective. For cash receipts, however, the occurrence 
transaction-related audit objective affects the completeness balance-related audit 
objective. A similar relationship exists for the completeness transaction-related 
audit objective. The reason for this somewhat surprising conclusion is that an 
increase in sales increases accounts receivable, but an increase in cash receipts 
decreases accounts receivable. For example, recording a sale that did not occur 
violates the occurrence transaction-related audit objective and existence balance- 
related audit objective (both overstatements). Recording a cash receipt that did 
not occur violates the occurrence transaction-related audit objective for cash 
receipts, but it also violates the completeness balance-related audit objective for 
accounts receivable because a receivable that is still outstanding is no longer in- 
cluded in the records. 
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2. The realizable value and rights accounts receivable balance-related audit objec- 
tives, as well as the presentation and disclosure-related objectives, are not affected 
by assessed control risk for classes of transactions. To assess control risk below 
the maximum for these objectives, the auditor must identify and test separate 
controls that support those objectives. 


Figure 16-7 (p. 544) includes three rows for assessed control risk: one for sales, one 
for cash receipts, and one for additional controls related to the accounts receivable bal- 
ance. The source of each control risk for sales and cash receipts is the control risk matrix 
assuming that the tests of controls results supported the original assessment. The audi- 
tor makes a separate assessment of control risk for objectives that are related only to the 
accounts receivable balance or to presentation and disclosure audit objectives. 


Chapters 14 and 15 covered designing audit procedures for tests of controls and sub- 
stantive tests of transactions, deciding sample size, and evaluating the results of those 
tests. The results of the tests of controls determine whether assessed control risk for 
sales and cash receipts needs to be revised. Auditors use the results of the substan- 
tive tests of transactions to determine the extent to which planned detection risk is 
satisfied for each accounts receivable balance-related audit objective. The evidence- 
planning worksheet in Figure 16-7 shows three rows for control risk and two for sub- 
stantive tests of transactions, one for sales, and the other for cash receipts. 


Design and Perform 
Tests of Controls and 
Substantive Tests of 
Transactions (Phase Il) 


Relationship Between Transaction-Related Audit Objectives for the Sales and 


elated oer Collection Cycle and Balance-Related Audit Objectives for Accounts Receivable 
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As discussed in Chapter 7, analytical procedures are often done during three phases 
of the audit: during planning, when performing detailed tests, and as a part of com- 
pleting the audit. This chapter covers planning analytical procedures and substantive 
analytical procedures done when performing detailed tests for accounts in the sales 


and collection cycle. OBJECTIVE 16-2 
Most substantive analytical procedures performed during the detailed testing 


phase are done after the balance sheet date but before tests of details of balances. It Design and perform substantive 
analytical procedures for 


makes little sense to perform extensive substantive analytical procedures before the counts in the sales and 
client has recorded all transactions for the year and finalized the financial statements. collection cycle. 

Auditors perform both planning and substantive analytical procedures for the 
entire sales and collection cycle, not just accounts receivable. This is necessary because 
of the close relationship between income statement and balance sheet accounts. If the 
auditor identifies a possible misstatement in sales or sales returns and allowances using 
analytical procedures, accounts receivable will likely be the offsetting misstatement. 

Table 16-1 presents examples of ratios and comparisons for the sales and col- 
lection cycle and potential misstatements that analytical procedures may uncover. 
Although Table 16-1 focuses on the comparison of current year results with previous 
years, auditors also consider current year results compared to budgets and industry 
trends. Observe in the “possible misstatement” column how both balance sheet and 
income statement accounts are affected. For example, when the auditor performs ana- 
lytical procedures for sales, evidence is being obtained about both sales and accounts 
receivable. Auditors may use the same types of ratios and comparisons shown in 
Table 16-1 as planning analytical procedures or as substantive analytical procedures. 
However, while planning analytical procedures might be based on interim data or 
aggregate data, such as company-wide sales for the first six months of the fiscal 
period, substantive analytical procedures will likely use disaggregate data, such as 
sales amounts by month and product based on data for the full year under audit. 

In addition to the analytical procedures in Table 16-1, auditors should also review 
accounts receivable for large and unusual amounts, such as large balances; accounts 


Design and Perform 
Substantive Analytical 
Procedures (Phase III) 


VRS Analytical Procedures for the Sales and Collection Cycle 


Analytical Procedure Possible Misstatement 
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Compare gross margin percentage with previous years Overstatement or understatement of sales and 
(by product line). accounts receivable. 

Compare sales by month (by product line) over time. Overstatement or understatement of sales and 

accounts receivable. 

Compare sales returns and allowances as a percentage of Overstatement or understatement of sales returns 
gross sales with previous years (by product line). and allowances and accounts receivable. 

Compare individual customer balances over a stated Misstatements in accounts receivable and related 
amount with previous years. income statement accounts. 

Compare bad debt expense as a percentage of gross sales Uncollectible accounts receivable that have not been 
with previous years. provided for. 

Compare number of days that accounts receivable are Overstatement or understatement of allowance for 
outstanding with previous years and related turnover uncollectible accounts and bad debt expense; also 
of accounts receivable. may indicate fictitious accounts receivable. 

Compare aging categories as a percentage of accounts Overstatement or understatement of allowance for 
receivable with previous years. uncollectible accounts and bad debt expense. 

Compare allowance for uncollectible accounts as a Overstatement or understatement of allowance for 
percentage of accounts receivable with previous years. uncollectible accounts and bad debt expense. 

Compare write-off of uncollectible accounts as Overstatement or understatement of allowance for 
a percentage of total accounts receivable with uncollectible accounts and bad debt expense. 
previous years. 
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i) 8 Sya Comparative Information for Hillsburg Hardware Co.— Sales and Collection Cycle 
Amount 
12-31-16 Percent Change 12-31-15 Percent Change 12-31-14 
(in Thousands) 2015-2016 (in Thousands) 2014-2015 (in Thousands) 
Sales $144,328 9.0% $132,421 7.0% $123,737 
Sales returns and allowances 1,242 3.9 USE) 13.6 1,052 
Gross margin 39,845 9.6 36,350 7.0 33,961 
Accounts receivable 20,197 15.3 17,521 3.3 16,961 
Allowance for uncollectible accounts 1,240 (5.4) 1,311 25 1,079 
Bad debt expense 3,323 (2.1) 3,394 We) 3,162 
Total current assets 51,027 723} 49,895 5 49,157 
Total assets 61,367 0.9 60,79 | 1.8 59,696 
Net earnings before taxes 5,681 21.9 4,659 39.0 3,351 
Number of accounts receivable 258 16.7 221 Spl 209 
Number of accounts receivable with 37 15.6 32 6.7 30 
balances over $100,000 
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that have been outstanding for a long time; receivables from affiliated companies, 
officers, directors, and other related parties; and credit balances. To identify these 
amounts, the auditor should review the listing of accounts (aged trial balance) at the 
balance sheet date, or use audit software, to determine which accounts should be 
investigated further. 

To illustrate the use of substantive analytical procedures during the detailed test- 
ing phase, Table 16-2 presents comparative trial balance information for the sales and 
collection cycle information for Hillsburg Hardware Co. Building on that information, 
Table 16-3 demonstrates several substantive analytical procedures. The only poten- 
tial misstatement indicated in these two tables is in the allowance for uncollectible 
accounts. This is indicated by the ratio of the allowance to accounts receivable, as 
explained at the bottom of Table 16-3. 

The auditor's conclusions about substantive analytical procedures for the 
sales and collection cycle are incorporated in the evidence-planning worksheet in 
Figure 16-7 (p. 544) in the third row from the bottom. Because analytical procedures 


Substantive Analytical Procedures for Hillsburg Hardware Co.— 
TABLE 16-3 a 
Sales and Collection Cycle 
12-31-16 12-31-14 
Gross margin/net sales 27.85% 27.70% 27.68% 
Sales returns and allowances/gross sales 0.9% 0.9% 0.9% 
Bad debt expense/net sales 2.3% 2.6% 2.6% 
Allowance for uncollectible accounts/ 6.1% 7.5% 6.4% 
accounts receivable 

Number of days receivables outstanding 48.09 47.96 49.32 
Net accounts receivable/total current assets 37.2% 32.5% 32.3% 


*Based on year-end accounts receivable only. 

Comment: Allowance as a percentage of accounts receivable has declined from 6.4% to 6.1%. Number of days receivables 
outstanding and economic conditions do not justify this change. Potential misstatement is approximately $60,000 
($20,197,000 x [.064 — .061)). 
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are substantive tests, they reduce the extent to which the auditor needs to perform 
detailed tests of balances, ifthe analytical procedure results are favorable. 

When substantive analytical procedures in the sales and collection cycle uncover 
unusual fluctuations, however, the auditor should make additional inquiries of 
management. Management’s responses should be critically evaluated to determine 
whether they adequately explain the unusual fluctuations and whether they are sup- 
ported by corroborating evidence. 


The appropriate tests of details of balances depend on the factors listed in the evi- 
dence-planning worksheet in Figure 16-7 (p. 544). Planned detection risk for each 
accounts receivable balance-related audit objective is shown in the second row from 
the bottom. It is a subjective decision made by auditors after they have combined the 
conclusions reached about each of the factors listed above that row. 

The task of combining the factors that determine planned detection risk is com- 
plex because the measurement for each factor is imprecise and the appropriate weight 
given to each factor is highly subjective. Conversely, the relationship between each 
factor and planned detection risk is well established. For example, auditors know that 
a high inherent risk or control risk decreases planned detection risk and increases 
planned substantive tests, whereas good results of substantive tests of transactions 
increase planned detection risk and decrease other planned substantive tests. 

The bottom row in Figure 16-7 shows the planned audit evidence for tests of details 
of balances for accounts receivable by objective. As we’ve discussed, planned audit 
evidence is the inverse of planned detection risk. After deciding whether planned audit 
evidence for a given objective is high, medium, or low, the auditor must then decide on 
the appropriate audit procedures, sample size, items to select, and timing. 

For the remainder of this chapter, we will discuss how auditors decide on the spe- 
cific audit procedures and their timing for auditing accounts receivable. In Chapter 17, 
we'll address sample size and selecting items from the population for testing. 


Design and Perform 
Tests of Details of 
Accounts Receivable 
Balance (Phase III) 


DESIGNING TESTS OF DETAILS OF BALANCES 


Even though auditors emphasize balance sheet accounts in tests of details of balances, 
they are not ignoring income statement accounts because the income statement ac- 
counts are tested as a by-product of the balance sheet tests. For example, if the auditor 
confirms accounts receivable balances and finds overstatements caused by mistakes 
in billing customers, then both accounts receivable and sales are overstated. 

Confirmation of accounts receivable is the most important test of details of 
accounts receivable. We will discuss confirmation briefly as we study the appropriate 
tests for each of the balance-related audit objectives. We'll examine it in more detail 
later in this chapter. 

For our discussion of tests of details of balances for accounts receivable, we will 
focus on balance-related audit objectives. We will also assume two things: 


1. Auditors have completed an evidence-planning worksheet similar to the one in 
Figure 16-7. 
2. They have decided planned detection risk for tests of details for each balance- 
related audit objective. 
The audit procedures selected and their sample size will depend heavily on 
whether planned evidence for a given objective is low, medium, or high. 


Most tests of accounts receivable and the allowance for uncollectible accounts are 


Design and perform tests of 
details of balances for accounts 
receivable. 


The Summation of 


based on the aged trial balance. An aged trial balance lists the balances in the ac- Accounts Receivable 
counts receivable master file at the balance sheet date, including individual customer Agrees with the Master File 
balances outstanding and a breakdown of each balance by the time passed between and the General Ledger 
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FIGURE 16-3 


Hillsburg Hardware Co. 
Accounts Receivable 
Aged Trial Balance 


Account 


Number Customer 


Ololl 
01044 
01100 
O1lgl 
01270 
01301 


Adams Supply 
Argonaut, Inc. 


Travelers Equipment 
Underhill Parts and Maintenance 


UJW Co. 


Zephyr Plastics 


Recorded Accounts 
Receivable Exist 


Existing Accounts 
Receivable Are Included 
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Atwater Brothers 
Beekman Bearings 
Brown and Phillips 
Christopher Plumbing 


Aged Trial Balance for Hillsburg Hardware Co. 


Schedule 
Prepared by Client 
Approved by 


Date 
1/5/17 


12/31/16 


Aging, Based on Invoice Date 


31-60 61-90 91-120 
days days days 


0-30 
days 


over 120 
days 


Balance 
12/31/16 


146,589 
30,842 
210,389 
83,526 
60,000 
15,789 


90,220 
30,842 
210,389 
73,526 


56,369 


15,789 


59,576 
179,263 
102,211 
286,300 


$20,196,800 


59,576 
179,263 
34,911 
186,000 
$14,217,156 


34,700 
100,300 


$2,869,366 


32,600 


$1,408,642 $1,038,926 $662,710 


the date of sale and the balance sheet date. Figure 16-3 illustrates a typical aged trial 
balance, based on the Hillsburg Hardware example. Notice that the total is the same as 
accounts receivable on the general ledger trial balance in Figure 6-5 on page 154. 

Ordinarily, auditors test the information on the aged trial balance for detail tie-in 
before any other tests to verify that the population being tested agrees with the general 
ledger and accounts receivable master file. The total column and the columns depict- 
ing the aging must be test-footed and the total on the trial balance compared with the 
general ledger. In addition, auditors should trace a sample of individual balances to 
supporting documents such as duplicate sales invoices to verify the customer’s name, 
balance, and proper aging. The extent of the testing for detail tie-in depends on the 
number of accounts involved, the degree to which the master file has been tested as a 
part of tests of controls and substantive tests of transactions, and the extent to which 
the schedule has been verified by an internal auditor or other independent person 
before it is given to the auditor. Auditors often use audit software to foot and cross- 
foot the aged trial balance and to recalculate the aging. 


Confirmation of customers’ balances is the most important test of details of balances 
for determining the existence of recorded accounts receivable. When customers do not 
respond to confirmations, auditors also examine supporting documents to verify the 
shipment of goods and evidence of subsequent cash receipts to determine whether the 
accounts were collected. Normally, auditors do not examine shipping documents or 
evidence of subsequent cash receipts for any account in the sample that is confirmed, but 
they may use these documents extensively as alternative evidence for nonresponses. 


It is difficult for auditors to test for account balances omitted from the aged trial balance 
except by relying on the self-balancing nature of the accounts receivable master file. For 
example, if the client accidentally excluded an account receivable from the trial balance, 
the only likely way it will be discovered is for the auditor to foot the accounts receivable 
trial balance and reconcile the balance with the control account in the general ledger. 

If all sales to a customer are omitted from the sales journal, the understatement of 
accounts receivable is almost impossible to uncover by tests of details of balances. For 
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example, auditors rarely send accounts receivable confirmations to customers with 
zero balances, in part because research shows that customers are less likely to respond 
to requests that indicate their balances are understated. In addition, unrecorded sales 
to a new customer are difficult to identify for confirmation because that customer is 
not included in the accounts receivable master file. The understatement of sales and 
accounts receivable is best uncovered by substantive tests of transactions for ship- 
ments made but not recorded (completeness objective for tests of sales transactions) 
and by substantive analytical procedures. 


Confirmation of accounts selected from the trial balance is the most common test of 
details of balances for the accuracy of accounts receivable. When customers do not re- 
spond to confirmation requests, auditors examine supporting documents in the same 
way as described for the existence objective. Auditors perform tests of the debits and 
credits to individual customers’ balances by examining supporting documentation for 
shipments and cash receipts. 


Normally, auditors can evaluate the classification of accounts receivable relatively easily, 
by reviewing the aged trial balance for material receivables from affiliates, officers, di- 
rectors, or other related parties. Auditors should verify that notes receivable or accounts 
that should be classified as noncurrent assets are separated from regular accounts, and 
significant credit balances in accounts receivable are reclassified as accounts payable. 
There is a close relationship between the classification balance-related objec- 
tive and the related classification and understandability presentation and disclosure 
objective. To satisfy the classification balance-related audit objective, the auditor 
must determine whether the client has correctly separated different classifications 
of accounts receivable. For example, the auditor will determine whether receivables 
from related parties have been separated on the aged trial balance. To satisfy the objec- 
tive for presentation and disclosure, the auditor must make sure that the classifica- 
tions are properly presented by determining whether related party transactions are 
correctly shown in the financial statements during the completion phase of the audit. 


Cutoff misstatements exist when current period transactions are recorded in the 
subsequent period or vice versa. The objective of cutoff tests, regardless of the type of 
transaction, is to verify whether transactions near the end of the accounting period 
are recorded in the proper period. The cutoff objective is one of the most important 
in the cycle because misstatements in cutoff can significantly affect current period 
income. For example, the intentional or unintentional inclusion of several large, sub- 
sequent period sales in the current period — or the exclusion of several current period 
sales returns and allowances — can materially overstate net earnings. 

Cutoff misstatements can occur for sales, sales returns and allowances, and cash receipts. 
For each one, auditors require a threefold approach to determine the reasonableness 
of cutoff: 


1. Decide on the appropriate criteria for cutoff. 

2. Evaluate whether the client has established adequate procedures to ensure a 
reasonable cutoff. 

3. Test whether the cutoff was correct. 


Sales Cutoff Most merchandising and manufacturing clients record a sale based on 
shipment of goods criterion. However, some companies record invoices at the time title 
passes, which can occur before shipment (as in the case of custom-manufactured 
goods), at the time of shipment, or subsequent to shipment. For the correct measure- 
ment of current period income, the method must be in accordance with accounting 
standards and consistently applied. 

The most important part of evaluating the client’s method of obtaining a reli- 
able cutoff is to determine the procedures in use. When a client issues prenumbered 
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Faced with declining sales for its traditional product 
lines, Xerox prematurely recognized revenues to meet 
market expectations, according to charges filed by the 
SEC. The SEC stated that Xerox accelerated the rec- 
ognition of equipment revenue to increase revenues by 
over $3 billion and pre-tax earnings by approximately 
$1.5 billion over the period 1997 through 2000. The 
early revenue recognition and other actions to increase 
earnings were significant, representing 37 percent of 
reported pre-tax earnings for the fourth quarters of 
1997 and 1998. Without these actions to increase 
earnings, the SEC charged that Xerox would have 
fallen short of market earnings expectations for almost 
every reporting period from 1997 through 1999. 


equipment was recorded at the beginning of the 
lease, but revenues from servicing and financing 
were recognized over the life of the lease contract. 
According to the SEC complaint, Xerox took a 
number of actions to shift servicing and financing 
revenue to the value of the equipment, so that more 
of the revenue could be recognized immediately. 
The SEC alleged that these actions were set 
by the “tone at the top” and ordered six senior 
executives to pay over $22 million in penalties and 
disgorgement of profits from their actions. Without 
admitting or denying the allegations made in the SEC 
complaint, Xerox agreed to pay a $10 million fine, 
at that time the largest ever for a public company. 


A primary issue was how Xerox accounted 
for lease revenue. The revenue in Xerox’s leas- 
ing arrangements represented three components: 
the value of the equipment, servicing over the life 
of the lease, and financing. The revenue from the 


Sources: |. Securities and Exchange Commission Accounting 
and Auditing Enforcement Release No. 1542 (April 11, 2002); 
2. Securities and Exchange Commission Press Release 2003-70 
(June 5, 2003) (www.sec.gov). 


shipping documents sequentially, it is usually a simple matter to evaluate and test cut- 
off. Moreover, the segregation of duties between the shipping and the billing function 
also enhances the likelihood of recording transactions in the proper period. However, 
if shipments are made by company truck, if the shipping records are unnumbered, 
and if shipping and billing department personnel are not independent of each other, it 
may be difficult, if not impossible, to be assured of an accurate cutoff. 

When the client’s internal controls are effective, auditors can usually verify the cutoff 
by obtaining the shipping document number for the last shipment made at the end of 
the period and comparing this number with current and subsequent period recorded 
sales. As an illustration, assume the shipping document number for the last shipment in 
the current period is 1489. All recorded sales before the end of the period should bear a 
shipping document number preceding number 1490, and no sales recorded and shipped 
in the subsequent period should have a bill of lading numbered 1489 or lower. An auditor 
can easily test this by comparing recorded sales with the related shipping documents for 
the last few days of the current period and the first few days of the subsequent period. 


Sales Returns and Allowances Cutoff Accounting standards require that sales re- 
turns and allowances be matched with related sales if the amounts are material. For ex- 
ample, if current period shipments are returned in the subsequent period, the sales 
return should appear in the current period. (The returned goods should be treated as 
current period inventory.) For most companies, however, sales returns and allowances 
are recorded in the accounting period in which they occur, under the assumption of approxi- 
mately equal, offsetting amounts at the beginning and end of each accounting period. 
This approach is acceptable as long as the amounts are not material. Some companies 
establish a reserve, similar to the allowance for uncollectible accounts, for the expected 
amount of returns in the subsequent period. 

When the auditor is confident that the client records all sales returns and allow- 
ances promptly, the cutoff tests are simple and straightforward. The auditor can 
examine supporting documentation for a sample of sales returns and allowances 
recorded during several weeks subsequent to the closing date to determine the date 
of the original sale. If auditors discover that the amounts recorded in the subsequent 
period are significantly different from unrecorded returns and allowances at the 
beginning of the period under audit, they must consider an adjustment. For example, 
a company may experience an increase in sales returns when it launches a new prod- 
uct. In addition, if the internal controls for recording sales returns and allowances are 
evaluated as ineffective, a larger sample is needed to verify cutoff. 
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Cash Receipts Cutoff For most audits, a proper cash receipts cutoff is less important 
than either the sales or the sales returns and allowances cutoff because the improper 
cutoff of cash affects only the cash and the accounts receivable balances, not earnings. 
Nevertheless, if the misstatement is material, it can affect the fair presentation of these 
accounts, especially when cash is a small or negative balance. 

It is easy to test for a cash receipts cutoff misstatement (often called holding the cash 
receipts book open) by tracing recorded cash receipts to subsequent period bank deposits 
on the bank statement. A delay of several days could indicate a cutoff misstatement. 

To some degree, auditors may also rely on the confirmation of accounts receiv- 
able to uncover cutoff misstatements for sales, sales returns and allowances, and cash 
receipts. However, it is often difficult to distinguish a cutoff misstatement from a 
normal timing difference due to shipments and payments in transit at year end. For 
example, if a customer mails and records a check to a client for payment of an unpaid 
account on December 30 and the client receives and records the amount on January 2, 
the records of the two organizations will be different on December 31. This is not a cut- 
off misstatement, but a timing difference due to the delivery time. It may be difficult for 
the auditor to evaluate whether a cutoff misstatement or a timing difference occurred 
when a confirmation reply is the source of information. This type of situation requires 
additional investigation, such as inspection of supporting documents. 


Accounting standards require that companies state accounts receivable at the amount 
that will ultimately be collected. The realizable value of accounts receivable equals 
gross accounts receivable less the allowance for uncollectible accounts. To calculate the al- 
lowance, the client estimates the total amount of accounts receivable that it expects 
to be uncollectible. Obviously, clients cannot predict the future precisely, but it is 
necessary for the auditor to evaluate whether the client’s allowance is reasonable, con- 
sidering all available facts. To assist with this evaluation, the auditor often prepares an 
audit schedule that analyzes the allowance for uncollectible accounts, as illustrated in 
Figure 16-4 (p. 536). In this example, the analysis indicates that the allowance is under- 
stated. This can be the result of the client failing to adjust the allowance or economic 
factors. Note that the potential understatement of the reserve was signaled by the ana- 
lytical procedures in Table 16-3 (p. 530) for Hillsburg Hardware. 

To begin the evaluation of the allowance for uncollectible accounts, the auditor 
reviews the results of the tests of controls that are concerned with the client’s credit 
policy. If the client’s credit policy has remained unchanged and the results of the tests 
of credit policy and credit approval are consistent with those of the preceding year, 
the change in the balance in the allowance for uncollectible accounts should reflect 
only changes in economic conditions and sales volume. However, if the client’s credit 
policy or the degree to which it correctly functions has significantly changed, auditors 
must take great care to consider the effects of these changes as well. 

Auditors often evaluate the adequacy of the allowance by carefully examining the 
noncurrent accounts on the aged trial balance to determine which ones have not been 
paid subsequent to the balance sheet date. The size and age of unpaid balances can 
then be compared with similar information from previous years to evaluate whether 
the amount of noncurrent receivables is increasing or decreasing over time. Auditors 
also gain insights into the collectibility of the accounts by examining credit files, 
discussions with the credit manager, and review of the client’s correspondence file. 
These procedures are especially important if a few large balances are noncurrent and 
are not being paid on a regular basis. 

Auditors face two shortcomings in evaluating the allowance by reviewing indi- 
vidual noncurrent balances on the aged trial balance. First, the current accounts are 
ignored in establishing the adequacy of the allowance, even though some of these 
amounts will undoubtedly become uncollectible. Second, it is difficult to compare 
the results of the current year with those of previous years on such an unstructured 
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Analysis of Allowance for Uncollectible Accounts for 


FIGURE 16-4 Hillsburg Hardware Co. 


Hillsburg Hardware Co. Schedule B-4 Date 
Analysis of Allowance for Uncollectible Accounts Prepared by TW 1/8/17 
12/31/16 Approved by SB V/10/17 


Estimated Estimated 


AIR AIR Balance Allowance Required 
Category 12/31/16 Percentage Allowance 


0-30 days $ 14,217,156 3% $ 426,515 
31-60 days 2,869,366 6% 172,162 
61-90 days 1,408,642 15% 211,296 
91-120 days 1,038,926 25% 259,732 
Over 120 662,710 40% 265,084 


Total $ 20,196,800 $ 1,334,789 
Recorded Allowance $ 1,240,000 
Difference $ 94,789 


/ —Traced to aged accounts receivable trial balance. 

x — Allowance percentages are consistent with prior year and appear reasonable 
based on historical loss percentages documented in permanent file. 

TB— Agreed to trial balance. 


Conclusion: Recorded allowance appears understated based on aging analysis. Approximate 
amount of $95,000 not considered material. Include on Summary of Possible Misstatements 
schedule on A-3. (See Figure 24-6 on p. 785.) 


basis. If the accounts are becoming progressively uncollectible over several years, this 
fact can be overlooked. To avoid these two shortcomings, clients can establish a his- 
tory of bad debt write-offs over a period of time as a frame of reference for evaluating 
the current year’s allowance. For example, a client might calculate that 2 percent of 
current accounts, 10 percent of 30- to 90-day accounts, and 35 percent of all balances 
over 90 days ultimately become uncollectible. Auditors can apply these percentages to 
the current year’s aged trial balance totals and compare the result with the balance in 
the allowance account. Of course, the auditor has to verify the appropriateness of the 
percentages used and be careful to modify the calculations for changed conditions. 


Bad Debt Expense After the auditor is satisfied with the allowance for uncollectible 
accounts, it is easy to verify bad debt expense. Assume that: 


¢ The beginning balance in the allowance account was verified as a part of the 
previous audit. 

¢ The uncollectible accounts written off were verified as a part of the substantive 
tests of transactions. 

* The ending balance in the allowance account has been verified by various 
means. 


Bad debt expense is then simply a residual balance that can be verified by 
recalculation. 


The client’s rights to accounts receivable ordinarily cause no audit problems because 
the receivables usually belong to the client. In some cases, however, a portion of the 
receivables may have been pledged as collateral, assigned to someone else, factored, 
or sold at discount. Normally, the client’s customers are not aware of the existence 
of such matters, so the confirmation of receivables will not bring them to light. To 
uncover instances in which the client has limited rights to receivables, the auditor 
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may review the minutes, discuss with the client, confirm with banks, examine debt 
contracts for evidence of accounts receivable pledged as collateral, and examine 
correspondence files. 


Tests of the four presentation and disclosure-related audit objectives are generally 
done as part of the completion phase of the audit. However, some tests of presentation 
and disclosure are often done with tests to meet the balance-related audit objectives. 
For example, when testing sales and accounts receivable, the auditor must understand 
and evaluate the appropriateness of the client’s revenue recognition policy to deter- 
mine whether it is properly disclosed in the financial statements. The auditor must 
also decide whether the client has properly combined amounts and disclosed related 
party information in the statements. To evaluate the adequacy of the presentation and 
disclosure, the auditor must have a thorough understanding of accounting standards 
and presentation and disclosure requirements. 

An important part of the evaluation involves deciding whether the client has sep- 
arated material amounts requiring separate disclosure in the statements. For example, 
receivables from officers and affiliated companies must be segregated from accounts 
receivable from customers if the amounts are material. Similarly, under SEC require- 
ments, companies must disclose sales and assets for different business segments sepa- 
rately. The proper aggregation of general ledger balances in the financial statements 
also requires combining account balances that are not relevant for external users of 
the statements. If all accounts included in the general ledger were disclosed separately 
on the statements, most statement users would be more confused than enlightened. 


CONCEPT CHECK 


|. Describe two types of substantive analytical procedures often performed in the audit 
of the sales and collection cycle and describe how they might indicate a possible 
misstatement in the financial statements. 


2. Which of the eight accounts receivable balance-related audit objectives can be partially 
satisfied by confirmations with customers? 


Accounts Receivable 
Presentation and 
Disclosure 


CONFIRMATION OF ACCOUNTS RECEIVABLE 


Confirmation of accounts receivable was a recurring concept in our discussion about 
designing tests of details of balances for accounts receivable. The primary purpose 
of accounts receivable confirmation is to satisfy the existence, accuracy, and cutoff 
objectives. 

Confirmations are one of the eight types of audit evidence introduced in Chapter 7. 
Most typically, a confirmation is a direct written response from a third party in paper 
or electronic form, but it may also include information the auditor is able to obtain 
through direct access provided by a third party to information that is held by the third 
party, such as direct access to a supplier’s vendor management system. Confirmations 
are considered to be highly reliable evidence because they are received directly from 
third parties. Although an oral response provides audit evidence, it is not considered 
a confirmation. 


U.S. auditing standards indicate that auditors should use external confirmations 
for accounts receivable. Confirmation may not be appropriate in the following 
circumstances: 


1. The overall accounts receivable balance is immaterial. Some clients, such as fast-food 
restaurants, may generate sales mostly on a cash basis, resulting in a negligible 
accounts receivable balance. 
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2. The auditor considers confirmations ineffective evidence because response rates will likely be 
inadequate or unreliable. In certain industries, such as hospitals, response rates to 
confirmations are very low. 

3. The auditor's assessed level of the risk of material misstatement (represented by the combined 
level of inherent risk and control risk) is low and other substantive evidence can be accumu- 
lated to provide sufficient evidence. If a client has effective internal controls and low 
inherent risk for the sales and collection cycle, the auditor should often be able to 
satisfy the evidence requirements by tests of controls, substantive tests of transac- 
tions, and substantive analytical procedures. 


If the auditor decides not to confirm accounts receivable that are material, the 
justification for doing so must be documented in the audit files. While U.S. auditing 
standards require the use of confirmations for accounts receivable in most circum- 
stances, international auditing standards suggest but do not require their use. This 
is one of the few notable differences between requirements of U.S. and international 
auditing standards. The PCAOB is also considering changes to its Auditing Standards 
that might expand the use of confirmations by potentially eliminating the exceptions 
noted above and by expanding the types of receivables that should be confirmed. 


In performing confirmation procedures, the auditor must first decide the type of 
confirmation to use. 


Positive Confirmation A positive confirmation is a communication addressed to 
the debtor requesting the recipient to confirm directly whether the balance as stated 
on the confirmation request is correct or incorrect. Figure 16-5 illustrates a positive 
confirmation in the audit of Hillsburg Hardware Co. Notice that this confirmation is 
for one of the largest accounts on the aged trial balance in Figure 16-3 (p. 532). 

A blank confirmation form is a type of positive confirmation that does not 
state the amount on the confirmation but requests the recipient to fill in the balance 
or furnish other information. Because blank forms require the recipient to determine 
the information requested, they are considered more reliable than confirmations that 
include balance information. Blank forms are rarely used in practice because they 
often result in lower response rates. 

An invoice confirmation is another type of positive confirmation in which an 
individual invoice is confirmed, rather than the customer’s entire accounts receivable 
balance. Many customers use voucher systems that allow them to confirm individual 
invoices but not balance information. As a result, the use of invoice confirmations 
may improve confirmation response rates. Invoice confirmations also result in 


Channel-stuffing is a form of aggressive revenue 
recognition that can sometimes cross the line to 
fraudulent reporting and that is often carried out 
by enticing or pressuring customers to accept ad- 


ditional products through pricing or other incentives. 


That was the case with Bristol-Myers Squibb and 
their largest pharmaceutical wholesalers such as 
D&K Healthcare Resources, Inc. Top executives at 
Bristol-Myers Squibb were found guilty of fraudulent 
channel-stuffing practices in which they encouraged 
wholesalers to accept inventory products above 

and beyond what they would normally purchase, by 
offering pricing discounts and by helping to cover 
inventory carrying costs, effectively making the sale a 
consignment arrangement. This practice overstated 
revenue by $2.5 billion over a three-year period. 
The channel-stuffing and side agreements had a 


ripple effect on wholesalers by inflating their gross 
margins as a result of the “purchasing incentives.” 
When Bristol-Myers was investigated by the SEC and 
forced to stop their channel-stuffing practices, both 
Bristol Myers and D&K restated previously reported 
results and were named as defendants in class ac- 
tion lawsuits. Incidences of channel-stuffing like this 
illustrate why an auditor should consider confirming 
sales transaction terms, such as right of return or 
side agreements, in addition to the balance owed by 
the customer. 


Sources: |. SEC 2004-105. Bristol-Myers Squibb Company 
Agrees to Pay $150 Million to Settle Fraud Charges, August 
4, 2004 (www.sec.gov); 2. Gary Dutton vs. D&K Healthcare 
Resources, Class Action Litigation Complaint (www.securities 
.stanford.edu). 
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FIGURE 16-5 Positive Confirmation 


HILLSBURG HARDWARE Co. 
Gary, Indiana 


January 5, 2017 
Atwater Brothers 
19 South Main Street 
Middleton, Ohio 36947 


To Whom It May Concern: 


In connection with an audit of our financial statements, please confirm directly to our auditors 
BERGER & ANTHONY, CPAs 
Gary, Indiana 


the correctness of the balance of your account with us as of December 31, 2016, as shown below. 
This is not a request for payment; please do not send your remittance to our auditors. Your 
prompt attention to this request will be appreciated. An envelope is enclosed for your reply. 


Erma Swanson, Controller 


BERGER & ANTHONY, CPAs Cio ean 


Gary, Indiana 


The balance receivable from us of $210,389 as of December 31, 2016, is correct except as 
noted below: 


fewer timing differences and other reconciling items than balance confirmations. 
However, invoice confirmations have the disadvantage of not directly confirming 
ending balances. 

Sales to major customers often involve special terms or side-agreements for the 
return of goods that may affect the amount and timing of revenue to be recognized 
from the sale. When this has been identified as a significant risk, positive confirma- 
tions often request the customer to confirm the existence of any special terms or side- 
agreements between the client and customer. The vignette on the prior page illustrates 
the importance of confirming transaction terms. 


Negative Confirmation A negative confirmation is also addressed to the debtor 
but requests a response only when the debtor disagrees with the stated amount. 
Figure 16-6 (p. 540) illustrates a negative confirmation in the audit of Hillsburg 
Hardware Co. that has been attached to a customer’s monthly statement. 

A positive confirmation is more reliable evidence because the auditor can perform 
follow-up procedures if a response is not received from the debtor. With a negative 
confirmation, failure to reply must be regarded as a correct response, even though the 
debtor may have ignored the confirmation request. 

Offsetting the reliability disadvantage, negative confirmations are less expensive 
to send than positive confirmations, and thus more can be distributed for the same 
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FIGURE 16-6 | Negative Confirmation 


AUDITOR’S ACCOUNT CONFIRMATION 


Please examine this statement carefully. If it does NOT agree with your records, please report any exceptions 
directly to our auditors 
BERGER & ANTHONY, CPAs 
Gary, Indiana 
who are conducting an audit of our financial statements as of December 31, 2016. An addressed envelope is 
enclosed for your convenience in replying. 


Do not send your remittance to our auditors. 


total cost. Negative confirmations cost less because there are no second requests and 
no follow-up of nonresponses. 

The determination of which type of confirmation to use is an auditor’s decision, 
and it should be based on the facts in the audit. Auditing standards state that it is 
acceptable to use negative confirmations as the sole substantive audit procedure to 
address an assessed risk of material misstatement at the assertion level only when all 
of the following circumstances are present: 


1. The auditor has assessed the risk of material misstatement as low and has obtained 
sufficient appropriate evidence regarding the design and operating effectiveness 
of controls relevant to the assertion being tested by the confirmation procedure. 

2. The population of items subject to negative confirmation procedures is made up of a 

large number of small, homogenous account balances, transactions, or other items. 

The auditor expects a low exception rate. 

4. The auditor reasonably believes that recipients of negative confirmation requests 
will give the requests adequate consideration. For example, if the response rate 
to positive confirmations in prior years was extremely high or if there are high 
response rates on audits of similar clients, it is likely that recipients will give nega- 
tive confirmations reasonable consideration as well. 


» 


Typically, when negative confirmations are used, the auditor puts considerable 
emphasis on the effectiveness of internal controls, substantive tests of transactions, 
and substantive analytical procedures as evidence of the fairness of accounts receiv- 
able, and assumes that the large majority of the recipients will provide a conscientious 
reading and response to the confirmation request. 

Negative confirmations are often used for audits of hospitals, retail stores, banks, 
and other industries in which the receivables are due from the general public. Auditors 
may use a combination of negative and positive confirmations by sending the latter to 
accounts with large balances and the former to those with small balances. 

The auditor’s choice of confirmation falls along a continuum, starting with the 
use of no confirmations in some circumstances, to using only negatives, to using 
both negatives and positives, to using only positives. The primary factors affecting the 
auditor’s decision are the materiality of total accounts receivable, the number and size 
of individual accounts, control risk, inherent risk, the effectiveness of confirmations 
as audit evidence, and the availability of other audit evidence. 


The most reliable evidence from confirmations is obtained when they are sent as close 
to the balance sheet date as possible. This permits the auditor to directly test the ac- 
counts receivable balance on the financial statements without making any inferences 
about the transactions taking place between the confirmation date and the balance 
sheet date. However, as a means of completing the audit on a timely basis, it is often 
necessary to confirm the accounts at an interim date. This is permissible if internal 
controls are adequate and can provide reasonable assurance that sales, cash receipts, 
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and other credits are properly recorded between the date of the confirmation and the 
end of the accounting period. The auditor is likely to consider other factors in making 
the decision, including the materiality of accounts receivable and the auditor’s expo- 
sure to lawsuits because of the possibility of client bankruptcy and similar risks. 

If the decision is made to confirm accounts receivable before year-end, the audi- 
tor typically prepares a roll-forward schedule that reconciles the accounts receivable 
balance at the confirmation date to accounts receivable at the balance sheet date. In 
addition to performing analytical procedures on the activity during the intervening 
period, it may be necessary to test the transactions occurring between the confirma- 
tion date and the balance sheet date. The auditor can accomplish this by examining 
internal documents such as duplicate sales invoices, shipping documents, and evi- 
dence of cash receipts. 


Sample Size The major factors affecting sample size for confirming accounts receiv- 
able fall into several categories and include the following: 


¢ Performance materiality 

¢ Inherent risk (relative size of total accounts receivable, number of accounts, 
prior-year results, and expected misstatements) 

* Control risk 

* Achieved detection risk from other substantive tests (extent and results of substan- 
tive tests of transactions, substantive analytical procedures, and other tests of details) 

* Type of confirmation (negatives normally require a larger sample size) 


Selection of the Items for Testing Some type of stratification is desirable with most 
confirmations. In a typical approach to stratification for selecting the balances for 
confirmation, an auditor considers both the dollar size of individual accounts and the 
length of time an account has been outstanding. In most audits, the emphasis should 
be on confirming larger and older balances because these are most likely to include 
a significant misstatement. But it is also important to sample some items from every 
material segment of the population. In many cases, the auditor selects all accounts 
above a certain dollar amount and selects a random sample from the remainder. 

Management may refuse to allow the auditor to send confirmation requests to 
certain customers. The auditor must inquire about the reason for the client’s request, 
which is often due to litigation or negotiations between the client and customer. The 
auditor should obtain evidence to evaluate the reasonableness of the client’s request, 
and evaluate whether the request indicates a potential fraud risk or increased risk of 
material misstatement. 


The auditor should perform procedures to verify the addresses or email addresses 
used for confirmation. For example, auditors should consider performing additional 
procedures when the address is a post office box or when an email address is inconsis- 
tent with the customer’s Web site address. 

For confirmations sent by mail, the auditor must maintain control of the confirma- 
tions until they are returned from the customer. The client may assist with preparing the 
confirmations, but the auditor must be responsible for mailing the confirmation outside 
the client’s office. A return address must be included on all envelopes to make sure that unde- 
livered mail is received by the CPA firm. Similarly, self-addressed return envelopes accom- 
panying the confirmations must be addressed for delivery to the CPA firm’s office. These 
procedures are designed to ensure that responses will be received directly by the auditor. 


It is inappropriate to regard confirmations mailed but not returned by customers as signif- 
icant audit evidence. For example, nonresponses to positive confirmations do not provide 


Sampling Decisions 


Verification of Addresses 


and Maintaining Control 


Follow-Up on 


ee me ; ; , . Nonresponses 
audit evidence. Similarly, for negative confirmations, the auditor should not conclude that P 
the recipient received the confirmation request and verified the information requested. 
Negative confirmations do, however, provide some evidence of the existence assertion. 
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ELECTRONIC 
CONFIRMATION 
SERVICES 


Analysis of Differences 
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Given that confirmations are used as audit evidence in 
most audits, the volume of confirmations processed 
by entities, including customers, vendors, banks, and 
debtholders, is staggering. Technologies, including 

the Internet, have allowed businesses to be created 
to help streamline the efficiency and effectiveness of 
the confirmation process. One example is Capital 
Confirmation’s patented Confirmation.com service, 
which provides secure electronic confirmation ser- 
vices for auditors. Not only does this service help save 
costs and time related to the audit, it also helps mini- 
mize fraud through features that validate the authen- 
ticity and authorization of each user. Auditors can use 


services such as those offered by Capital Confirmation 
to upload accounts receivable samples in spreadsheet 
form so that confirmation can be sent electronically to 
thousands of “in-network” companies that are already 
validated and ready to respond electronically. For 
companies that are “out-of-network,” confirmation 
service providers such as Capital Confirmation can 
assist the auditor with printing and posting confirma- 
tions, and with customer responses mailed directly to 
the auditor or submitted to the auditor through the 
Confirmation.com platform. 


Source: Capital Confirmation (www.confirmation.com). 


When positive confirmations are used, auditing standards require follow-up pro- 
cedures for confirmations not returned by the customer. It is common to send second 
and sometimes even third requests for confirmations. Even with these efforts, some cus- 
tomers do not return the confirmation, so it is necessary to follow up with alternative 
procedures. The objective of alternative procedures is to determine by a means other 
than confirmation whether the nonconfirmed account existed and was properly stated 
at the confirmation date. For any positive confirmation not returned, auditors can 
examine the following documentation to verify the existence and accuracy of individual 
sales transactions making up the ending balance in accounts receivable: 


Subsequent Cash Receipts Evidence of the receipt of cash subsequent to the confirma- 
tion date includes examining remittance advices, entries in the cash receipts records, or 
perhaps even subsequent credits in the accounts receivable master file. On the one hand, 
the examination of evidence of subsequent cash receipts is a highly useful alternative 
procedure because it is reasonable to assume that a customer would not have made a 
payment unless it was an existing receivable. On the other hand, payment does not estab- 
lish whether an obligation existed on the date of the confirmation. In addition, auditors 
should take care to match each unpaid sales transaction with evidence of its subsequent 
payment as a test for disputes or disagreements over individual outstanding invoices. 


Duplicate Sales Invoices These are useful in verifying the actual issuance of a sales 
invoice and the actual date of the billing. 


Shipping Documents These are important in establishing whether the shipment was 
actually made and as a test of cutoff. 


Correspondence with the Client Usually, the auditor does not need to review cor- 
respondence as a part of alternative procedures, but correspondence can be used to 
discover disputed and questionable receivables not uncovered by other means. 

The extent and nature of the alternative procedures depend primarily on the mate- 
riality of the nonresponses, the types of misstatements discovered in the confirmed 
responses, the subsequent cash receipts from the nonresponses, and the auditor’s 
conclusions about internal control. 

It is normally desirable to account for all unconfirmed balances with alternative 
procedures even if the amounts are small, as a means of properly generalizing from 
the sample to the population. Another acceptable approach is to assume that nonre- 
sponses are 100 percent overstatement amounts. 


When the confirmation requests are returned by the customer, the auditor must 
determine the reason for any reported differences. In many cases, they are caused by 
timing differences between the client’s and the customer’s records. It is important to 
distinguish between timing differences and exceptions, which represent misstatements 
of the accounts receivable balance. The most commonly reported types of differences 
in confirmations include: 
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Payment Has Already Been Made Reported differences typically arise when the 
customer has made a payment before the confirmation date, but the client has not re- 
ceived the payment in time for recording before the confirmation date. Such instances 
should be carefully investigated to determine the possibility of a cash receipts cutoff 
misstatement, lapping, or a theft of cash. 


Goods Have Not Been Received These differences typically result because the cli- 
ent records the sale at the date of shipment and the customer records the acquisition 
when the goods are received. The time that the goods are in transit is often the cause 
of differences reported on confirmations. These should be investigated to determine 
the possibility of the customer not receiving the goods at all or the existence of a cut- 
off misstatement on the client’s records. 


The Goods Have Been Returned The client’s failure to record a credit memo could 
have resulted from timing differences or the improper recording of sales returns and 
allowances. Like other differences, these must be investigated. 


Clerical Errors and Disputed Amounts The most likely types of reported differ- 
ences in a client’s records are when the customer states that there is an error in the 
price charged for the goods, the goods are damaged, the proper quantity of goods 
was not received, and so forth. These differences must be investigated to determine 
whether the client is in error and the amount of the error. 

In most instances, the auditor will ask the client to reconcile the difference and, if 
necessary, will communicate with the customer to resolve any disagreements. Naturally, 
the auditor must carefully verify the client’s conclusions on each significant difference. 


When all differences have been resolved, including those discovered in performing al- 
ternative procedures, the auditor must reevaluate internal control. Each client misstatement 
must be analyzed to determine whether it was consistent or inconsistent with the origi- 
nal assessed level of control risk. Ifa significant number of misstatements occurred that 
are inconsistent with the assessment of control risk, it is necessary to revise the assess- 
ment and consider the effect of the revision on the audit. Auditors of public companies 
must also consider implications for the audit of internal control over financial reporting. 

It is also necessary to generalize from the sample to the entire population of accounts 
receivable. Even though the sum of the misstatements in the sample may not significantly 
affect the financial statements, the auditor must consider whether the population is likely 
to be materially misstated. Generalizing from the sample to the population can be done 
using nonstatistical or statistical sampling techniques and is discussed in Chapter 17. 

The auditor should always evaluate the qualitative nature of the misstatements 
found in the sample, regardless of the dollar amount of the estimated population mis- 
statement. Even if the estimated misstatement is less than performance materiality 
for accounts receivable, the misstatements found in a sample can be symptomatic of a 
more serious problem. 

The final decision about accounts receivable and sales is whether sufficient appropriate 
evidence has been obtained through tests of controls and substantive tests of transactions, 
substantive analytical procedures, cutoff procedures, confirmation, and other substantive 
tests to justify drawing conclusions about the correctness of the stated balance. 


Drawing Conclusions 


DEVELOPING TESTS OF DETAILS AUDIT PROGRAM 


We use Hillsburg Hardware Co. to illustrate the development of audit program 
procedures for tests of details in the sales and collection cycle. The determination 
of these procedures is based on the tests of controls and substantive tests of transac- 
tions, as illustrated in Chapters 14 and 15, and the analytical procedures described 
earlier in this chapter. 
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audit of accounts receivable, 
using an evidence-planning 
worksheet as a guide. 
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FIGURE 16-7 


Evidence-Planning Worksheet to Decide Tests of Details of Balances for 
Hillsburg Hardware Co.— Accounts Receivable 


Detail tie-in 


Existence 


Completeness 


Accuracy 


Classification 


Realizable value 


Acceptable audit risk 


Medium 


Medium 


Medium 


Medium 


Medium 


Medium 


Medium 


Inherent risk 


Medium 


Medium 


Medium 


Control risk— 
Sales 


Medium 


Medium 


Not 
applicable 


Control risk— 
Cash receipts 


Medium 


Not 
applicable 


Not 
applicable 


Control risk— 
Additional controls 


Substantive tests 
of transactions— 
Sales 


Good 
results 


Good 
results 


Good 
results 


Fair 
results 


Good 
results 


Unacceptable 
results 


Not 
applicable 


Not 
applicable 


Substantive tests 
of transactions— 
Cash receipts 


Good 
results 


Good 
results 


Good 
results 


Good 
results 


Good 
results 


Good 
results 


Not 
applicable 


Not 
applicable 


Substantive analytical 


procedures 


Good 
results 


Good 
results 


Good 
results 


Good 
results 


Good 
results 


Good 
results 


Unacceptable 
results 


Not 
applicable 


Planned detection 
risk for tests of 
details of balances 


High 


Planned audit 
evidence for tests of 
details of balances 


Medium 


Medium 


Performance materiality $265,000 


ances. The source of each of the rows is as follows: 


° Performance materiality. The preliminary judgment of materiality for the finan- 
cial statements as a whole was set at $442,000 (approximately 6 percent of earn- 
ings from operations of $7,370,000). She allocated $265,000 as performance 


Fran Moore, the audit senior, prepared the evidence-planning worksheet in 
Figure 16-7 as an aid to help her decide the extent of planned tests of details of bal- 


materiality to the audit of accounts receivable (see Figure 8-7 on p. 240). 


¢ Acceptable audit risk. Fran assessed acceptable audit risk as medium because the 
company is publicly traded, but is in good financial condition, and has high 
management integrity. Although Hillsburg is a publicly traded company, its 


stock is not widely held or extensively followed by financial analysts. 
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TABLE 16-4 


Balance-Related Audit Objective 


Accounts receivable in the aged trial balance agree with 
related master file amounts, and the total is correctly 
added and agrees with the general ledger (detail tie-in). 


Balance-Related Audit Objectives and Audit Program for Hillsburg Hardware Co.— 
Sales and Collection Cycle (Design Format) 


Audit Procedures 


Obtain the accounts receivable aged trial balance and trace the balance to the general 
ledger (1). 
Use audit software to foot and cross-foot the aged trial balance (2). 


Trace 10 accounts from the trial balance to accounts on master file (8). 


The accounts receivable on the aged trial balance exist 
(existence). 


Confirm accounts receivable, using positive confirmations. Confirm all amounts over 
$100,000 and a statistical sample of the remainder (10). 


Perform alternative procedures for all confirmations not returned on the first or second 
request (11). 


Review accounts receivable trial balance for large and unusual receivables (3). 


Existing accounts receivable are included in the aged trial 
balance (completeness). 


Trace five accounts from the accounts receivable master file to the aged trial balance (9). 


Accounts receivable in the trial balance are accurate 
(accuracy). 


Confirm accounts receivable, using positive confirmations. Confirm all amounts over 
$100,000 and a statistical sample of the remainder (10). 


Perform alternative procedures for all confirmations not returned on the first or second 
request (11). 


Review accounts receivable trial balance for large and unusual receivables (3). 


Accounts receivable on the aged trial balance are correctly 
classified (classification). 


Review the receivables listed on the aged trial balance for notes and related party 
receivables (5). 


Inquire of management whether there are any related party notes or long-term 
receivables included in the trial balance (6). 


Transactions in the sales and collection cycle are recorded in 
the proper period (cutoff). 


Select the last 20 sales transactions from the current year’s sales journal and the first 
20 from the subsequent year’s and trace each to the related shipping documents, 
checking for the date of actual shipment and the correct recording (14). 


Review large sales returns and allowances before and after the balance sheet date to 
determine whether they are recorded in the correct period (15). 


Accounts receivable is stated at realizable value (realizable 
value). 


Trace 10 accounts from the aged trial balance to the accounts receivable master file to 
test for correctness of aging and the balance (8). 


Use audit software to foot and cross-foot the aged trial balance (2). 


Discuss with the credit manager the likelihood of collecting older accounts. Examine 
subsequent cash receipts and the credit file on all accounts over 90 days and evaluate 
whether the receivables are collectible (12). 


Evaluate whether the allowance is adequate after performing other audit procedures for 
collectibility of receivables (13). 


The client has rights to accounts receivable on the trial 
balance (rights). 


Review the minutes of the board of directors meetings for any indication of pledged or 
factored accounts receivable (7). 


Inquire of management whether any receivables are pledged or factored (7). 


Note: The procedures are summarized into a performance format in Table 16-5 on page 546. The numbers in parentheses after the procedures refer to Table 16-5. 


¢ Inherent risk. Fran assessed inherent risk as medium for existence and cutoff 
because of concerns over revenue recognition identified in auditing standards. 
Fran also assessed inherent risk as medium for realizable value. In past years, 
the client made audit adjustments to the allowance for uncollectible accounts 
because it was found to be understated. Inherent risk was assessed as low for all 


other objectives. 


* Control risk. Control risk assessments for each audit objective are the same as 
those in Figure 15-6 on page 504. (Recall that results of tests of controls and sub- 
stantive tests of transactions in Chapter 15 were consistent with the auditor’s 
initial control risk assessments, except for the accuracy and realizable value 


objectives for sales.) 
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Test of Details of Balances Audit Program for Hillsburg 
Hardware Co.—Sales and Collection Cycle (Performance Format) 


TABLE 16-5 


. Obtain the accounts receivable aged trial balance and trace the balance to the general ledger. 


2. Use audit software to foot and cross-foot the aged trial balance. 


3. Review aged trial balance for large and unusual receivables. 


4. Calculate analytical procedures indicated in carry-forward audit schedules (not included) and follow up on any 
significant changes from prior years. 


5. Review the receivables listed on the aged trial balance for notes and related party receivables. 


6. Inquire of management whether there are any related party notes or long-term receivables included in the trial 
balance. 


7. Review the minutes of the board of directors meetings and inquire of management to determine whether any 
receivables are pledged or factored. 


8. Trace 10 accounts from the aged trial balance to the accounts receivable master file to test for correctness of 
aging and the balance. 


9. Trace five accounts from the accounts receivable master file to the aged trial balance. 


10. Confirm accounts receivable, using positive confirmations. Confirm all amounts over $100,000 and select a 
statistical sample using audit software for the remaining accounts. 


|. Perform alternative procedures for all confirmations not returned on the first or second request. 


12. Discuss with the credit manager the likelihood of collecting older accounts. Examine subsequent cash receipts 
and the credit file on all larger accounts over 90 days and evaluate whether the receivables are collected. 


13. Evaluate whether the allowance is adequate after performing other audit procedures for collectibility of 
receivables. 


14. Select the last 20 sales transactions from the current year’s sales journal and the first 20 from the subsequent 
year’s and trace each to the related shipping documents, checking for the date of actual shipment and the cor- 
rect recording. 


15. Review large sales returns and allowances before and after the balance sheet date to determine whether they 
are recorded in the correct period. 


¢ Substantive tests of transactions results. These results were also taken from 
Figure 15-6. (Recall from Chapter 15 that all results were acceptable except for 
the accuracy and cutoff objectives for sales.) 

¢ Substantive analytical procedures. See Tables 16-2 and 16-3 (both on page 530). 

* Planned detection risk and planned audit evidence. These two rows are decided for 
each objective based on the conclusions in the other rows. 


Table 16-4 (p. 545) shows the tests of details audit program for accounts receiv- 
able, by objective, and for the allowance for uncollectible accounts. The audit program 
reflects the conclusions for planned audit evidence on the evidence-planning work- 
sheet in Figure 16-7 (p. 544). 

Table 16-5 shows the audit program in a performance format. The audit proce- 
dures are identical to those in Table 16-4 except for procedure 4, which is a substantive 
analytical procedure. The numbers in parentheses are a cross reference between the 
two tables. 


CONCEPT CHECK 


|. Distinguish between a positive and a negative confirmation and state the circumstances 
in which each should be used. 
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2. Define what is meant by alternative procedures in the confirmation of accounts 
receivable and explain their purpose. Which alternative procedures are the most 
reliable? Why? 
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SUMMARY 


This chapter completes the overview of the methodology auditors follow in designing 
the audit of the sales and collection cycle. Chapters 14 and 15 examined tests of controls 
and substantive tests of transactions for the sales and collection cycle, both of which are 
part of phase II of the audit process. This chapter examines the design of substantive ana- 
lytical procedures and tests of details for the two key balance sheet accounts in the cycle: 
accounts receivable and the allowance for doubtful accounts. Because auditing standards 
require auditors to confirm material accounts receivable in most audits, this chapter high- 
lighted practices appropriate when using either positive or negative confirmations. We 
ended the chapter by emphasizing how auditors use evidence accumulated through the 
performance of a combination of procedures including tests of controls, substantive tests 
of transactions, substantive analytical procedures, and tests of details to evaluate accounts 
receivable. 


ESSENTIAL TERMS 


Accounts receivable balance-related transactions being recorded in the current 


audit objectives—the eight specific audit 
objectives used by the auditor to decide the 
appropriate audit evidence for accounts 
receivable 

Aged trial balance—a listing of the bal- 
ances in the accounts receivable master 
file at the balance sheet date broken down 
according to the amount of time passed 
between the date of sale and the balance 
sheet date 

Alternative procedures—the follow-up 
of a positive confirmation not returned by 
the debtor with the use of documentation 
evidence to determine whether the recorded 
receivable exists 

Blank confirmation form—a letter, 
addressed to the debtor, requesting the 
recipient to fill in the amount of the 
accounts receivable balance; it is consid- 
ered a positive confirmation 

Cutoff misstatements—misstatements 
that take place as a result of current pe- 
riod transactions being recorded in a 
subsequent period, or subsequent period 


period 

Invoice confirmation—a type of posi- 
tive confirmation in which an individual 
invoice is confirmed, rather than the cus- 
tomer’s entire accounts receivable balance 
Negative confirmation—a letter, ad- 
dressed to the debtor, requesting a re- 
sponse only if the recipient disagrees with 
the amount of the stated account balance 
Positive confirmation—a letter, ad- 
dressed to the debtor, requesting that 
the recipient indicate directly on the let- 
ter whether the stated account balance is 
correct or incorrect and, if incorrect, by 
what amount 

Realizable value of accounts receivable— 
the amount of the outstanding balances in 
accounts receivable that will ultimately be 
collected 

Timing difference—a reported difference 
in a confirmation from a debtor that is de- 
termined to be a timing difference between 
the client’s and debtor’s records and there- 
fore not a misstatement 


REVIEW QUESTIONS 


16-1 (OBJECTIVE 16-1) Distinguish among tests of details of balances, tests of controls, and 
substantive tests of transactions for the sales and collection cycle. Explain how the tests of 
controls and substantive tests of transactions affect the tests of details of balances. 


16-2 (OBJECTIVE 16-1) Sharizat is a new audit trainee at Khairy and Jamaludin Chartered 
Accountants. She was asked to perform the following tests by her supervisor. The 
accounts supervisor at the company’s client, Lau Ah Pek Berhad, uses Microsoft Excel 
worksheets to prepare the accounts. Lau Ah Pek Berhad is not willing to invest in 
accounting software. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance Si CEBodG GID PPicET Mees OHS UBS S LiNitSd LOS A PEGOUE DEG On Adnttal|ON CYCLE: ACCOUNTS RECEIVABLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-07-23 03:43:50. 


You are the audit supervisor. Explain to Sharizat the reason she is doing the following tasks: 
a. Cast the balances to the Accounts Receivables subledger and compare the total with 

the general ledger. 

. Randomly select any invoice and trace it to the Accounts Receivable ledger. 

. Trace transactions in the Accounts Receivable subledger to stock records. 

. Check the casting in the Accounts Receivable Control account. 

. Check to see whether invoices issued after the cut-off date are in the customer’s ac- 
counts at the year-end date. 


oan & 


16-3 (OBJECTIVE 16-2) List five analytical procedures for the sales and collection cycle. For 
each test, describe a misstatement that could be identified. 


16-4 (OBJECTIVE 16-3) Your client, Amah’s Zone.com, organizes a special year end sale, begin- 
ning from Boxing Day to New Year’s Day every year. Explain why is it important to separate 
the proceeds of the sales on New Year’s Eve and prior from the sales on New Year’s Day. 


16-5 (OBJECTIVE 16-3) Identify the eight accounts receivable balance-related audit objec- 
tives. For each objective, list one audit procedure. 


16-6 (OBJECTIVE 16-3) Why does an auditor review sales returns subsequent to year-end? 
What audit objective does this procedure satisfy? 


16-7 (OBJECTIVE 16-3) Describe the aged trial balance and explain how it assists in testing 
whether accounts receivable reported on the general ledger are accurate. What addi- 
tional audit procedures are typically used to determine the correct accounts receivable 
balance? 


16-8 (OBJECTIVE 16-3) Explain cutoff misstatements and the audit procedure to determine 
whether the client is using the correct cutoffs to report transactions. 


16-9 (OBJECTIVE 16-4) The customer of your client Nikesh Pte Ltd was very unhappy with 
the balance stated in the letter of confirmation of accounts receivable. The customer was 
unhappy because the balances in your letter were much higher than in the customer's 
records. Explain possible reasons for this. 


16-10 (OBJECTIVE 16-4) What is a positive confirmation, including blank confirmation 
and invoice confirmation? What are some benefits or limitations to each type of positive 
confirmation? 


16-11 (OBJECTIVE 16-4) Under what circumstances is it acceptable to confirm accounts 
receivable before the balance sheet date? 


16-12 (OBJECTIVE 16-4) State the most important factors affecting the sample size in confir- 
mations of accounts receivable. 


16-13 (OBJECTIVE 16-4) Discuss whether email responses and oral responses are acceptable 
confirmation responses. How can an auditor verify the addresses for confirmations sent 
by mail and confirmations sent electronically? 


16-14 (OBJECTIVE 16-4) Explain the difference in audit objectives related to the existence and 
completeness of receivables. What are some audit procedures related to these audit objec- 
tives for receivables? 


16-15 (OBJECTIVE 16-4) Explain why the analysis of differences is important in the confir- 
mation of accounts receivable, even if the misstatements in the sample are not material. 


16-16 (OBJECTIVE 16-4) A non-response from a negative confirmation is considered as con- 
firming an account balance, even if the reason for the debtor simply ignored the request. 
As such, it is generally not appropriate to only use negative confirmation except in which 
circumstance? 


16-17 (OBJECTIVE 16-5) What is the relationship of each of the following to the sales and 
collection cycle: flowcharts, assessing control risk, tests of controls, and tests of details of 
balances? 

16-18 (OBJECTIVE 16-5) Explain how unacceptable results from tests of controls and sub- 
stantive tests of transactions might impact the auditor’s planned reliance on tests of details 
of balances. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


16-19 (OBJECTIVE 16-2) The following questions concern analytical procedures in the sales 
and collection cycle. Choose the best response. 
a. Asa result of analytical procedures, the auditor determines that the gross profit percentage 
has declined from 30% in the preceding year to 20% in the current year. The auditor should 
(1) express a qualified opinion due to inability of the client company to continue as 
a going concern. 
(2) evaluate management’s performance in causing this decline. 
(3) require footnote disclosure. 
(4) consider the possibility of a misstatement in the financial statements. 
b. Anauditor’s preliminary analysis of accounts receivable turnover revealed the follow- 
ing rates over these accounting periods: 


2016 2015 2014 
4.3 6.2 7.3 
Which of the following is the most likely cause of the decrease in accounts receivable 


turnover? 

(1) Increase in the cash discount offered 
(2) Liberalization of credit policy 

(3) Shortening of due date terms 

(4) Increased cash sales 


c. After a CPA has determined that accounts receivable have increased as a result of slow 
collections in a “tight money” environment, the CPA will be likely to 
(1) increase the balance in the allowance for bad debt account. 
(2) review the going concern ramifications. 
(3) review the credit and collection policy. 
(4) expand tests of collectibility. 


16-20 (OBJECTIVE 16-4) The following questions deal with confirmation of accounts receiv- 
able. Choose the best response. 

a. Which of the following procedures will an auditor most likely perform for year-end 
accounts receivable confirmations when the auditor did not receive replies to second 
requests? 

(1) Review the cash receipts journal for the month prior to year end. 

(2) Intensify the study of internal control concerning the revenue cycle. 

(3) Inspect the shipping records documenting the merchandise sold to the debtors. 

(4) Increase the assessed level of detection risk for the existence assertion. 
b. The negative form of accounts receivable confirmation request is useful except when 
(1) internal control surrounding accounts receivable is considered to be effective. 
(2) alarge number of small balances are involved. 

(3) the auditor has reason to believe the persons receiving the requests are likely to 

give them consideration. 

(4) individual account balances are relatively large. 

c. The return of a positive confirmation of accounts receivable without an exception 
attests to the 

(1) collectibility of the receivable balance. 

(2) accuracy of the allowance for uncollectible accounts. 

(3) accuracy of the aging of accounts receivable. 

(4) accuracy of the receivable balance. 


16-21 (OBJECTIVE 16-3) The following questions concern audit objectives and management 
assertions for accounts receivable. Choose the best response. 
a. Which of the following will likely provide the most assurance concerning the accu- 
racy balance-related objective for accounts receivable? 
(1) Vouch amounts in the subsidiary ledger to details on shipping documents. 
(2) Compare receivable turnover ratios with industry statistics for reasonableness. 


any 
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Required 


Required 


(3) Inquire about receivables pledged under loan agreements. 
(4) Assess the allowance for uncollectible accounts for reasonableness. 


b. Which of the following audit procedures will best uncover an understatement of sales 

and accounts receivable? 

(1) Test a sample of sales transactions, selecting the sample from prenumbered ship- 
ping documents. 

(2) Test a sample of sales transactions, selecting the sample from sales invoices 
recorded in the sales journal. 

(3) Confirm accounts receivable. 

(4) Review the aged accounts receivable trial balance. 


c. The confirmation of customers’ accounts receivable rarely provides reliable evidence 
about the completeness assertion because 
(1) customers may not be inclined to report understatement errors in their accounts. 
2) recipients usually respond only if they disagree with the information on the request. 
3) many customers merely sign and return the confirmation without verifying details. 
4) there is likely to be reliable third-party evidence available. 


DISCUSSION QUESTIONS AND PROBLEMS 


16-22 (OBJECTIVE 16-1) Because revenue recognition is presumed to be a fraud risk in most 
audits, generally the double-entry nature of accounting means the existence of accounts 
receivable is also at risk. In recent years, several high-profile incidents of improper rev- 
enue recognition attracted the attention of the business media. The SEC has also expressed 
concerns about the number of instances of improper revenue recognition identified by 
SEC staff. One revenue issue involves “bill and hold” sales. Read the SEC guidance on rev- 
enue recognition (www.sec.gov/interps/account/sabcodet13.htm) to answer the following 
questions: 


a. What does the SEC indicate are the four basic criteria for determining whether rev- 
enue is realized or realizable? 

b. What is a “bill and hold” transaction? 

c. Why would a bill and hold transaction normally not qualify as a sale? What might 
justify recording a bill and hold transaction as a sale with a related receivable? 

d. A customer of your audit client, Henson, LLC, made a formal, written request to es- 
tablish a bill and hold arrangement in November 2016, an arrangement that is typical 
in the industry. The customer's written request outlines a delivery schedule that will 
begin in February 2017. As of November 2016, the product to be shipped in February 
is already complete and ready for shipment. Because the sale was completed in 2016, 
your audit client would like to record the bill and hold transaction described as a sale 
in 2016. You do not recall noticing any inventory held in a separate area of the client’s 
warehouse during the December 31, 2016, inventory observation. In making your 
determination regarding the timing of the revenue recognition, what criteria has the 
SEC determined to be important? 


16-23 (OBJECTIVES 16-1, 16-2, 16-4) Teklas is an automobile parts manufacturer based in 
Turkey. In recent years, Teklas has successfully expanded its business and now exports 
to auto manufacturers around the world. As part of the expansion, Teklas has accepted 
new clients from different regions including across Europe, Africa, and Asia. Also as part 
of the expansion, an increasing number of sales are financed by the company with client 
payment terms ranging from 30 to 90 days. It is customary for some Turkish companies to 
factor receivables to speed up cash collection and reduce doubtful accounts risk. In your 
audit of Teklas, part of your task is to assess whether accounts receivables are corrected 
reported in the ledger. 


a. Based on the facts above, what accounts receivable balance related audit objective(s) 
might have a high risk of material misstatement? 
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b. An increase in accounts receivable is expected since sales overall are increasing. 
What related factors will you consider related to changes in the accounts receivable 
balance? 

c. Does it make sense to use negative confirmation to test for the accuracy of accounts 
receivable balances for Teklas? 

d. How might you test that Teklas has rights to the accounts receivables reported in its 
ledger? 

16-24 (OBJECTIVE 16-3) You have asked your audit trainee Sharizat to perform the following 
tasks. She wanted to know why you are asking her to perform such mundane tasks. As 
mentioned earlier, your client Lau Ah Pek Berhad has not purchased any accounting soft- 
ware and their financial records are all performed in Excel worksheets. Your client’s year 
end is 31 December. Explain to her the objectives of the tasks. 

a. Pick any 10 cash till roll receipts from 30 December, 10 receipts from 31 December, Required 
10 receipts from 1 January, and 10 receipts from 7 January, and trace the items on the 
receipts to the stock cards. 

b. Extract the 20 highest balances from the Accounts Receivable trial balance, prepare 
the confirmation letters to the selected company, have the client sign the letters, and 
have them sent out. 

c. Peruse the Accounts Receivable ledger for any unpaid invoices above 90 days. 

d. Cast the balances of the Accounts Receivable Trial balance and trace this to the 
General Ledger. 


16-25 (OBJECTIVE 16-3) The eight accounts receivable balance-related audit objectives are: 


1. Accounts receivable in the aged trial balance agree with related master file amounts, 
and the total is correctly added and agrees with the general ledger. (Detail tie-in) 

. Recorded accounts receivable exist. (Existence) 

. Existing accounts receivable are included. (Completeness) 

. Accounts receivable are accurate. (Accuracy) 

. Accounts receivable are correctly classified. (Classification) 

. Cutoff for accounts receivable is correct. (Cutoff) 

. Accounts receivable is stated at realizable value. (Realizable value) 

. The client has rights to accounts receivable. (Rights) 


CON DW BW LN 


a. For each of the above, identify the specific risk that the audit objective is intended to Required 
address. 
b. Then, list audit procedure(s) that can test the respective audit objective. 


16-26 (OBJECTIVE 16-3) The following are the eight balance-related audit objectives, six tests 
of details of balances for accounts receivable, and seven tests of controls or substantive 
tests of transactions for the sales and collection cycle: 


Balance-Related Audit Objective 


Detail tie-in Classification 
Existence Cutoff 
Completeness Realizable value 
Accuracy Rights 


Test of Details of Balances, Test of Control, 
or Substantive Test of Transactions Audit Procedure 
1. Confirm accounts receivable ending balances and sales terms, such as right of return 
and consignment arrangements. 
2. Review sales returns after the balance sheet date to determine whether any are 
applicable to the current year. 
3. Compare dates on shipping documents with the sales journal throughout the year. 
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Required 


10. 


. Perform alternative procedures for nonresponses to confirmations. 
. Examine sales transactions for related-party or employee sales recorded as regular sales. 
. Examine duplicate sales invoices for consignment sales and other shipments for 


which title has not passed. 


. Trace a sample of accounts from the accounts receivable master file to the aged trial 


balance. 


. Trace recorded sales transactions to shipping documents to determine whether a 


document exists. 


. Examine duplicate sales invoices for initials that indicate internal verification of 


extensions and footings. 
Trace a sample of shipping documents to related sales invoice entries in the sales 
journal. 


. Compare amounts and dates on the aged trial balance with the accounts receivable 


master file. 


. Trace from the sales journal to the accounts receivable master file to make sure the 


information is the same. 


. Inquire of management whether there are notes from related parties included with 


trade receivables. 


. Identify which procedures are tests of details of balances, which are tests of controls, 


and which are substantive tests of transactions. 


. For each balance-related audit objective, identify which test of details of balances and 


test of controls or substantive test of transactions partially satisfy the balance-related 
objective. 


16-27 (OBJECTIVE 16-3) Jarmell Foodstuffs sells produce to small grocery stores. 


Prenumbered shipping documents are required by the company to be issued for each 


sale. The shipping clerk writes the date on the shipping document whenever there is a 
shipment or pickup. The final shipment made in the fiscal year ending June 30, 2011, was 
recorded on document 5427. Shipments are billed in the order the billing clerk receives 
the shipping documents. For late June and early July, shipping documents are billed on 
sales invoices as follows: 


Shipping Document No. Sales Invoice No. 
5423 6237 
5424 6223 
5425 6226 
5426 6235 
5427 6236 
5428 6216 
5429 6238 
5430 6242 
5431 6231 
5432 6229 


The June and July sales journals have the following information included: 
SALES JOURNAL—JUNE 2013 


Day of Month Sales Invoice No. Amount of Sale ($) 
23 6223 699.32 
27 6226 2,978.61 
28 6235 827.23 
31 6242 504.96 
31 6236 35.42 
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SALES JOURNAL—JULY 2013 


Day of Month Sales Invoice No. Amount of Sale ($) 
3 6237 7,236.49 
3 6229 99.87 
4 6238 423.32 
5 6216 511.12 
6 6231 1,306.75 


. What are the GAAP requirements for a correct sales cutoff? 
. Which sales invoices, if any, are recorded in the wrong accounting period? Prepare an 


adjusting entry to correct the financial statements for the year ending June 30, 2011. 
Assume that the company uses a periodic inventory system (i.e., inventory and cost 
of sales do not need to be adjusted). 


. Assume that the shipping clerk accidentally wrote June 30 on shipping documents 


5428 through 5430. Explain how that will affect the correctness of the financial state- 
ments. How will you, as an auditor, discover that error? 


. Describe, in general terms, the audit procedures you would follow in making sure 


that cutoff for sales is accurate at the balance sheet date. 


. Identify internal controls that will reduce the likelihood of cutoff misstatements. 


How would you test each control? 


16-28 (OBJECTIVE 16-3) The tests of details of balances for accounts receivable are intended 
to satisfy the following audit objectives: 


1, 


CON DW BW NH 


Accounts receivable are correctly added and agree with the master file and the general 
ledger 


. Recorded accounts receivable exist 

. Existing accounts receivable are included 

. Accounts receivable are accurate 

. Accounts receivable are properly classified 

. Cutoff for accounts receivable is correct 

. Accounts receivable is stated at realizable value 
. The client has rights to accounts receivable 


For the following procedures, identify which audit objective each procedure is intended 
to satisfy. 


a. 


b. 
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a. 


Add the columns on the aged trial balance and compare the total with the general ledger. 
Discuss with the sales manager whether any sales allowances have been granted after 
the balance sheet date that may apply to the current period. 


. Compare the date on a sample of shipping documents throughout the year with re- 


lated duplicate sales invoices and the accounts receivable master file. 


. Compare the date on a sample of shipping documents a few days before and after the 


balance sheet date with related sales journal transactions. 


. Review minutes of board meetings and loan documents to see if accounts receivables 


have been sold or used as collateral 
Send positive confirmation to a large sample of the client’s debtors, requesting that 
they confirm the existence and dollar amount of their outstanding receivable 


16-29 (OBJECTIVE 16-4) Dodge, CPA, is auditing the financial statements of a manufactur- 
ing company with a significant amount of trade accounts receivable. Dodge is satisfied 
that the accounts are correctly summarized and classified and that allocations, reclas- 
sifications, and valuations are made in accordance with GAAP. Dodge is planning to use 
accounts receivable confirmation requests to obtain sufficient appropriate evidence as to 
trade accounts receivable. 


Identify and describe the two primary forms of accounts receivable confirmation 
requests and indicate what factors Dodge will consider in determining when to 
use each. 
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Required 


Required 


Required 
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b. Assume that Dodge has received a satisfactory response to the confirmation 
requests. Describe how Dodge can evaluate collectibility of the trade accounts 
receivable. 

c. What are the implications to a CPA if, during an audit of accounts receivable, some 
of a client’s trade customers do not respond to a request for positive confirmation of 
their accounts? 

d. What auditing steps should a CPA perform if there is no response to a second request 
for a positive confirmation?* 


Ge... 16-30 (OBJECTIVES 16-3, 16-4) Ballarpur Industries Limited (BILT) is the largest paper 

A@e@ manufacturer in India. In planning your audit of BILT’s accounts receivable, the controller 
of BILT notifies you that many of their paper records (e.g. invoice duplicates and shipping 
documents) were destroyed in a fire at their accounting department last year. The com- 
puter records of customer accounts master files were not affected. 


Required a. What audit procedures related to accounts receivables rely on access to the paper 
records of the client? 
b. How does the lack of access to the accounting records of BILT affect your audit of 
their accounts receivable? 


16-31 (OBJECTIVES 16-2, 16-3) Fastjet Airlines Limited (Tanzania) is a low-cost airline 
operating out of Tanzania. Fastjet commenced operations in November 2012 and is 
looking to expand both its customer base and destination offerings. In conducting your 
audit, you are unsure how Fastjet will be able to manage its credit issuance and collec- 
tions. Selected information from the company’s 2013 and 2014 annual reports are shown 


below (in US$'000): 
Year ending Year ending 
31 Dec 2013 31 Dec 2014 
Sales 26,117 53,759 
Trade receivables 
Not past due 164 0 
0-60 days past due (allowance) 1,111 (72) 2,975 (542) 
More than 60 days (allowance) 235 (28) 0 
Total Trade Receivables 1,510 2,975 
Total Allowance 100 542 
Required a. Based on the information provided, list which analytical procedures you can use to 
determine whether trade receivables and the allowance for doubtful receivables are 
accurately reported. 


b. What additional information is needed to conduct more detailed analytical proce- 
dures related to receivables and allowance for doubtful accounts? 


c. What is your conclusion on whether Fastjet’s trade receivables and allowance for 
doubtful receivables are accurately reflected on December 31, 2014? 


16-32 (OBJECTIVE 16-4) You have been assigned to the first audit of the Chicago Company 
for the year ending March 31, 2016. Accounts receivable were confirmed on December 
31, 2015, and at that date the receivables consisted of approximately 200 accounts with 
balances totaling $956,750. Fifty of these accounts, with balances totaling $650,725, 
were selected for confirmation. All but 10 of the confirmation requests have been 
returned; 24 were returned without any exceptions, 6 had minor differences that have 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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been cleared satisfactorily, and 10 confirmations had the following information and 
comments: 


1. 


wa Wh 


CON 


of 


We are sorry, but we cannot answer your request for confirmation of our account as 
the PDQ Company uses an accounts payable voucher system and can only confirm 
individual invoices. 


. The balance of $1,050 was paid on December 28, 2015. 

. The balance of $7,750 was paid on January 5, 2016. 

. The balance of $2,975 was paid on December 13, 2015. 

. We do not owe you anything at December 31, 2015, as the goods, represented by 


your invoice dated December 30, 2015, number 25050, in the amount of $11,550, 
were received on January 5, 2016, on FOB destination terms. 


. An advance payment of $2,500 made by us in November 2015 should cover the two 


invoices totaling $1,350 shown on the statement attached. 


. This confirmation was returned as undeliverable by the post office. 
. Weare contesting the propriety of this $12,525 charge. We think the charge is excessive. 
. We do not owe this balance as our agreement with the company allows us to return 


any unsold goods without penalty. Amount okay. As the goods have been shipped to 
us on consignment, we will remit payment upon selling the goods. 


. Your credit memo dated December 5, 2015, in the amount of $440 cancels the bal- 


ance above. 


. Indicate which of these confirmation responses likely represent timing differences. 
. Which of the 10 confirmation responses likely represent a misstatement? Explain 


why the response indicates a misstatement. 


. For each of the 10 confirmation responses, indicate the procedures you would per- 


form to determine whether the exception is a misstatement or has been appropri- 
ately recorded by the client.* 


16-33 (OBJECTIVES 16-3, 16-5) The following are various changes in audit circumstances. 


Audit Circumstance 


1. 


2. 
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b. 


Substantive analytical procedures indicated a significant slowing in accounts receiv- 
able turnover. 

The client entered into sales contracts with new customers that differ from the cli- 
ent’s standard sales contracts. 


. The client had a significant increase in sales near year-end. 
. Accounts receivable confirmations were ineffective due to a very low response rate 


in the prior year audit. 


. The client began experiencing an increase in returns due to product changes that 


resulted in increased defects. 


. You found several pricing errors in your substantive tests of transactions for sales. 
. In performing substantive tests of transactions for cash receipts, you found that re- 


ceipts were promptly recorded in customer accounts, but there were delays in depos- 
iting the receipts at the bank. 


. The client entered into a new loan agreement with the bank. Accounts receivable are 


pledged as collateral for the loan. 


. The client did not reconcile the accounts receivable subsidiary records with the ac- 


counts receivable balance in the general ledger on a regular basis. 


Match each change in audit circumstance with the most likely test of details of balances 
response. Each response is used once. 
a. 


Expand testing of sales returns after year-end and compare the level of returns with 
the prior year. 

Send positive confirmations that include requests for information on side agree- 
ments and special terms. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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Required 
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Required 


c. Increase the number of accounts traced from the accounts receivable trial balance to 
the accounts receivable subsidiary records. 
d. Expand the review of cash receipts after year-end to evaluate the collectibility of 
accounts receivable. 
e. Increase the sample size for sales cutoff testing for sales recorded before year-end. 
f. Send a confirmation to the bank confirming amounts pledged as collateral under 
loan agreements. 
. Increase the sample size for positive confirmations of accounts receivable. 
. While at the client’s premises at year-end, obtain information on the last few cash 
receipts at year-end for cash receipts cutoff testing. 
i. Perform alternative procedures to test the existence and accuracy of accounts receiv- 
able instead of sending positive confirmations. 


a7 


16-34 (OBJECTIVE 16-4) Samsung is a Korean conglomerate that operates in many industries 
including consumer electronics, life insurance, shipbuilding, and advertising. You are 
tasked with confirming the accounts receivable of two subsidiaries owned by Samsung 
group, specifically Samsung Digital Imaging — an electronics company that manufactures 
photo and video equipment — and Samsung Everland — a theme park operator. 


In designing your audit regarding the confirmation of receivables, you note the following 
decisions that must be made: 


* Type of confirmation 
¢ Timing 

* Sampling 

* Analysis of differences 


For each decision, list the possible choices in designing the confirmation of receivables. 
Also, briefly explain the factors to consider when making each decision. Also explain 
how the procedure might differ between confirmation for Samsung Digital Imaging and 
Samsung Everland. 
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CASE 


16-35 (OBJECTIVES 16-1, 16-3, 16-4, 16-5) You are auditing the sales and collection cycle for the 
Smalltown Regional Hospital, a small not-for-profit hospital. The hospital has a reputa- 
tion for excellent medical services and deficient record keeping. The medical people have a 
tradition of doing all aspects of their job correctly, but because of a shortage of accounting 
personnel, there is not time for internal verification or careful performance. In previous 
years, your CPA firm has found quite a few misstatements in billings, cash receipts, and 
accounts receivable. As in all hospitals, the two largest assets are accounts receivable and 
property, plant, and equipment. 

The hospital has several large loans payable to local banks, and the two banks have told 
management that they are reluctant to extend more credit, especially considering the modern 
hospital that is being built in a nearby city. In the past, county taxes have made up deficits, but 
in the past year, the county has also been incurring deficits because of high unemployment. 

In previous years, your response from patients to confirmation requests has been 
frustrating at best. The response rate has been extremely low, and those who did respond 
did not know the purpose of the confirmations or their correct outstanding balance. You 
have had the same experience in confirming receivables at other hospitals. 

You conclude that control over cash is excellent and the likelihood of fraud is extremely 
small. You are less confident about unintentional errors in billing, recording sales, cash re- 
ceipts, accounts receivable, and bad debts. 


a. Identify the major factors affecting client business risk and acceptable audit risk for Required 
this audit. 
b. What inherent risks are you concerned about? 
c. What risks would you consider to be significant risks? 
d. For each of the following, explain whether you plan to emphasize the tests in the audit 
of the sales and collection cycle and give reasons: 
(1) Tests of controls (3) Substantive analytical procedures 
(2) Substantive tests of transactions (4) Tests of details of balances 
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INTEGRATED CASE APPLICATION— 
PINNACLE MANUFACTURING: PART VII 
16-36 (OBJECTIVES 16-2, 16-3, 16-4) In Parts IV, V, and VI of this case study, you were asked 


to apply concepts we have discussed in previous chapters related to the sales and collec- 
tion cycle to the acquisition and cash disbursement cycle. Parts IV, V, and VI dealt with 
obtaining an understanding of internal control and assessing control risk for transactions 
affecting accounts payable of Pinnacle Manufacturing. In Part VII, you will design substan- 
tive analytical procedures and design and perform tests of details of balances for accounts 
payable. 

Assume that your understanding of internal controls over acquisitions and cash dis- 
bursements and the related tests of controls and substantive tests of transactions support 
an assessment of a low control risk. The listing of the 519 accounts making up the ac- 
counts payable balance of $12,969,686 at December 31, 2016, is available online. 


Required a. List those relationships, ratios, and trends that you believe will provide useful infor- 
mation about the overall reasonableness of accounts payable. You should consider 
income statement accounts that affect accounts payable in selecting the analytical 
procedures. 

b. Study Table 18-5 (p. 620) containing balance-related audit objectives and tests of de- 
tails of balances for accounts payable to be sure you understand each procedure and 
its purpose. Prepare an audit program for accounts payable in a performance format, 
using the audit procedures in Table 18-5. The format of the audit program should be 
similar to Table 16-5 (p. 546). Be sure to include a sample size for each procedure. 

c. Assume for requirement b. that (1) assessed control risk had been high rather than 
low for each transaction-related audit objective, (2) inherent risk was high for each 
balance-related audit objective, and (3) analytical procedures indicated a high poten- 
tial for misstatement. What would the effect have been on the audit procedures and 
sample sizes for requirement b.? 

d. Confirmation requests were sent to a stratified sample of 51 vendors listed in Figure 
16-8. Confirmation responses from 45 vendors were returned indicating no differ- 
ence between the vendor’s and the company’s records. Figure 16-9 (p. 560) presents 
the six replies that indicate a difference between the vendor's balance and the com- 
pany’s records. The auditor’s follow-up findings are indicated on each reply. Prepare 
an audit schedule similar to the one illustrated in Figure 16-10 (p. 562) to determine 
the misstatements, if any, for each difference. The audit schedule format shown in 
Figure 16-10 is available online. The exception for Fiberchem is analyzed as an il- 
lustration. Assume that Pinnacle Manufacturing took a complete physical inventory 
at December 31, 2016, and the auditor concluded that recorded inventory reflects all 
inventory on hand at the balance sheet date. Include the balances confirmed without 
exception as one amount on the schedule for each stratum, and total the schedule 
columns. 

e. Estimate the total misstatement in the income statement, not just the misstatements 
in the sample, based on the income statement misstatements you identified in re- 
quirement d. The total misstatement should include a projected misstatement and 
an estimated allowance for sampling risk. Hint: See pages 241-243 for guidance on 
calculating the point estimate. Note that the misstatements should be projected sepa- 
rately for each stratum. You will need to determine the size of each stratum using the 
accounts payable listing. Use your judgment to estimate sampling risk, considering 
the size of the population and the amounts tested. 

f. Estimate the total misstatement in accounts payable in the same way you did for the 
income statement in requirement e. Hint: A misstatement caused by the failure to 
record an FOB origin purchase is an understatement of accounts payable and inven- 
tory and has no effect on income. 
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Pinnacle Manufacturing Sample of Accounts Payable 
Selected for Confirmation— December 31, 2016 


FIGURE 16-8 


High-Volume Items (>$250,000) 
|. American Press $ 340,767.94 
2. Clean-O-Rama Co. 317,668.63 
3. Fiberchem 793,049.89 
4. Rufus Austin Antiques 400,046.08 
5. Todd Machinery 531,073.93 
6. Welburn Manufacturing 388,836.07 $2,771,442.54 


Large Balance Items ($50,001-$250,000) 
. A & M Sandler, Inc. 81,348.54 
. American Baby/USTC 75,432.73 
. Beach & Hoover Refining 76,408.79 
. Bearing Drives Co. 73,017.24 
. Burton Martin 78,682.54 
. Cable Sys./Ind. Traf. Cons. 71,288.95 
. Eddie Ventura, Inc. 60,255.55 
. Fiberoptics 60,102.78 
. Finish Metals, Inc. 60,769.71 
. Freeman Furniture—Attn A/P 130,493.51 
. GP Chambers Co. 64,125.44 
. Godwin Drug Co. 84,331.05 
. Holy Family Hospital 117,916.83 
. Las Flores Designs, Inc. 88,644.92 
. Lean Corp. 67,985.23 
. MacDonald Svc. Corporation 147,943.95 
. McCoys, Inc. 67,936.32 
. Metadyne Corp. 85,432.51 
. Micron Power Systems 136,071.37 
. Mobil Oil 93,210.48 
. National Elevator & Mach. Co. 76,921.40 
. Norris Industries 88,314.64 
. R & B Products 80,092.46 
. Remington Supply 123,411.24 
. Safety Envelope Co. 223,950.34 
. Scandec USA, Inc. 65,942.94 
. The Dutton Company 63,882.02 
. The Haberdashery Co. 71,869.16 
. University of California 80,624.95 
. ZZZZ Bank Adjustments 64,471.21 $2,660,878.80 


Items $50,000 and less 
. Advent Sign Mfg. Co. 51,750.00 
. B&K Mfg. Co., Inc. 42,668.50 
. Bellco 42,710.74 
. Boston Shoecase Co. 52,174.50 
. Dynamic Metal Products 36,546.05 
. Everhart Co. 47,519.14 
. Fuller Travel 32,470.11 
. Good House Home Video, Inc. 46,472.67 
. Harrah’s Metals, Inc. 51,279.85 
. | C Licht Co.—Glendale Hts. 53,228.47 
. Liberty Lighting 46,802.78 
. Long Beach Lawn Service 48,488.96 
. Premier Whirlpool Bath 6,550.33 
. Quaker Transanalysis 50,363.69 
. Tower International 37,299.55 $ 646,325.34 


TOTAL TESTED $6,078,646.68 
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FIGURE 16-9 Replies to Requests for Information 


STATEMENT FROM FIBERCHEM 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2016: 


Invoice No. Date Amount 
8312 11-22-16 $300,000.00 
8469 12-02-16 178,000.00 
8819 12-18-16 315,049.89 
9002 12-30-16 32,500.00 (2) 


Balance Due 

$300,000.00 
478,000.00 
793,049.89 (1) 
825,549.89 


Auditor’s notes: 

(I) Agrees with accounts payable listing. 

(2) Goods shipped FOB Fiberchem’s plant on December 31, 2016; 
arrived at Pinnacle Manufacturing on January 4, 2017. 


STATEMENT FROM MOBIL OIL 


Pinnacle Manufacturing 
Detroit, Ml 


Amounts due as of December 31, 2016: 


Invoice No. Date Amount 
DX14777 12-23-16 $93,210.48 
DX16908 12-29-16 37,812.00 (2) 


Balance Due 
$ 93,210.48 (1) 
131,022.48 


Auditor’s notes: 

(I) Agrees with accounts payable listing. 

(2) Goods shipped FOB Pinnacle Manufacturing on December 29, 2016; 
arrived at Pinnacle Manufacturing on January 3, 2017. 


STATEMENT FROM NORRIS INDUSTRIES 


Pinnacle Manufacturing 
Detroit, Ml 


Amounts due as of December 31, 2016: 


Invoice No. Date Amount 
14896 12-27-16 $ 88,314.64 
IS5tt1 12-28-16 117,296.00 (2) 


Balance Due 
$ 88,314.64 (1) 
205,610.64 


Auditor’s notes: 
(1) Agrees with accounts payable listing. 
(2) Goods received December 30, 2016; recorded on January 2, 2017. 


g. What is your conclusion about the fairness of the recorded balance in accounts pay- 
able for Pinnacle Manufacturing as it affects the income statement and balance sheet? 
How does this affect your assessment of control risk as being low for all transaction- 
related audit objectives? Assume you decided that performance materiality for ac- 
counts payable as it affects the income statement is $250,000. 
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FIGURE 16-9 Replies to Requests for Information (Cont.) 


STATEMENT FROM REMINGTON SUPPLY 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2016: 


Invoice No. Date Amount Balance Due 
141702 11-11-16 $23,067.00 $ 23,067.00 
142619 11-19-16 12,000.00 35,067.00 
142811 12-04-16 7,100.00 42,167.00 
143600 12-21-16 27,715.24 69,882.24 
144927 12-29-16 (2) 53,529.00 123,411.24 (1) 


Auditor’s notes: 

(1) Agrees with accounts payable listing. 

(2) Goods shipped FOB Pinnacle Manufacturing on December 29, 2016; arrived at 
Pinnacle Manufacturing on January 4, 2017. 


STATEMENT FROM ADVENT SIGN MFG. Co. 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2016: 
First progress billing per contract $51,750.00 (1) 


Second progress billing per contract 7,500.00 (2) 
Total due $59,250.00 


Auditor’s notes: 

(1) Agrees with accounts payable listing. 

(2) Progress payment due as of December 31, 2016, per contract for construction 
of new custom electric sign; sign installation completed on January 15, 2017. 


STATEMENT FROM FULLER TRAVEL 


Pinnacle Manufacturing 
Detroit, Ml 


Amounts due as of December 31, 2016: 


Invoice No. Date Amount Balance Due 
84360110 12-04-16 $9,411.63 (2) $ 9,411.63 
84360181 12-12-16 9,411.63 (2) 18,823.26 
84360222 12-21-16 7,100.00 (1) 25,923.26 
84360291 12-26-16 13,646.85 (2) 39,570.11 


Auditor’s notes: 
(1) Paid by Pinnacle Manufacturing on December 28, 2016; payment in transit at year-end. 
(2) The total of these items of $32,470.11 agrees with accounts payable listing. 
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FIGURE 16-10 Pinnacle Manufacturing Analysis of Trade Accounts Payable— December 31, 2016 


Misstatement in 
Related Accounts 


Books Timing Misstatement Other Balance Income 
Balance Amount Over (Under) Difference: in Accounts Sheet Statement 


per Confirmed Amount No Payable Misstatement Misstatement Brief 
Vendor Books by Vendor Confirmed Misstatement o/s (u/s)* ols (u/s)* ols (u/s)* Explanation 


Key Accounts (>$250,000) 


F.O.B. Origin 

error: 

Dr. Inv. 
Fiberchem | $793,049.89 | $825,549.89 | $(32,500.00) $(32,500.00) $(32,500.00) Cr. AIP 


Accounts in stratum $50,001-$250,000 


Accounts in stratum less than or equal to $50,000 


* o/s = overstatement u/s = understatement 
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ACL PROBLEM 


16-37 (OBJECTIVE 16-3) This problem requires the use of ACL software, which can be ACD 
accessed through the textbook Web site. Information about downloading and using 

ACL and the commands used in this problem can also be found on the textbook Web 

site. You should read all of the reference material, especially the material on sampling, to 

answer questions a. through d. For this problem, use the “Invoices” file in the “Sales and 

Collection” subfolder under tables in the ACL_Rockwood project. This file contains infor- 

mation on sales invoices generated during calendar year 2014, including those that have 

been paid versus those still outstanding. The suggested command or other source of infor- 

mation needed to solve the problem requirement is included at the end of each question. 


a. Using the Invoices file, filter the file to retain only those invoices that are still out- Required 
standing and save this filter as “Accounts_Receivable.” (Filter) Determine the number 
and total dollar amount of the outstanding invoices (Total). 

b. Determine accounts receivable outstanding from each customer and total the 
amount for comparison to part a. (Summarize and Total) Which customer number 
has the largest balance due? 

c. What is the largest and smallest account balance outstanding? (Quick Sort) 

d. Using the “Accounts_Receivable” data, age the balances based on invoice date. Use 
December 31, 2014 as the cutoff date, and enter aging periods of 0, 30, 60, and 90 
days. (Age) How many invoices are more than 90 days outstanding? How will the 
auditors use the aging information in the audit of accounts receivable? 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


17-1 Differentiate audit sampling 
for tests of details of 
balances and for tests of 
controls and substantive 
tests of transactions. 

17-2 Apply nonstatistical sampling 
to tests of details of balances. 


17-3 Apply monetary unit sampling. 


17-4 Describe variables sampling. 
17-5 Use difference estimation in 
tests of details of balances. 


AUDIT SAMPLING FOR 
TESTS OF DETAILS OF 
9 BALANCES 


Both Statistical and Nonstatistical Sampling Are Acceptable 
Under Auditing Standards, But Whichever Is Used, It Must 
Be Done Right 


Bob Lake was the manager on the audit of Images, Inc., a specialty retailer that had shops 
throughout the Midwest. Images appealed to upscale working women and offered its own 
credit card. Images’ accounting was done centrally. Transactions were captured online and sales 
and accounts receivable files were maintained on a database. 


Bob Lake’s firm encouraged the 
use of statistical sampling in its 
practice and provided a training 
program for the development of 
a statistical coordinator for each 
office. The coordinator in Lake’s 
office was Barbara Ennis. Lake 
believed that sales transactions 
and accounts receivable confir- 
mation tests should be done 
using statistical sampling and he 
asked Ennis to help design and 
oversee the statistical aspects of 
this testing. 


Ennis developed a program for the design of confirmation audit procedures as part of doing 
tests of details of balances for accounts receivable. Her work included determining sample 
sizes. She left the program with Lake to carry out and said that she would be available to help 
evaluate the results after the tests were performed. 


When all the confirmation replies were received or alternative procedures were completed 
several weeks later, Lake called Ennis to do the statistical evaluation. Much to his dismay, he 
found out that Ennis had left the firm, and worse, there was no statistically trained person to 
take her place. Lake was under a lot of pressure to get the job completed and decided to make 
the statistical calculations himself. Based on his calculations, he concluded that the potential 
misstatement was large, but not material, so Lake concluded the objectives of the confirmation 
tests had been met. 


The next year, Images, Inc’s earnings declined sharply, partially because of large write-offs of 
accounts receivable. The stock price dropped sharply and a class action suit was filed naming 
Lake's firm among the defendants. An outside expert was brought in to review the audit docu- 
mentation. The expert redid all of Lake’s work and found errors in the statistical calculations. 
The expert calculated that the misstatement in accounts receivable, based on the auditor’s sam- 
ple, was significantly more than a material amount. Lake’s firm settled the suit for $3.5 million. 
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In Chapter 16, we moved into phase III of the audit process by examining substantive analytical procedures and 
tests of details of balances for accounts receivable. We will now continue with phase III by discussing sampling for 
accounts receivable, including determining sample size, selecting items to test from the population, and evaluating 
sample results. Although the concepts in this chapter deal with accounts receivable, they apply to the audit of many 
other account balances. 

As the story about the audit of Images, Inc., demonstrates, auditors must correctly use sampling to avoid mak- 
ing incorrect conclusions about a population. While both statistical and nonstatistical audit sampling methods are 
used extensively for tests of details of balances, auditors must decide which method to use, depending on their pref- 
erence, experience, and knowledge about statistical sampling. This chapter should help you make correct inferences 
about populations using either statistical or nonstatistical methods. 

Before starting the study of this chapter, we suggest you refer to Figure 13-9 on page 430 to be sure you understand 
where we are in the audit process. At this stage, all items in phases I and II will have been completed before auditors 
determine sample size and items to select from the population. Also, the auditor will have completed substantive 
analytical procedures and designed audit procedures for tests of details of balances, as covered in Chapter 16 (part of 
phase III). The auditor considers risk assessments, materiality, and the results of tests of controls, substantive tests of 
transactions, and substantive analytical procedures in deciding the sampling approach and extent of sampling for tests 
of details. 


COMPARISONS OF AUDIT SAMPLING FOR TESTS 
OF DETAILS OF BALANCES AND FOR TESTS OF CONTROLS 
AND SUBSTANTIVE TESTS OF TRANSACTIONS 


Most of the sampling concepts for tests of controls and substantive tests of transac- ‘OBJECTIVE 17-1 


tions, which were discussed in Chapter 15, apply equally to sampling for tests of = 

: ; ( : ifferentiate audit sampling for 
details of balances. In both cases, an auditor wants to make inferences about the entire acts of details of balances and for 
population based on a sample. Both sampling and nonsampling risks are therefore tests of controls and substantive 
important for tests of controls, substantive tests of transactions, and tests of details of _ tests of transactions. 
balances. To address sampling risk, auditors can use either nonstatistical or statistical 
methods for all three types of tests. 

The main differences among tests of controls, substantive tests of transactions, 
and tests of details of balances are in what the auditor wants to measure. 


Type of Test What It Measures 
Tests of controls * The operating effectiveness of internal controls 
Substantive tests of transactions * The operating effectiveness of internal controls 


* The monetary correctness of transactions in the 
accounting system 


Tests of details of balances ¢ Whether the dollar amounts of account balances 
are materially misstated 


Auditors perform tests of controls and substantive tests of transactions: 


* To determine whether the exception rate in the population is sufficiently low 

* To reduce assessed control risk and thereby reduce tests of details of balances 

¢ For larger public companies, to conclude that the control is operating effectively 
for purposes of auditing internal control over financial reporting 


Unlike for tests of controls and substantive tests of transactions, auditors rarely use 
rate of occurrence tests in tests of details of balances. Instead, auditors use sam- 
pling methods that provide results in dollar terms. There are three primary types of 
sampling methods used for calculating dollar misstatements in account balances 
addressed in this chapter: nonstatistical sampling, monetary unit sampling, and 
variables sampling. 
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NONSTATISTICAL SAMPLING 


Apply nonstatistical sampling to 
tests of details of balances. 


State the Objectives 
of the Audit Test 


Decide Whether Audit 
Sampling Applies 
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Define a Misstatement 


Audit sampling for tests of details of balances is similar to audit sampling for tests of 
controls and substantive tests of transactions, although the objectives differ. The steps 
involved parallel those used for sampling for tests of controls and substantive tests of 
transactions. The primary differences in applying audit sampling for tests of details of 
balances are indicated in italics. 


Steps—Audit Sampling for 
Tests of Controls and Substantive 
Tests of Transactions (see p. 490) 


Plan the Sample 


Steps—Audit Sampling for 
Tests of Details of Balances 
Plan the Sample 


1. State the objectives of the audit test. 1. State the objectives of the audit test. 


2. Decide whether audit sampling 2. Decide whether audit sampling 
applies. applies. 

3. Define a misstatement. 3. Define attributes and exception 

conditions. 

4. Define the population. 4. Define the population. 

5. Define the sampling unit. 5. Define the sampling unit. 

6. Specify tolerable misstatement. 6. Specify the tolerable exception rate. 

7. Specify acceptable risk of incorrect 7. Specify acceptable risk of 
acceptance. overreliance. 

8. Estimate misstatements in the 8. Estimate the population exception 
population. rate. 

9. Determine the initial sample size. 9. Determine the initial sample size. 


Select the Sample and 
Perform the Audit Procedures 


Select the Sample and 
Perform the Audit Procedures 


10. Select the sample. 
11. Perform the audit procedures. 


10. Select the sample. 
11. Perform the audit procedures. 


Evaluate the Results Evaluate the Results 


12. Generalize from the sample to the 
population. 

13. Analyze the misstatements. 

14. Decide the acceptability of the 
population. 


12. Generalize from the sample to the 
population. 

13. Analyze the exceptions. 

14. Decide the acceptability of the 
population. 


Auditors sample for tests of details of balances to determine whether the account bal- 
ance being audited is fairly stated. The population of 40 accounts receivable in Table 17-1, 
totaling $207,295, illustrates the application of nonstatistical sampling. An auditor will 
do tests of details of balances to determine whether the balance of $207,295 is materially 
misstated. 


As stated in Chapter 15, “Audit sampling applies whenever the auditor plans to reach 
conclusions about a population based on a sample.” Although auditors commonly 
sample in many accounts, in some situations sampling does not apply. For the popula- 
tion in Table 17-1, the auditor may decide to audit only items over $5,000 and ignore 
all others because the total of the smaller items is immaterial. Similarly, if the auditor is 
verifying fixed asset additions and finds many small additions and one extremely large 
purchase of a building, the auditor may decide to ignore the small items entirely. In 
either case, the auditor has not sampled. 


Because audit sampling for tests of details of balances measures monetary mis- 
statements, a misstatement exists whenever a sample item is misstated. In auditing 


Arens, Alvin, et@(QM%pditing and AssuRaré SeideSPEBGOKT Dds OEtibH PotsID FAP ROGASGITED DHE SADE KOO taECTION CYCLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-23 03:43:50. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Rave illustrative Accounts Receivable Population 
Population Item Recorded Amount 
Population Item Recorded Amount (cont.) (cont.) 
| $ 1,410 2I $ 4,865 
2, 9,130 22 770 
3 660 23 2,305 
4 3,355 24 2,665 
5 5,725 25 1,000 
6 8,210 26 6,225 
7 580 27 3,675 
8 44,110 28 6,250 
©) 825 29 1,890 
10 PS) 30 27,705 
II 2,270 31 935 
12 50 32 5,595 
13 5,785 33 930 
14 940 34 4,045 
15 1,820 35 9,480 
16 3,380 36 360 
17 530 37 1,145 
18 955 38 6,400 
19 4,490 39 100 
20 17,140 40 8,435 
$207,295 


accounts receivable, any client misstatement in a customer balance included in the 
auditor’s sample is a misstatement. As discussed in Chapter 16, the auditor must dis- 
tinguish misstatements from differences such as timing differences in the recording of 
transactions that do not represent misstatements. 


In tests of details of balances, the population is defined as the items making up the 
recorded dollar population. The recorded population of accounts receivable in Table 17-1 
consists of 40 accounts totaling $207,295. Most accounting populations that audi- 
tors sample will, of course, include far more items totaling a much larger dollar 
amount. The auditor will evaluate whether the recorded population is overstated or 
understated. 


Stratified Sampling For many populations, auditors separate the population into 
two or more subpopulations before applying audit sampling. This is called stratified 
sampling, where each subpopulation is a called a stratum. Stratification enables the 
auditor to emphasize certain population items and deemphasize others. In most audit 
sampling situations, including confirming accounts receivable, auditors want to em- 
phasize the larger recorded dollar values, so they define each stratum on the basis of 
the size of recorded dollar values. 

By examining the population in Table 17-1, you can see that there are different 
ways to stratify the population. Assume that the auditor decided to stratify as follows: 


Define the Population 


No. in Dollars in 
Stratum Stratum Criteria Population Population 
| >$15,000 3 $ 88,955 
2 $5,000—$15,000 10 71,235 
<$5,000 27 47,105 
40 $207,295 
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Define the 
Sampling Unit 


Specify Tolerable 
Misstatement 


Specify Acceptable Risk 


of Incorrect Acceptance 
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There are many alternative ways to stratify this population. One example is to 
have four strata (make stratum 3 items between $2,000 and $5,000, and add a fourth 
stratum for items less than $2,000). 


For nonstatistical audit sampling in tests of details of balances, the sampling unit is 
almost always the items making up the account balance. For example, for the accounts 
receivable in Table 17-1, the sampling unit will be the customer number. Auditors can 
use the items making up the recorded population as the sampling unit for testing all 
audit objectives except completeness. If auditors are concerned about the complete- 
ness objective, they should select the sample from a different source, such as custom- 
ers with zero balances. Accordingly, the sampling unit for a completeness test will be 
customers with zero balances. 


Tolerable misstatement is the application of performance materiality to a particu- 
lar sampling procedure. Performance materiality was defined in Chapter 8 and is an 
amount set less than materiality for the financial statements as a whole and applied 
to audit segments to reduce to an appropriately low level the probability that the 
aggregate of uncorrected and undetected misstatements exceeds materiality for the 
financial statements as a whole. Tolerable misstatement may be the same amount as 
performance materiality, or may be lower if the population from which the sample 
is selected is smaller than the account balance. Auditors seek an appropriate level of 
assurance that the actual misstatements in the population do not exceed tolerable 
misstatement. The required sample size increases as tolerable misstatement decreases 
for the sampling procedure. 


For all statistical and nonstatistical sampling applications, auditors risk making incor- 
rect quantitative conclusions about the population. This is always true unless the 
auditor tests 100 percent of the population. 

Acceptable risk of incorrect acceptance (ARIA) is the risk that the sample 
supports the conclusion that the recorded account balance is not materially mis- 
stated when it is materially misstated. ARIA measures the auditor’s desired assurance 
for an account balance. For greater assurance in auditing a balance, auditors will set 
ARIA lower. Note that ARIA is the equivalent term to ARO (acceptable risk of over- 
reliance) for tests of controls and substantive tests of transactions. Like for ARO, 
ARIA can be set quantitatively (such as 5% or 10%), or qualitatively (such as low, 
medium, or high). 

There is an inverse relationship between ARIA and required sample size. If, for 
example, an auditor decides to reduce ARIA from 10 percent to 5 percent, the required 
sample size will increase. Stated differently, if the auditor is less willing to take risk, a 
larger sample size is needed. 

An important factor affecting the auditor’s decision about ARIA is assessed 
control risk, which, along with inherent risk, is part of the assessed risk of material 
misstatement. When internal controls are effective, control risk can be reduced, per- 
mitting the auditor to increase ARIA. This, in turn, reduces the sample size required 
for the test of details of the related account balance. 

You need to understand how ARO and ARIA interact to affect evidence accu- 
mulation. You already know from earlier chapters that tests of details of balances for 
monetary misstatements can be reduced if auditors find internal controls effective 
after assessing control risk and performing tests of controls. The effects of ARO and 
ARIA are consistent with that conclusion. If the auditor concludes that internal con- 
trols are likely to be effective, preliminary control risk can be reduced. A lower control 
risk requires a lower ARO in testing the controls, which requires a larger sample size. 
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FIGURE |7-| Effect of ARO and ARIA on Substantive Testing 


Controls Not Controls 
Considered Effective Considered Effective 


Reduce 
control risk 


ARO = 100% Reduce ARO 


Perform no Perform 
tests of controls tests of controls 


Control risk = 100% 


Use lower ARIA Use higher ARIA’ 


Perform extensive Perform reduced 
substantive testing substantive testing 


*Assumes tests of controls results were satisfactory, which permits control risk 
to remain low. 


If controls are found to be effective, control risk can remain low, which permits the 
auditor to increase ARIA (through use of the audit risk model), thereby requiring a 
smaller sample size in the related substantive tests of details of balances. Figure 17-1 
shows the effect of ARO and ARIA on substantive testing when controls are not con- 
sidered effective and when they are considered effective. 

In addition to control risk, ARIA is directly affected by acceptable audit risk and 
inversely affected by other substantive tests already performed (or planned) for the 
account balance. If auditors reduce acceptable audit risk, they should also reduce 
ARIA. If substantive analytical procedures indicate that the account balance is likely 
to be fairly stated, ARIA can be increased. In other words, substantive analytical 
procedures are evidence supporting the account balance, meaning auditors require 
smaller sample sizes in tests of details of balances to achieve the desired acceptable 
audit risk. The same conclusion is appropriate for the relationship among substantive 
tests of transactions, ARIA, and sample size for tests of details of balances. The vari- 
ous relationships affecting ARIA are summarized in Table 17-2 on the following page. 


The auditor typically makes this estimate based on prior experience with the client 
and by assessing inherent risk, considering the results of tests of controls, substan- 
tive tests of transactions, and analytical procedures already performed. The planned 
sample size increases as the amount of misstatements expected in the population 
approaches tolerable misstatement. 


When using nonstatistical sampling, auditors determine the initial sample size by 
considering the factors we’ve discussed so far. Table 17-3 (p. 594) summarizes these 
factors, including the effect of changing each factor on sample size. It shouldn’t 
be surprising that considering all of these factors requires considerable judgment. 


Estimate Misstatements 


in the Population 


Determine the Initial 
Sample Size 
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TABLE 17-2 


Relationship Among Factors Affecting ARIA, Effect on ARIA, and 
Required Sample Size for Audit Sampling 


Effect on 


Factor Affecting ARIA Example Effect on ARIA Sample Size 

Effectiveness of internal controls Internal controls are effective (reduced control risk). Increase Decrease 
(control risk) 

Likelihood of misstatements (inherent risk) Misstatements are considered unlikely (lower inherent risk). Increase Decrease 

Substantive tests of transactions No exceptions were found in substantive tests of Increase Decrease 


transactions. 


Acceptable audit risk 


Substantive analytical procedures 


Likelihood of bankruptcy is low (increased acceptable Increase Decrease 
audit risk). 
Substantive analytical procedures are performed with Increase Decrease 


no indications of likely misstatements. 


Sample sizes between nonstatistical and statistical sampling should be similar. 
Accordingly, the auditor may determine the sample size for nonstatistical sampling 
using monetary unit sampling tables, which are discussed in the next section. 
Figure 17-2 presents a simple formula for computing sample size based on the AICPA 
Audit Sampling Audit Guide. 

Assume an auditor applied this formula to the population in Table 17-1 (p. 591) 
and that tolerable misstatement is $15,000. The auditor decided to eliminate from 
the recorded population the three items making up the first stratum because they 
exceed tolerable misstatement. These three individually material accounts will be 
tested separately. The remaining population to be sampled is $118,340, which is the 
combined amount of stratum 2 and 3. Further, assume that the combined assessed 
inherent and control risk is moderate and that there is a moderate risk that substantive 
tests of transactions and substantive analytical procedures will not detect a material 
misstatement. Considering these factors, the auditor determined that a 14% risk of 
incorrect acceptance (86% assurance) was appropriate. Using the table in Figure 17-2, 
the auditor applied a confidence factor of 2, and the computed sample size is 16 
[($118,340/$15,000) X 2 = 15.8]. 


Wi vecee Factors Influencing Sample Sizes for Tests of Details of Balances 


incorrect acceptance 


other relevant substantive tests)—Affect acceptable risk of 


Conditions Leading Conditions Leading 
Factor to Smaller Sample Size to Larger Sample Size 
Inherent risk—Affects acceptable risk of incorrect acceptance Low inherent risk High inherent risk 
Control risk (ARO)—Affects acceptable risk of incorrect Low control risk High control risk 
acceptance 
Results of other substantive procedures related to the same Satisfactory results in other related Unsatisfactory results in other related 
assertion (including substantive analytical procedures and substantive procedures substantive procedures 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Tolerable misstatement for a specific account Larger tolerable misstatement Smaller tolerable misstatement 
Expected size and frequency of misstatements—Affect estimated Smaller misstatements or lower frequency Larger misstatements or higher 
misstatements in the population frequency 
Dollar amount of population Smaller account balance Larger account balance 
Number of items in the population Almost no effect on sample size unless Almost no effect on sample size unless 
population is very small population is very small 
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Formula for Computing Nonstatistical Tests of Details of 
Balances Sample Size Based on AICPA Audit Sampling Formula 


FIGURE 17-2 


Population Recorded Amount* x Confidence Factor 


Sample size = 
Tolerable misstatement 


Risk of 
Incorrect Acceptance Confidence of Sample Confidence Factor 


37% 63% | 


14% 86% 2 
5% 95% 3 


*High risk items and individual items exceeding tolerable misstatement are often 
removed from the population and selected for 100 percent examination. 


When auditors use stratified sampling, they must allocate sample size among 
the strata, typically allocating a higher portion of the sample items to larger popula- 
tion items. In the example from Table 17-1, the auditor must test all items in stratum 
1, which is not audit sampling. They decided to allocate the sample size of 16 to nine 
from stratum 2 and seven from stratum 3. 


For nonstatistical sampling, auditing standards permit the auditor to use any of the selec- 
tion methods discussed in Chapter 15. The auditor will make the decision after consid- 
ering the advantages and disadvantages of each method, including cost considerations. 
For stratified sampling, the auditor selects samples independently from each stra- 
tum. In our example from Table 17-1 (p. 591), the auditor will select nine sample items 
from the 10 population items in stratum 2 and seven of the 27 items in stratum 3. 


To perform the audit procedures, the auditor applies the appropriate audit procedures 
to each item in the sample to determine whether it contains a misstatement. In the 
confirmation of accounts receivable, auditors send the sample of positive confirma- 
tions in the manner described in Chapter 16 and determine the amount of misstate- 
ment in each account confirmed. For nonresponses, they use alternative procedures 
to determine the misstatements. 

Referring to our example from Table 17-1 again, assume an auditor sends first and 
second requests for confirmations and performs alternative procedures. Also assume 
the auditor reaches the following conclusions about the sample after reconciling all 
timing differences: 

Dollars Audited 


Stratum Sample Size RecordedValue AuditedValue Client Misstatement 
| 3 $ 88,955 $ 91,695 $ (2,740) 
2 9 43,995 43,024 97 
3 a 13,105 10,947 2,158 
Total 19 $ 146,055 $ 145,666 $ 389 


Auditing standards indicate the auditor should generalize from the sample to the 
population by (1) projecting misstatements from the sample results to the population 
and (2) considering sampling risk (ARIA). In our example, will the auditor conclude 
that accounts receivable is overstated by $389? No, the auditor is interested in the 
population results, not those of the sample. It is therefore necessary to project from the 
sample to the population to estimate the population misstatement. 

The first step is to calculate a point estimate. The point estimate can be calcu- 
lated in different ways, but a common approach is to assume that misstatements in 
the unaudited population are proportional to the misstatements in the sample. That 


Select the Sample 


Perform the Audit 
Procedures 


Generalize from 

the Sample to the 
Population and Decide 
the Acceptability 

of the Population 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Educat@haptiter, £716. RU DUTSSAMRLOBNGaFOR TESTS OF DETAILS OF BALANCES é6ll 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-23 03:43:50. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


calculation must be done for each stratum and then totaled, rather than combining 
the total misstatements in the sample. In our example, the point estimate of the mis- 
statement is calculated by using a weighted-average method, as shown next. 


Client Misstatement Recorded 
+ Recorded Value Book Value Point Estimate 
Stratum of the Sample x for the Stratum = of Misstatement 
| $(2,740)/$88,955 $88,955 $(2,740) 
2 $ 971 /$43,995 71,235 1,572 
3 $2,158 /$13,105 47,105 7,757 
Total $ 6,589 


The point estimate of the misstatement in the population is $6,589, indicating an 
overstatement. The point estimate, by itself, is not an adequate measure of the popu- 
lation misstatement, however, because of sampling risk. In other words, because the 
estimate is based on a sample, it will be close to the true population misstatement, 
but it is unlikely to be exactly the same. Whenever the point estimate ($6,589 in the 
example) is less than tolerable misstatement ($15,000 in the example), the auditor 
must consider the possibility that the true population misstatement is greater than the 
amount of misstatement that is tolerable in the circumstances. This must be done for 
both statistical and nonstatistical samples. 

An auditor using nonstatistical sampling cannot formally measure sampling risk 
and therefore must subjectively consider the possibility that the true population mis- 
statement exceeds a tolerable amount. Auditors do this by considering: 


1. The difference between the point estimate and tolerable misstatement (this is 
called calculated sampling risk) 

The extent to which items in the population have been audited 100 percent 
Whether misstatements tend to be offsetting or in only one direction 

The amounts of individual misstatements 

The sample size 


Vikwhd 


In our example, suppose that tolerable misstatement is $40,000. In that case, the 
auditor may conclude it is unlikely, given the point estimate of $6,589, that the true 
population misstatement exceeds the tolerable amount (calculated allowance for sam- 
pling risk is $33,411). 

Suppose that tolerable misstatement is $15,000 (as it was in the example), only 
$8,411 greater than the point estimate. In that case, the auditor will consider other fac- 
tors. If the larger items in the population were audited 100 percent (as was done here), 
any unidentified misstatements will be restricted to smaller items. If the misstate- 
ments tend to be offsetting and are relatively small in size, the auditor may conclude 
that the true population misstatement is likely to be less than the tolerable amount. 
Also, the larger the sample size, the more confident the auditor can be that the point 
estimate is close to the true population value. In this example, when sample size is 
considered large, auditors will be more willing to accept that the true population mis- 
statement is less than tolerable misstatement. However, if one or more of these other 
conditions differs, auditors may judge the chance of a misstatement in excess of the 
tolerable amount to be high and the recorded population unacceptable. 

Even if the amount of likely misstatement is not considered material, the auditor 
must wait to make a final evaluation until the entire audit is completed. The estimated 
total misstatement and estimated sampling risk in accounts receivable must be com- 
bined with estimates of misstatements in all other parts of the audit to evaluate the 
effect of all misstatements on the financial statements as a whole. However, regardless 
of whether the sample results support the conclusion that the account is not materi- 
ally misstated, the auditor should request that the client record an adjustment for the 
factual misstatements, unless they are clearly trivial. 
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It is essential for auditors to evaluate the nature and cause of each misstatement found 
in tests of details of balances. For example, suppose that when the auditor confirmed 
accounts receivable, all misstatements resulted from the client’s failure to record 
returned goods. The auditor will determine why that type of misstatement occurred 
so often, the implications of the misstatements on other audit areas, the potential 
impact on the financial statements, and its effect on company operations. The same 
approach is followed for all misstatements. 

The auditor must do misstatement analysis to decide whether any modification 
of the audit risk model is needed. In the preceding paragraph, if the auditor concluded 
that the failure to record the returns resulted from a breakdown of internal controls, 
it might be necessary to reassess control risk. That in turn will probably cause the 
auditor to reduce ARIA, which will increase planned sample size. As we discussed in 
Chapter 9, revisions of the audit risk model must be done with extreme care because 
the model is intended primarily for planning, not evaluating results. 


When the auditor concludes that the misstatement in a population may be larger than 
tolerable misstatement after considering sampling risk, the population is not consid- 
ered acceptable. At that point, an auditor has several possible courses of action. 


Take No Action Until Tests of Other Audit Areas Are Completed Ultimately, the 
auditor must evaluate whether the financial statements taken as a whole are materi- 
ally misstated. If offsetting misstatements are found in other parts of the audit, such as 
in inventory, the auditor may conclude that the estimated misstatements in accounts 
receivable are acceptable. Of course, before the audit is finalized, the auditor must 
evaluate whether a misstatement in one account may make the financial statements 
misleading even if there are offsetting misstatements. 


Perform Expanded Audit Tests in Specific Areas If the analysis indicates an individual 
error is unique or most of the misstatements are of a specific type, it may be appropriate 
to restrict the additional audit effort to the problem area. For example, if an analysis of the 
misstatements in confirmations indicates that most of the misstatements result from fail- 
ure to record sales returns, the auditor can make an extended search of returned goods 
to make sure that they have been recorded. However, care must be taken to evaluate the 
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While auditors are hired to obtain reasonable assur- 
ance that financial statements are free from material 
misstatements, the ultimate responsibility over the 
preparation and reliability of financial statements rests 
with management themselves. In particular, manage- 
ment has the responsibility to design and implement 
accounting and governance procedures to reduce the 
likelihood of misstatement from either errors or fraud, 
and to detect such misstatements if they were to occur. 

In general, financial integrity starts with manage- 
ment and their emphasis on ethical behavior. This con- 
cept is commonly known as “tone at the top”. That is, 
management typically sets the tone with which other 
employees follow. If management is committed to 
avoiding misleading, unethical, and fraudulent behavior, 
other employees will also be more likely to exhibit 
these behaviors. Next, management, along with the 
firms’ accountants and internal auditors design the 
control practices to deter, prevent, and discover 
potential misstatements due to errors or fraud. 

Still, auditors have an important role in 
providing additional assurance that published 
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financial statements are free from material mis- 
statements due to errors or fraud. Often times, 
audit procedures will involve different sampling 
techniques. For example, the Hong Kong Institute 
of Certified Public Accountants (HKICPA), 

the organization charged with accounting and 
auditing standards in Hong Kong states that 
auditors should use different sample methods 

to reduce the risk that knowledgeable individu- 
als can preempt audit procedures. Furthermore, 
in cases that the risk of material misstatement 

is high, “increasing sample sizes or performing 
analytical procedures at a more detailed level may 
be appropriate. Also, computer-assisted audit 
techniques may enable more extensive testing 

of electronic transaction and account files.” 


Source: Hong Kong Standard on Auditing 240: The Auditor's 
Responsibilities Relating to Fraud in an Audit of Financial 
Statements. Downloaded || Nov 2015 from http://app |. 
hkicpa.org.hk/ebook/HKSA_Members_Handbook_Master/ 
volumelll/hksa240cfd.pdf 
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cause of all misstatements in the sample before a conclusion is reached about the proper 
emphasis in the expanded tests. Problems may exist in more than one area. 

When auditors analyze a problem area and correct it by proposing an adjustment 
to the client’s records, the sample items that led to isolating the problem area can then 
be shown as “correct.” The point estimate can now be recalculated without the mis- 
statements that have been “corrected.” However, this is only true when the error can be 
isolated to a specific area. U.S. auditing standards indicate that misstatements should 
be projected to the population being sampled, even if the client adjusts for the misstate- 
ment. International auditing standards indicate that an error could be an anomaly, and 
the AICPA Audit Sampling Audit Guide indicates that in limited circumstances, it may be 
appropriate to not project a misstatement to the population. As this discussion indicates, 
auditors should be cautious in reaching the conclusion to not project a misstatement, and 
should clearly document the reasons and evidence that support this conclusion. 


Increase the Sample Size If the original sample is considered representative, the rate 
of misstatements in the expanded sample will be similar to the original sample. As a re- 
sult, an increase in sample size would normally not be expected to significantly change 
the point estimate of likely misstatement in the population. However, when the auditor 
increases the sample size, sampling risk is reduced if the rate of misstatements in the ex- 
panded sample, their dollar amounts, and their direction are similar to those in the origi- 
nal sample. Therefore, increasing the sample size may allow the auditor to conclude that 
the true population misstatement is unlikely to exceed tolerable misstatement. 

Increasing the sample size sufficiently to conclude that the population is fairly 
stated is often costly, especially when the difference between tolerable misstatement 
and projected misstatement is small. Moreover, an increased sample size does not 
guarantee a satisfactory result. If the number, amount, and direction of the misstate- 
ments in the extended sample are proportionately greater or more variable than in the 
original sample, the results are still likely to be unacceptable. 

For tests such as accounts receivable confirmation and inventory observation, it is 
often difficult to increase the sample size because of the practical problem of “reopen- 
ing” those procedures once the initial work is done. By the time the auditor discovers 
that the sample was not large enough, several weeks have usually passed. 

Despite these difficulties, sometimes the auditor must increase the sample size 
after the original testing is completed. It is much more common to increase sample 
size in audit areas other than confirmations and inventory observation, but it is occa- 
sionally necessary to do so even for these two areas. When stratified sampling is used, 
increased samples usually focus on the strata containing larger amounts, unless mis- 
statements appear to be concentrated in some other strata. 


Adjust the Account Balance When the auditor concludes that an account balance is 
materially misstated, the client may be willing to adjust the book value based on the 
sample results. In the preceding example, assume the client is willing to reduce book 
value by the amount of the point estimate ($6,589) to adjust for the estimate of the mis- 
statement. The auditor’s estimate of the misstatement is now zero, but it is still necessary 
to consider sampling risk. Again, assuming a tolerable misstatement of $15,000, the au- 
ditor must now assess whether sampling risk exceeds $15,000, not the $8,411 originally 
considered. If the auditor believes sampling risk is $15,000 or less, accounts receivable 
is acceptable after the adjustment. If the auditor believes it is more than $15,000, adjust- 
ing the account balance is not a practical option. Clients are often unwilling to record 
adjustments for estimated misstatements based on a sample. However, as previously 
noted, the client is encouraged to record an adjustment for the factual misstatements, 
which will reduce the estimate of the misstatement and increase the actual allowance for 
sampling risk by the amount of the adjustment for the factual errors. 


Request the Client to Correct the Population In some cases, the client’s records 
are so inadequate that a correction of the entire population is required before the audit 
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can be completed. For example, in accounts receivable, the client may be asked to cor- 
rect the accounts receivable records and prepare the accounts receivable listing again 
if the auditor concludes that it has significant misstatements. When the client changes 
the valuation of some items in the population, the results must be audited again. 


Refuse to Give an Unmodified Opinion If the auditor believes that the recorded 
amount in an account is not fairly stated, it is necessary to follow at least one of the 
preceding alternatives or to modify the audit report in an appropriate manner. If 
the auditor believes that there is a reasonable chance that the financial statements 
are materially misstated, it would be a serious breach of auditing standards to issue 
an unmodified opinion. For purposes of reporting on internal control, the material 
misstatement should be considered a potential indicator of a material weakness in 
internal control over financial reporting. 


CONCEPT CHECK 


1. What are the major differences in the 14 steps used in nonstatistical sampling for tests 
of details of balances versus the steps for tests of controls and substantive tests of 
transactions? 


2. What alternative courses of action are appropriate when a population is rejected using 
nonstatistical sampling for tests of details of balances? When should each option be 
followed? 


MONETARY UNIT SAMPLING 


Now that we have discussed nonstatistical sampling, we will move on to statisti- 
cal sampling, starting with monetary unit sampling, which is a statistical sampling 
methodology developed specifically for use by auditors. Monetary unit sampling 
(MUS) is the most commonly used statistical method of sampling for tests of details 
of balances because it has the statistical simplicity of attributes sampling yet provides 
a statistical result expressed in dollars (or another appropriate currency). MUS is also 
called dollar unit sampling, cumulative monetary amount sampling, and sampling 
with probability proportional to size. 


MUS is similar to using nonstatistical sampling. All 14 of the steps must also be per- 
formed for MUS, although some are done differently. Understanding those differences 
is the key to understanding MUS. Let’s examine these differences in detail. 


The Definition of the Sampling Unit Is an Individual Dollar A critical feature of 
MUS is the definition of the sampling unit as an individual dollar in an account bal- 
ance. The name of the statistical method, monetary unit sampling, results from this 
distinctive feature. For example, in the population in Table 17-1 (p. 591), the sampling 
unit is 1 dollar and the population size is 207,295 dollars, not the 40 physical units 
discussed earlier. (A physical unit is an accounts receivable customer balance, an in- 
ventory item in an inventory listing, and other such identifiable units in a listing.) 

By focusing on the individual dollar as the sampling unit, MUS automatically 
emphasizes physical units with larger recorded balances. Because the sample is 
selected on the basis of individual dollars, an account with a large balance has a 
greater chance of being included than an account with a small balance. For example, 
in accounts receivable confirmation, an account with a $5,000 balance has a 10 
times greater probability of selection than one with a $500 balance, as it contains 10 
times as many dollar units. As a result, stratified sampling is unnecessary with MUS. 
Stratification occurs automatically. 


The Population Size Is the Recorded Dollar Population For example, the popu- 
lation of accounts receivable in Table 17-1 consists of 207,295 dollars, which is the 


Apply monetary unit sampling. 


Differences Between 
MUS and Nonstatistical 
Sampling 
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8 vee Accounts Receivable Population 
Population Item Cumulative Total 
(Physical Unit) Recorded Amount (Dollar Unit) 
| $ 357 $ 357 
2 1,281 1,638 
3 60 1,698 
4 573 2,271 
5 691 2,962 
6 143 3,105 
7 DLS 5,230 
8 278 5,508 
9 242 5,750 
10 826 6,576 
I 404 6,980 
12 396 7,376 


population size, not the 40 accounts receivable balances. This is the recorded dollar 
amount of accounts receivable. 

Because of the method of sample selection in MUS, which is discussed later, it 
is not possible to evaluate the likelihood of unrecorded items in the population. 
Assume, for example, that MUS is used to evaluate whether inventory is fairly stated. 
MUS cannot be used to evaluate whether certain inventory items exist but have not 
been counted. If the completeness objective is important in the audit test, and it usu- 
ally is, that objective must be satisfied separately from the MUS tests. 


Sample Size Is Determined Using a Formula We illustrate the calculation of sam- 
ple sizes after we have discussed the 14 sampling steps for MUS. 


Sample Selection Is Done Using PPS Monetary unit samples are selected with 
probability proportional to size sample selection (PPS). PPS samples can be 
obtained by using computer software or systematic sampling techniques. Table 17-4 
provides an illustration of an accounts receivable population, including cumulative 
totals that will be used to demonstrate selecting a sample. 

Assume that the auditor wants to select a PPS sample of four accounts from the 
population in Table 17-4. Because the sampling unit is defined as an individual dol- 
lar, the population size is 7,376. Auditors often use fixed interval systematic sampling 
because all items greater than the sampling interval will be automatically selected for 
testing. However, as discussed earlier in the section on nonstatistical sampling, the 
auditor may choose to examine all the individually material times that are greater than 
tolerable misstatement, and sample the remaining items. 

Using systematic selection, the sampling interval is 1,844 (7,376 + 4) and the auditor 
then chooses a random start between 1 and 1,844 (the length of the sampling interval). 
Assume the auditor randomly selects a start of 822. The sample dollars selected for test- 
ing are 822; 2,666 (822 + 1,844); 4,510 (2,666 + 1,844); and 6,354 (4,510 + 1,844). 

The population physical unit items that contain these random dollars are determined 
by reference to the cumulative total column. Looking again at Table 17-4, the items 
selected are items 2 (containing dollars 358 through 1,638), 5 (dollars 2,272 through 
2,962), 7 (dollars 3,106 through 5,230), and 10 (dollars 5,751 through 6,576). Note that 
item 7 is larger than the sampling interval and will therefore always be included in the 
sample using systematic selection. If a population item is several times larger than the 
sampling interval, it may be included in the sample more than once. Therefore, the actual 
number of units selected for testing may be less than the computed sample size. 
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The auditor may also use random selection of dollars, rather than systematic 
selection. Assume the auditor uses a computer program to generate four random 
numbers from between 1 and 7,376 to generate the sample and generates numbers 
6,586; 1,756; 850; and 6,599. Referring again to Table 17-4, the items selected are 
items 11 (containing dollars 6,577 through 6,980), 4 (dollars 1,699 through 2,271), 
2 (dollars 358 through 1,638), and 11 (dollars 6,577 through 6,980). These accounts 
will be audited because the cumulative total associated with these accounts includes 
the random dollars selected. Item 11 was treated as two sample items because it was 
randomly selected twice, even though the recorded balance of the account of $404 is 
much smaller than the sampling interval using systematic selection. 

One problem using PPS selection is that population items with a zero recorded 
balance have no chance of being selected with PPS sample selection, even though they 
may be misstated. Similarly, small balances that are significantly understated have little 
chance of being included in the sample. This problem can be overcome by doing spe- 
cific audit tests for zero- and small-balance items, assuming that they are of concern. 

Another problem with PPS is its inability to include negative balances, such as credit 
balances in accounts receivable, in the PPS (monetary unit) sample. It is possible to 
ignore negative balances for PPS selection and test those amounts by some other means. 
An alternative is to treat them as positive balances and add them to the total number of 
monetary units being tested. However, this complicates the evaluation process. 


The Auditor Generalizes from the Sample to the Population Using MUS 
Techniques Regardless of the sampling method selected, the auditor must generalize 
from the sample to the population by (1) projecting misstatements from the sample re- 
sults to the population and (2) determining the related sampling risk. The statistical result 
when MUS is used is called a misstatement bound. The misstatement bound is an esti- 
mate of the likely maximum overstatement at a given ARIA. The discussion and example 
that follow are limited to overstatements because MUS is designed primarily to test for 
overstatements. Calculation of misstatement bounds is usually done using audit software 
or computer templates. We illustrate the calculation of the projected misstatement and 
misstatement bound in the next section after we discuss the 14 sampling steps for MUS. 


The auditor compares the calculated misstatement bound to tolerable misstatement. 
If the bound exceeds tolerable misstatement, the population is not considered accept- 
able. The options available to the auditor when the population is rejected are the same 
ones already discussed for nonstatistical sampling on pages 597-599. 

Now that we have discussed the differences between MUS and nonstatistical sam- 
pling for tests of details of balances, we examine the determination of sample sizes 
and calculation of misstatement bounds in further detail. 


We illustrate the formula for computing sample sizes using MUS based on the AICPA 
Audit Sampling Audit Guide. We first discuss the factors used in computing sample size. 


Acceptable Risk of Incorrect Acceptance ARIA is an auditor judgment of the 
level of assurance required for the sampling application. As illustrated in Figure 17-1 
(p. 593) and Table 17-2 (p. 594), ARIA depends on audit risk model factors and the 
amount of assurance provided by substantive analytical procedures and other sub- 
stantive tests. For this example, we will assume that the auditor concluded an ARIA of 
10 percent was appropriate. 


Recorded Population Value The dollar value of the population is taken from the cli- 
ent’s records. For this example, it is $5 million. 


Tolerable Misstatement Tolerable misstatement is generally the same as perfor- 
mance materiality, but the auditor may decrease the amount of tolerable misstate- 
ment if less than 100 percent of the population is tested. For this example, tolerable 
misstatement is $150,000. 


Decide the Acceptability 


of the Population 
Using MUS 


Determining Sample 
Sizes Using MUS 
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vee Confidence Factors for Monetary Unit Sample Size Design* 


Risk of Incorrect Acceptance 


Ratio of Expected 
to Tolerable 
Misstatement 


0.00 3.00 2.31 1.90 1.61 1.39 1.21 1.05 0.70 
0.05 3.31 2.52 2.06 1.74 1.49 1.29 ll 0.73 
0.10 3.68 2.77 225 1.89 1.61 1.39 1.20 0.77 
0.15 4.11 3.07 2.47 2.06 1.74 1.49 1.28 0.82 
0.20 4.63 3.41 2.73 2.26 1.90 1.62 1.38 0.87 
0.25 3.24 3.83 3.04 2A 2.09 1.76 1.50 0.92 
0.30 6.00 4.33 3.41 2.77 2.30 1.93 1.63 0.99 
0.35 6.92 4.95 3.86 3.12 2.57 Dale. 1.79 1.06 
0.40 8.09 o/2) 442 3.54 2.89 2.39 199) 1.14 
0.45 i) 6.71 5.13 4.07 3.29 2.70 2.22 1.25 
0.50 11.54 UE 6.04 4.75 3.80 3.08 25| 1.37 
0.55 14.18 9.70 7.26 5.64 447 3.58 2.89 1.52 
0.60 17.85 12.07 8.93 6.86 byel/ 425 3.38 1.70 


*Source: Data from AICPA Audit Sampling Audit Guide, March |, 2014 (www.aicpa.org). 


Tolerable Misstatement as a Percentage of Population Value The auditor com- 
putes tolerable misstatement as a percentage of the population recorded value. This 
equals .03 ($150,000 + $5,000,000) based on the example tolerable misstatement and 
population value. 


Estimated Population Misstatement MUS is most often used when no or few mis- 
statements are expected. The estimated population misstatement is usually based on 
the sample results for the prior year, although some auditors calculate the estimated 
misstatement as a percentage of tolerable misstatement or performance materiality. 
For this example, a $15,000 overstatement is expected. 


Ratio of Estimated Population Misstatement to Tolerable Misstatement The audi- 
tor computes the ratio of estimated misstatement to tolerable misstatement. The ratio 
equals .10 ($15,000 + $150,000) for this example. 


Confidence Factor The auditor uses Table 17-5 to determine an appropriate con- 
fidence factor based on the auditor’s judgment of ARIA and the ratio of expected 
misstatement to tolerable misstatement. Based on an ARIA of 10 percent and a 
ratio of expected to tolerable misstatement of .10, the appropriate confidence fac- 
tor is 2.77. 


Sample Size The appropriate sample size is then calculated as the confidence factor 
divided by the tolerable misstatement as a percentage of the population value. 


Sample Confidence Factor (2.77) 
; = : = 93 (rounded up) 
Size Tolerable Misstatement as 


Percentage of Population Value (.03) 
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Sampling Interval The appropriate sampling interval can now be computed as the 
population recorded amount of $5 million divided by the sample size of 93. 


Sampling Interval = $5,000,000 + 93 = $53,763 
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i \ 8 Wee Summary of Steps to Calculate Sample Size in MUS 


Steps to Calculate Sample Size Source or Calculation 


1. Determine ARIA 10% Determined based on factors in 
Table 17-2 (p. 594) 


2. Population recorded value $5,000,000 _ 
3. Tolerable misstatement $150,000 —_ 
4. Tolerable misstatement as percentage 3% $150,000 + $5,000,000 
of population value 
5. Estimated population misstatement $15,000 Based on prior year results 
6. Ratio of estimated population misstatement 10 $15,000 + $150,000 


to tolerable misstatement 


7. Confidence factor Dai) Table 17-5 based on ARIA of 10% and 
ratio of expected to tolerable 
misstatement of .10 


8. Calculate sample size 93 2.77 + .03 (confidence factor divided by 
tolerable misstatement as a percentage 
of population value) 


9. Calculate sampling interval $53,763 $5,000,000 + 93 


The steps involved in calculating the sample size are illustrated in Table 17-6. The 
formula method is just one method of determining sample size using MUS. The 
Audit Sampling Audit Guide also provides tables to determine sample size based 
on ARIA, the tolerable misstatement as a percentage of the population, and ratio 
of expected to tolerable misstatement. Because MUS is based on attribute theory, 
the attribute sampling tables in Table 15-8 (p. 508) can also be used. ARIA is used 
instead of ARO, the tolerable misstatement as a percentage of the population value 
is used for the tolerable exception rate, and the ratio of estimated population mis- 
statement to tolerable misstatement is used for the estimated population exception 
rate. Most auditors use audit software to calculate sample size and evaluate sample 
results using MUS. 


After performing tests on the sample items, the auditor projects the sample misstate- 
ments to the population and calculates an allowance for sampling risk when using MUS. 
If the entire sample is audited and no misstatements are found in the sample, the auditor 
may conclude without making additional calculations that the recorded amount of the 
population is not overstated by more than tolerable misstatement at the specified risk 
of incorrect acceptance. The upper limit when no misstatements are found is the confi- 
dence factor for no misstatements multiplied by the length of the sampling interval. 
Suppose that the auditor is confirming a population of accounts receivable for 
monetary correctness. The population totals $1,200,000, and a sample of 100 con- 
firmations is obtained. Upon audit, no misstatements are uncovered in the sample. 
Assuming an ARIA of 5%, the confidence factor from Table 17-7 (p. 604) is 3.0. 
Applied to a sampling interval of $12,000 (population of $1,200,000 + 100 sample 
items = $12,000 sampling interval), the upper misstatement bound is calculated as: 


Upper misstatement bound = $12,000 x 3.0 = $36,000 


The upper limit when no misstatements are found is also referred to as basic 
precision, and represents the minimum allowance for sampling risk inherent in 
the sample. For this example, because no misstatements were found, the projected 
misstatement is zero, and the allowance for sampling risk equals the upper limit on 
misstatement of $36,000. 


Generalizing from 
the Sample to the 
Population When No 
Misstatements Are 
Found Using MUS 
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i/.\: 8 ivf Confidence Factors for Monetary Unit Sample Size Evaluation® 


Number of 
Overstatement 
Misstatements 


Risk of Incorrect Acceptance 


0 3.00 2.31 1.90 1.61 [F39) 1.21 1.05 0.70 
| A715 3.89 3.38 3.00 2.70 DAS 2.22 1.68 
2 6.30 5.33 4.73 4.28 3.93 3.62 3.35 2.68 
3 7.76 6.69 6.02 5.52 5.11 4.77 4.46 3.68 
4 9.16 8.00 7.27 6.73 6.28 5.90 5.55 4.68 
5 10.52 9.28 8.50 7.91 743 7.01 6.64 5.68 
6 11.85 10.54 9.7\ 9.08 8.56 8.12 UD 6.67 
Ul 13.15 11.78 10.90 10.24 9.69 9.21 8.79 7.67 
8 14.44 13.00 12.08 11.38 10.81 10.31 9.85 8.67 
9 15.71 14.21 13.25 12.52 11.92 11.39 10.92 9.67 
10 16.97 15.41 14.42 13.66 13.02 12.47 11.98 10.67 


*Source: Data from AICPA Audit Sampling Audit Guide, March |, 2014 (www.aicpa.org). Misstatements greater than 10 not illustrated. 


Generalizing from 
the Sample to the 
Population When 
Misstatements Are 
Found Using MUS 
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Assume that the auditor tested the sample and found the three overstatements included 
in Table 17-8. Calculating the upper misstatement bound involves three steps. 


1. Calculate the percentage misstatement for each misstatement. 

2. Project the sample misstatements by multiplying the percentage misstatement by 
the length of the sampling interval. 

3. Add an allowance for sampling risk based on the confidence factors for the actual 
number of misstatements and acceptable risk of incorrect acceptance. 


Calculate Percentage Misstatement Assumption (Tainting) When misstatements 
are found, the auditor calculates a projected misstatement and an allowance for sam- 
pling risk. The percent of misstatement in the sampling unit represents the percentage 
of misstatement or tainting for the entire sampling interval, which is calculated by di- 
viding the misstatement by the recorded amount. Table 17-8 indicates the percentage 
misstatement for the three misstatements found in the sample. The misstatements are 
ranked by percentage size for calculation of the allowance for sampling risk. 


Project Sample Misstatements The projected misstatement is the percentage mis- 
statement times the sampling interval, since the percentage of misstatement is for 
the whole sampling interval. For example, if the sampling interval is $10,000 and a 


TABLE 17-8 Percent of Misstatement 


Recorded Audited Percentage 
Accounts Accounts Misstatement = 
Receivable Receivable Factual Misstatement = 
Customer No. Amount Amount Misstatement Recorded Amount 
2073 $ 6,200 $ 6,100 $ 100 016 
Si 12,910 12,000 910 NIAC) 
9816 8,947 2,947 $6,000 .671 


(1) Percentage misstatement is N/A because recorded amount is greater than the sampling interval. In this situation, the 
projected misstatement equals the actual misstatement. 
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i): jR vee Calculation of Projected Misstatement and Allowance for Sampling Risk 


A H 
Projected 
Misstatement 
(see Table 17-10) Plus Incremental 
Factual Percentage Projected Incremental Allowance for 
Recorded Audit Misstatement Misstatement Sampling Misstatement Change in Sampling Risk 
Amount Amount (A -B) (C +A) Interval (D Xx E) Confidence Factor (F xX G) 
$12,910 $12,000 $ 910 NIA“) NIA“) $ 910 NIA $ 910 
8,947 D947 6,000 67.1% 12,000 8,052 1.75 14,091 
6,200 6,100 100 1.6% 12,000 192 1.55 298 
Totals $7,010 $9,154 $15,299 
Add basic precision 36,000 
Upper misstatement bound $51,299 


(1) Percentage misstatement is N/A because recorded amount is greater than the sampling interval. In this situation, the projected misstatement equals the 
actual misstatement. 


recorded amount of $100 has an audited value of $75, the projected misstatement is 
$2,500 ($25 misstatement is 25% of the recorded amount X $10,000 sampling interval). 
If the recorded amount of the sample item is greater than the sampling interval, then 
the projected misstatement equals the actual sample misstatement. Table 17-9 indicates 
the calculation of projected misstatement for the three actual sample misstatements. 


Calculate the Allowance for Sampling Risk The projected misstatement is increased 
by the allowance for sampling risk, which is calculated as basic precision plus an 
incremental allowance for sampling risk for each misstatement found in sampling 
units that are smaller than the sampling interval. There is no incremental allowance 
for sampling risk in sampling units that are greater than the sampling interval since all 
of the monetary units in the sampling interval were examined. 

A conservative approach is to rank the misstatements by the percentage misstate- 
ment. The misstatements are then multiplied by the incremental change in the confi- 
dence factor to compute the projected misstatement plus the incremental allowance 
for sampling risk. Table 17-10 provides an example of the incremental changes in the 
confidence factor for five misstatements and a 5% ARIA. 

The last two columns of Table 17-9 show the incremental changes in the 
confidence factor, and projected misstatement plus the incremental allowance for 
sampling risk. Including the basic precision of $36,000, the upper misstatement 
bound is $51,299. Therefore, based on an ARIA of 5%, the auditor can state that there 
is a 5 percent risk that the recorded amount is overstated by more than $51,299. 
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Incremental Changes in Confidence Factor— Five Percent 
TABLE 17-10 : 
Risk of Incorrect Acceptance 
Number of Overstatements Confidence Factor Incremental Changes in Factor 
0 3.00 _— 
| 4.75 E7S 
2) 6.30 1.55 
3 7.76 1.46 
4 9.16 1.40 
5 10.52 1.36 
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Audit Uses of Monetary 


Unit Sampling 
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The sample results can be summarized as follows: 


¢ The sample contains factual misstatements of $7,010. 

¢ The total factual and projected misstatement is $9,154. 

* The upper misstatement bound representing the total factual and projected 
misstatement plus an allowance for sampling risk is $51,299. 

* The allowance for sampling risk representing basic precision and the incremen- 
tal allowance for sampling risk is $42,145 [$36,000 basic precision + $6,145 
incremental allowance for sampling risk ($15,299 — $9,154)]. 


The results are considered acceptable if the upper misstatement bound of $51,299 
is less than tolerable misstatement. If the upper misstatement bound exceeds tolerable 
misstatement, the population is not acceptable based on the results of the sample, 
and the auditor will take one or more of the actions discussed in the “Action When a 
Population Is Rejected” section on pages 597-599. 


Relationship of the Audit Risk Model to Sample Size for MUS The audit risk model 
for planning was introduced in Chapter 9 and covered in subsequent chapters as: 


AAR 


PDR = ——— 
IRX CR 


(See pp. 271-273 for description of the terms.) 

Chapter 16 discussed how the auditor reduces detection risk to the planned level 
by performing substantive tests of transactions, substantive analytical procedures, 
and tests of details of balances. MUS is used in performing tests of details of balances. 
Therefore, auditors need to understand the relationship of the three independent fac- 
tors in the audit risk model, plus substantive analytical procedures and substantive 
tests of transactions, to sample size for tests of details of balances. 

Table 17-2 on page 594 shows that four of these five factors (control risk, substan- 
tive tests of transactions, acceptable audit risk, and substantive analytical procedures) 
affect ARIA. ARIA in turn determines the planned sample size. The other factor, 
inherent risk, is also considered in determining ARIA, and directly affects sample size 
through the estimated population misstatement. 


MUS appeals to auditors for at least four reasons: 


1. MUS automatically increases the likelihood of selecting high dollar items from the 
population being audited. Auditors make a practice of concentrating on these items 
because they generally represent the greatest risk of material misstatements. Stratified 
sampling can also be used for this purpose, but MUS is often easier to apply. 

2. MUS often reduces the cost of doing the audit testing because several sample items 
are tested at once. For example, if one large item makes up 10 percent of the total re- 
corded dollar value of the population and the sample size is 100, the PPS sample selec- 
tion method is likely to result in approximately 10 percent of the sample items from 
that one large population item. Naturally, that item needs to be audited only once, but 
it counts as a sample of 10. If the item is misstated, it is also counted as 10 misstate- 
ments. Larger population items may be eliminated from the sampled population by 
auditing them 100 percent and evaluating them separately, if the auditor so desires. 

3. MUS is easy to apply. Monetary unit samples can be evaluated by the application 
of simple tables. It is easy to teach and to supervise the use of MUS techniques. 
Firms that utilize MUS extensively use audit software or other computer pro- 
grams that streamline sample size determination and evaluation even further 
than shown in this chapter. 

4. MUS provides a statistical conclusion rather than a nonstatistical one. Many audi- 
tors believe that statistical sampling aids them in making better and more defen- 
sible conclusions. 
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There are two main disadvantages of MUS. 


1. The total misstatement bounds resulting when misstatements are found may 
be too high to be useful to the auditor. This is because these evaluation methods 
are inherently conservative when misstatements are found and often produce 
bounds far in excess of materiality. To overcome this problem, larger samples 
may be required. 

2. It may be cumbersome to select PPS samples from large populations without 
computer assistance. 


For all these reasons, auditors commonly use MUS when zero or few misstate- 
ments are expected, a dollar result is desired, and the population data are accessible in 
electronic format. 


CONCEPT CHECK 


|. Define the sampling interval when using MUS sampling. How is it calculated? 


2. Assume that the auditor tested an account receivable with a balance of $3,000 and 
determined that the audited value was $2,700. That is, the auditor determined the 
receivable was overstated by $300. What is the projected misstatement (excluding 
the incremental allowance for sampling risk) if the sampling interval is $15,000? 


VARIABLES SAMPLING 


Variables sampling, like MUS, is a statistical method that auditors use. Variables 
sampling and nonstatistical sampling for tests of details of balances have the same 
objective—to measure the misstatement in an account balance. As with nonstatisti- 
cal sampling, when auditors determine that the misstatement amount exceeds the 
tolerable amount, they reject the population and take additional actions. 

Several sampling techniques make up the general class of methods called vari- 
ables sampling: difference estimation, ratio estimation, and mean-per-unit estimation. 
These are discussed later. 


The use of variables methods shares many similarities with nonstatistical sampling. 
All 14 steps we discussed for nonstatistical sampling must be performed for variables 
methods, and most are identical. Some of the differences between variables and non- 
statistical sampling are examined after we discuss sampling distributions. 


To understand why and how auditors use variables sampling methods in auditing, it 
is useful to understand sampling distributions and how they affect auditors’ statistical 
conclusions. The auditor does not know the mean value (average) of misstatements in 
the population, the distribution of the misstatement amounts, or the audited values. 
These population characteristics must be estimated from samples, which, of course, is 
the purpose of the audit test. 

Assume that an auditor, as an experiment, took thousands of repeated samples of 
equal size from a population of accounting data having a mean value of X. For each 
sample, the auditor calculates the mean value of the items in the sample as follows: 


Describe variables sampling. 


Differences Between 
Variables and 
Nonstatistical Sampling 


Sampling Distributions 


nN 
where 
xX = mean value of the sample items 
x; = value of each individual sample item 
n = sample size 
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FIGURE 17-3 Frequency Distribution of Sample Means 
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Value of x in dollars 


After calculating (x) for each sample, the auditor plots them into a frequency dis- 
tribution. As long as the sample size is sufficient, the frequency distribution of the 
sample means will appear much like that shown in Figure 17-3. 

A distribution of the sample means such as this is normal and has all the characteris- 
tics of the normal curve: (1) the curve is symmetrical, and (2) the sample means fall within 
known portions of the sampling distribution around the average or mean of those means, 
measured by the distance along the horizontal axis in terms of standard deviations. 

Furthermore, the mean of the sample means (the midpoint of the sampling distri- 
bution) is equal to the population mean, and the standard deviation of the sampling 
distribution is equal to SD/Vn, where SD is the population standard deviation and n 
is the sample size. 

To illustrate, assume a population with a mean of $40 and a standard deviation 
of $15 (x = $40 and SD = $15), from which we elected to take many random sam- 
ples of 100 items each. The standard deviation of our sampling distribution is $1.50 
(SD/ Va = 15/V 100 = 1.50). The reference to “standard deviation” of the popula- 
tion and to “standard deviation” of the sampling distribution is often confusing. To 
avoid confusion, remember that the standard deviation of the distribution of the 
sample means is often called the standard error of the mean (SE). With this infor- 
mation, auditors can make the tabulation of the sampling distribution, as shown in 
Table 17-11. 

To summarize, three things shape the results of the experiment of taking a large 
number of samples from a known population: 


1. The mean value of all the sample means is equal to the population mean (X ). A 
corollary is that the sample mean value (x) with the highest frequency of occur- 
rence is also equal to the population mean. 


Calculated Sampling Distribution from a Population 
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TABLE 17-11 
with a Known Mean and Standard Deviation 

(1) (2) (3) 0) 
Number of Standard Errors Percent of Sample 
of the Mean (Confidence Value Range Around Means Included in 

Coefficient) [(1) < $1.50] X [$40 +/— (2)] Range 

| $1.50 $38.50 - $41.50 68.2 

2 $3.00 $37.00 - $43.00 eeyat 

3 $4.50 $35.50 - $44.50 99.7 


(taken from table for normal curve) 
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FIGURE 17-4 Sampling Distribution for a Population Distribution 
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2. The shape of the frequency distribution of the sample means is that of a normal 
distribution (curve), as long as the sample size is sufficiently large, regardless of the 
distribution of the population, as illustrated in Figure 17-4. 

3. The percentage of sample means between any two values of the sampling distri- 
bution is measurable. The percentage can be calculated by determining the num- 
ber of standard errors between any two values and determining the percentage of 
sample means represented from a table for normal curves. 


Naturally, when samples are taken from a population in an actual audit situation, the 
auditor does not know the population’s characteristics and, ordinarily, only one sam- 
ple is taken from the population. But the knowledge of sampling distributions enables audi- 
tors to draw statistical conclusions, or statistical inferences, about the population. 
For example, assume that the auditor takes a sample from a population and calculates 
(x) as $46 and SE at $9. (We'll explain how SE is calculated later.) We can now calculate 
a confidence interval of the population mean using the logic gained from the study of 
sampling distributions. It is as follows: 


ChaX #2-SE 
where: 
CI, = confidence interval for the population mean 
5 X = point estimate of the population mean 
2 1 = 68.2% confidence level 
2 Z = confidence coefficient 1 2 = 95.4% confidence level 
: 3 = 99.7% confidence level 
7 SE = standard error of the mean 
3 Z-SE = precision interval 
8 For the example: 
Cl_z = $46 + 1($9) = $46 + $9 at a 68.2% confidence level 
z Cl z= $46 + 2($9) = $46 + $18 at a 95.4% confidence level 
g Cl z= $46 + 3($9) = $46 + $27 at a 99.7% confidence level 


The results can also be stated in terms of confidence limits (Cl;). The upper con- 
fidence limit (UCL; ) is X+ Z + SE ($46 + $18 = $64 at a 95 percent confidence 
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level) and a lower confidence limit (LCL; ) is X= Zese ($46 — $18 = $28 ata 95 
percent confidence level). Graphically, the results are as follows: 


Lower Upper 
confidence * confidence 
limit x limit 
| | | 
| | | 
$28 $46 $64 


Auditors can state the conclusions drawn from a confidence interval using sta- 
tistical inference in different ways. However, they must take care to avoid incorrect 
conclusions, remembering that the true population value is always unknown. There is 
always a possibility that the sample is not sufficiently representative of the population 
to provide a sample mean and/or standard deviation reasonably close to those of the 
population. The auditor can say, however, that the procedure used to obtain the sam- 
ple and compute the confidence interval will provide an interval that will contain the 
true population mean value a given percent of the time. In short, the auditor knows 
the reliability of the statistical inference process that is used to draw conclusions. 


Auditors use the preceding statistical inference process for all the variables sampling 
methods. Each method is distinguished by what is being measured. Let’s examine the 
three variables methods individually. 


Difference Estimation Auditors use difference estimation to measure the esti- 
mated total misstatement amount in a population when both a recorded value and 
an audited value exist for each item in the sample, which is almost always the case in 
audits. For example, an auditor might confirm a sample of accounts receivable and 
determine the difference (misstatement) between the client’s recorded amount and the 
amount the auditor considers correct for each selected account. The auditor makes an 
estimate of the population misstatement based on the number of misstatements in the 
sample, average misstatement size, individual misstatements in the sample, and sam- 
ple size. The result is stated as a point estimate of the population misstatement plus or 
minus a computed precision interval at a stated confidence level. Referring back to the 
discussion of sampling distributions, assume the auditor confirmed a random sample 
of 100 from a population of 1,000 accounts receivable and concluded that the confi- 
dence limits of the mean of the misstatement for accounts receivable were between 
$28 and $64 at a 95 percent confidence level. The estimate of the total population 
misstatement can also be easily calculated as being between $28,000 and $64,000 at a 
95 percent confidence level (1,000 < $28 and 1,000 X $64). If the auditor’s tolerable 
misstatement is $100,000, the population is clearly acceptable. If tolerable misstate- 
ment is $40,000, the population is not acceptable. An illustration using difference 
estimation is shown at the end of this chapter on pages 612-615. 

Difference estimation frequently results in smaller sample sizes than any other 
method, and it is relatively easy to use. For that reason, difference estimation is often 
the preferred variables method. 


Ratio Estimation Ratio estimation is similar to difference estimation except the 
auditor calculates the ratio between the misstatements and their recorded value and 
projects this to the population to estimate the total population misstatement. For ex- 
ample, assume that an auditor finds misstatements totaling $12,000 in a sample with 
a recorded value of $208,000. The misstatement ratio is .06 ($12,000/$208,000). If the 
total recorded value of the population is $1,040,000, the projected misstatement in the 
population is $62,400 ($1,040,000 x .06). The auditor can then calculate confidence 
limits of the total misstatement for ratio estimation with a calculation similar to the 
one shown for difference estimation. Ratio estimation can result in sample sizes even 
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smaller than difference estimation if the size of the misstatements in the population 
is proportionate to the recorded value of the population items. If the size of the in- 
dividual misstatements is independent of the recorded value, difference estimation 
results in smaller sample sizes. Most auditors prefer difference estimation because it is 
somewhat simpler to calculate confidence intervals. 


Mean-per-Unit Estimation In mean-per-unit estimation, the auditor focuses on 
the audited value rather than the misstatement amount of each item in the sample. 
Except for the definition of what is being measured, the mean-per-unit estimate is 
calculated in exactly the same manner as the difference estimate. The point estimate 
of the audited value equals the average audited value of items in the sample times the 
population size. The computed precision interval is calculated on the basis of the 
audited value of the sample items rather than the misstatements. When auditors have 
computed the upper and lower confidence limits, they decide the acceptability of the 
population by comparing these amounts with the recorded book value. For example, 
assume the auditor takes a sample of 100 items from an inventory listing containing 
3,000 items and a recorded value $265,000. If the mean value of the items sampled is 
$85, the estimated value of the inventory is $255,000 ($85 x 3,000). If the recorded 
value of $265,000 is within the upper confidence limit, the auditor would accept the 
population balance. Mean-per-unit estimation is rarely used in practice because sam- 
ple sizes are typically much larger than for the two previous methods. 


As we discussed earlier in this chapter, stratified sampling is a method of sampling 
in which all the elements in the total population are divided into two or more sub- 
populations. Each subpopulation is then independently tested. The calculations are 
made for each stratum and then combined into one overall population estimate for 
a confidence interval of the entire population. The results are measured statistically. 
Stratification is applicable to difference, ratio, and mean-per-unit estimation, but is 
most commonly used with mean-per-unit estimation. 


We have discussed acceptable risk of incorrect acceptance (ARIA) for nonstatistical 
and MUS sampling. For variables sampling, auditors use ARIA as well as accept- 
able risk of incorrect rejection (ARIR). It is important to understand the distinctions 
between and uses of the two risks. 


ARIA After auditors perform an audit test and calculate statistical results, they must 
conclude either that the population is or is not materially misstated. ARIA is the 
statistical risk that the auditor has accepted a population that is, in fact, materially 
misstated. ARIA is a serious concern to auditors because of the potential legal impli- 
cations of concluding that an account balance is fairly stated when it is misstated by a 
material amount. 

An account balance can be either overstated or understated, but not both; there- 
fore, ARIA is a one-tailed statistical test. The confidence coefficients for ARIA are 
therefore different from the confidence level. (Confidence level = 1-2 X ARIA. So, 
if ARIA equals 10 percent, the confidence level is 80 percent.) The confidence coef- 
ficients for various ARIAs are shown in Table 17-12 (p. 612) together with confidence 
coefficients for the confidence level and ARIR. 


ARIR Acceptable risk of incorrect rejection (ARIR) is the statistical risk that the 
auditor has concluded that a population is materially misstated when it is not. ARIR 
affects auditors’ actions only when they conclude that a population is not fairly stated. 
When auditors find a balance not fairly stated, they typically increase the sample size 
or perform other tests. An increased sample size will usually lead the auditor to con- 
clude that the balance is fairly stated if the account is, in fact, not materially misstated. 
While ARIA is always important, ARIR is important only when there is a high cost 
to increasing the sample size or performing other tests. Confidence coefficients for 
ARIR are also shown in Table 17-12. 


Stratified Statistical 
Methods 


Sampling Risks 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Educat@ihaptien, #716. RUDUGsSAMLOAIGAaFOR TESTS OF DETAILS OF BALANCES 627 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-23 03:43:50. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


EV Spee Confidence Coefficient for Confidence Levels, ARIAs, and ARIRs 
Confidence Level (%) ARIA (%) ARIR (%) Confidence Coefficient 

ce) a) | 2.58 

95 AS 5 1.96 

90 5 10 1.64 

80 10 20 1.28 

75 12.5 25 1.15 

70 15 30 1.04 

60 20 40 84 

50 25 50 67 

40 30 60 52 

30 35 70 39 

20 40 80 25 

10 45 90 13 

0 50 100 0 

ES veikee ARIA and ARIR 


Actual State of the Population 


Actual Audit Decision Materially Misstated Not Materially Misstated 
Conclude that the population Correct conclusion— Incorrect conclusion— 
is materially misstated no risk risk is ARIR 
Conclude that the population is not Incorrect conclusion— Correct conclusion— 
materially misstated risk is ARIA no risk 


As you examine the summary of ARIA and ARIR in Table 17-13, you might con- 
clude that auditors should attempt to minimize ARIA and ARIR. To accomplish that, 
auditors have to increase the sample size, thus minimizing the risks. However, the cost 
of that approach makes having reasonable ARIA and ARIR a more desirable goal. 


CONCEPT CHECK 


1. Distinguish among difference estimation, ratio estimation, mean-per-unit estimation, and 
stratified mean-per-unit estimation. Give one example in which each can be used. 


2. An essential step in difference estimation is the comparison of each computed confi- 
dence limit with tolerable misstatement. Why is this step so important, and what should 
the auditor do if one of the confidence limits is larger than the tolerable misstatement? 


ILLUSTRATION USING DIFFERENCE ESTIMATION 
OBJECTIVE 17-50 We illustrate the use of difference estimation in the audit of accounts receivable for Hart 


Lumber Company. Accounts receivable consists of 4,000 accounts listed on the aged 


Use difference estimation in tests . . . 
trial balance with a recorded value of $600,000. Tolerable misstatement has been set at 


of details of balances. 


$21,000. 
Plan the Sample and Specify Acceptable Risk The auditor specifies two risks: 
Calculate the Sample 1. Acceptable risk of incorrect acceptance (ARIA). It is the risk of accepting accounts 
Size Using Difference receivable as correct if it is actually misstated by more than $21,000. ARIA is af- 
Estimation fected by acceptable audit risk, results of tests of controls and substantive tests of 


transactions, substantive analytical procedures, and the relative significance of 
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accounts receivable in the financial statements. For the Hart Lumber audit, as- 
sume an ARIA of 10 percent. 

Acceptable risk of incorrect rejection (ARIR). It is the risk of rejecting accounts receiv- 
able as incorrect if it is not actually misstated by a material amount. ARIR is af- 
fected by the additional cost of resampling. Because it is fairly costly to confirm 
receivables a second time, assume an ARIR of 25 percent. 


Estimate Misstatements in the Population This estimate has two parts: 


1, 


2, 


Estimate an expected point estimate. Auditors need an advance estimate of the popu- 
lation point estimate for difference estimation, much as they need an estimated 
population exception rate for attributes sampling. The advance estimate is $1,500 
(overstatement) for Hart Lumber, based on the previous year’s audit tests. 

Make an advance population standard deviation estimate—variability of the population. To 
determine the initial sample size, auditors need an advance estimate of the varia- 
tion in the misstatements in the population as measured by the population stan- 
dard deviation. (The calculation of the standard deviation is explained later, when 
audit results are evaluated.) For Hart Lumber, it is estimated to be $20 based on 
the previous year’s audit tests. 


Calculate the Initial Sample Size The initial sample size for Hart Lumber can be 
now calculated using the following formula: 


where: 


Z 
SD*(Z, + Z,)N 
TM - E* 


n = initial sample size 
SD* = advance estimate of the standard deviation 
Z,= confidence coefficient for ARIA (see Table 17-12) 
Z, = confidence coefficient for ARIR (see Table 17-12) 
N = population size 
TM = tolerable misstatement for the population (materiality) 


E* = estimated point estimate of the population misstatement 


Applied to Hart Lumber, this equation yields: 


2 


20(1.28 + 1.15)4,000 
n= ( ) = (9.97) = 100 


21,000 — 1,500 


Generalize from the Sample to the Population The auditor selects the sample, per- 
forms the testing, and identifies sample misstatements. The misstatements for Hart 
Lumber are shown in Table 17-14. The following four steps describe the calculation of 
the confidence limits for Hart Lumber Company. (The calculations are illustrated in 
Table 17-14, Steps 3 through 6.) 


1. 


Compute the point estimate of the total misstatement. The point estimate is a direct 
extrapolation from the misstatements in the sample to the misstatements in the 
population. The calculation of the point estimate for Hart Lumber is shown in 
Table 17-14, step 3. 

Compute an estimate of the population standard deviation. The population standard devia- 
tion is a statistical measure of the variability in the values of the individual items in 
the population. If there is a large amount of variation in the values of population 
items, the standard deviation will be larger than when the variation is small. 


Evaluate the Results 
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The standard deviation has a significant effect on the computed precision 
interval. The auditor can compute a reasonable estimate of the value of the 
population standard deviation by using the standard statistical formula shown in 
Table 17-14, step 4. 


3. Compute the precision interval. The precision interval is calculated by a statistical 


formula. For the computed precision interval to have any meaning, it must be 
associated with ARIA. The formula to calculate the precision interval is shown in 
Table 17-14, step 5. 


TABLE 17-14 


Step 


|. Take a random sample of size n. 


Calculation of Confidence Limits 


Statistical Formula Illustration for Hart Lumber 


n = sample size 100 accounts receivable are selected randomly from the 
aged trial balance containing 4,000 accounts. 


2. Determine the value of each mis- 
statement in the sample. 


75 accounts are confirmed by customers, and 25 
accounts are verified by alternative procedures. 
After reconciling timing differences and customer er- 
rors, the following |2 items were determined to be 
client errors (understatements) stated in dollars: 
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1. $12.75 7. (87) 
2. (69.46) 8. 24.32 
3. 85.28 O36:59 
4. 100.00 10. (102.16) 
5. (27.30) Wh, Saez lI 
6. 41.06 We, WN dstS 
Sum = $226.48 
3. Compute the point estimate of the _ $226.48 
total misstatement. a Le, a 100 = $2.26 
~ on A 
Xe E = 4,000 ($2.26) = $9,040 
E=Né or N—— or 
where: E = 4,000 re = $9,040 
é = average misstatement in the sample 
> = summation 
€; = an individual misstatement in the sample 
n = sample size 
E= point estimate of the total misstatement 
N = population size 
4. Compute the population standard 5 ae (rounded to nearest dollar) 
deviation of the misstatements De 2) ane) G (e)? 
from the sample. n= 1.$ 13 $ 169 
where: 2. (69) 4,761 
3, 7,225 
SD = standard deviation 4. 100 10,000 
e;= an individual misstatement in the sample 5. (27) 729 
n=sample size : a 
é =average misstatement in sample 8 Ne 576 
a 1,369 
10. (102) 10,404 
i, 8 3,025 
I, 72) 5,184 


$228 $45,124 


ee [ae = 100 ($2.26)? 
99 


SD = $21.2 


Arens, Alvin, et@BAditing and AssuRare SeiécBPEBGAKT GDDaIGEtibh PoktsO EP RMGASSIED DHE SAQESMAINOKOOtlaECTION CYCLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-27 00:57:25. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Rv Calculation of Confidence Limits (Cont.) 


Step Statistical Formula 


5. Compute the precision interval for 


the estimate of the total popula- CPI = NZ, ee) INE tg CPI = 
tion misstatement at the desired vn N 
confidence level. where: 

CPI = computed precision interval = 


N = population size 
Z, = confidence coefficient for ARIA 


SD = population standard deviation 
n = sample size 


N-n ‘ : 
ae = finite correction factor 


4,000 + |.28- 


Illustration for Hart Lumber 


$21.2 


4,000 - 1.28 - —— 


100 


$21.2 
10 


4,000 — 100 
4,000 


7.99) 


4,000 + 1.28 + $2.12 + .99 
(see Table 17-12) = $10,800 (rounded) 


6. Compute the confidence limits 


at the CL desired. UCL = E + CPI 


where: 


UCL = computed upper confidence limit 
LCL = computed lower confidence limit 


= point estimate of the total 
misstatement 


CPI = computed precision interval at 
desired CL 


UCL = $9,040 + $10,800 = $19,840 
LCL = £ — CPI LCL = $9,040 — $10,800 = $(1,760) 


4. Compute the confidence limits. Auditors calculate the confidence limits, which 
define the confidence interval, by combining the point estimate of the total mis- 
statements and the computed precision interval at the desired confidence level 
(point estimate + computed precision interval). The formula to calculate the con- 


fidence limits is shown in Table 17-14, step 6. 


The lower and upper confidence limits for Hart Lumber are ($1,760) and $19,840, 
respectively. There is a 10 percent statistical risk that the population is understated 
by more than $1,760, and the same risk that it is overstated by more than $19,840. 
(Remember, an ARIA of 10 percent is equivalent to a confidence level of 80 percent.) 
Since the confidence limits are less than tolerable misstatement, the auditor concludes 


that the population is not materially misstated. 


account value. Use of variables sampling was illustrated using difference estimation. 


SUMMARY 


This chapter discussed nonstatistical and statistical audit sampling methods for tests of 
details of balances. In sampling for tests of balances, the auditor determines whether the 
dollar amount of an account balance is materially misstated. We then discussed the 14 
steps in nonstatistical sampling for tests of balances. When performing nonstatistical 
audit sampling, the auditor uses judgment in generalizing from the sample to the popula- 
tion to determine whether it is acceptable. Monetary unit sampling is the most common 
statistical method for tests of balances. This method defines the sampling unit as indi- 
vidual dollars in the recorded account balance, and as a result, larger accounts are more 
likely to be included in the sample. Variables statistical sampling methods include differ- 
ence estimation, ratio estimation, and mean-per-unit estimation. These methods compare 
audited sample values to recorded values to develop an estimate of the misstatement in the 
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ESSENTIAL TERMS 


Acceptable risk of incorrect accep- 
tance (ARIA)—the risk that the auditor 
is willing to take of accepting a balance as 
correct when the true misstatement in the 
balance exceeds tolerable misstatement 
Acceptable risk of incorrect rejection 
(ARIR)—the risk that the auditor is will- 
ing to take of rejecting a balance as incor- 
rect when it is not misstated by a material 
amount 

Basic precision—the minimum allow- 
ance for sampling risk inherent in the sam- 
ple for MUS; it is equal to the allowance for 
sampling risk when no misstatements are 
found in the sample 

Difference estimation—a method of 
variables sampling in which the auditor 
estimates the population misstatement by 
multiplying the average misstatement in 
the sample by the total number of popula- 
tion items and also calculates sampling risk 
Mean-per-unit estimation—a method 
of variables sampling in which the auditor 
estimates the audited value of a population 
by multiplying the average audited value of 
the sample by the population size and also 
calculates sampling risk 

Misstatement bound—an estimate of the 
largest likely overstatement in a popula- 
tion at a given ARIA, using monetary unit 
sampling 

Monetary unit sampling (MUS)—a sta- 
tistical sampling method that provides mis- 
statement bounds expressed in monetary 


REVIEW QUESTIONS 


amounts; also referred to as dollar unit 
sampling, cumulative monetary amount 
sampling, and sampling with probability 
proportional to size 

Point estimate—a method of projecting 
from the sample to the population to esti- 
mate the population misstatement, com- 
monly by assuming that misstatements in 
the unaudited population are proportional 
to the misstatements found in the sample 
Probability proportional to size sample 
selection (PPS)—sample selection of in- 
dividual dollars in a population by the use 
of random or systematic sample selection 
Ratio estimation—a method of variables 
sampling in which the auditor estimates 
the population misstatement by multiply- 
ing the portion of sample dollars misstated 
by the total recorded population book val- 
ue and also calculates sampling risk 
Statistical inferences—conclusions that 
the auditor draws from sample results based 
on knowledge of sampling distributions 
Stratified sampling—a method of sam- 
pling in which all the elements in the total 
population are divided into two or more 
subpopulations that are independently 
tested and evaluated 

Tolerable misstatement—the applica- 
tion of performance materiality to a par- 
ticular sampling procedure 

Variables sampling—sampling _ tech- 
niques for tests of details of balances that 
use the statistical inference process 


17-1 (OBJECTIVE 17-1) What major difference between (a) tests of controls and substantive tests of transactions 
and (b) tests of details of balances makes attributes sampling inappropriate for tests of details of balances? 


17-2 (OBJECTIVE 17-2) Jemina was asked by her supervisor to evaluate the revenue cycle. She divided all the 
invoices of the company into five strata, i.e. below £50, £51—£100, £101—£500, £501—£1000, and above £1000. 
She chose four invoices from each group to trace to the Accounts Receivables Ledger and to the stock records. 

Her sample covered 95% of the total revenue of the company. She was very happy with her results. 
However, her supervisor felt otherwise. He says she could still make incorrect quantitative conclusions about 
the capture of the revenue cycle in the company. Explain why he feels this way. 


17-3 (OBJECTIVE 17-2) What is the relationship between ARIA for tests of details of balances and ARO for tests 
of controls? 


17-4 (OBJECTIVE 17-2) Distinguish between the point estimate of the total misstatements and the true value of 
the misstatements in the population. How can each be determined? 


17-5 (OBJECTIVE 17-2) Your client owns the largest hard-disc plant in the India. The factory at Pondicherry is 
so large that it employs 12 accountants and 200 clerks to handle the various accounting functions in the plant. 
You are in charge of auditing the inventory cycle, while your colleague is in charge of auditing the rev- 
enue cycle. You found that there were a lot of late recordings of raw material received and finished goods 
shipped out. Your colleague found that the revenue cycle was in order. 
Your audit director is of the opinion that your colleague needs to revisit his investigation after you have 
finished yours. Your colleague is furious with you. Why did your director issue such an instruction? 
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17-6 (OBJECTIVE 17-3) Explain the primary characteristics of monetary unit sampling (MUS) and explain the 
differences between MUS and non-statistical sampling. 


17-7 (OBJECTIVES 17-1, 17-2, 17-3, 17-4) Define what is meant by sampling risk. Does sampling risk apply to nonstatis- 
tical sampling, MUS, attributes sampling, and variables sampling? Explain. 


17-8 (OBJECTIVE 17-3) An auditor is determining the appropriate sample size for testing inventory valuation 
using MUS. The population has 2,620 inventory items valued at $12,625,000. The tolerable misstatement is 
$500,000 at a 10% ARIA. No misstatements are expected in the population. Calculate the preliminary sample 
size. 


17-9 (OBJECTIVE 17-3) Monetary unit sampling (MUS) automatically increases the probability of select- 
ing a high value item from the population. How does MUS not help the auditor detect material 
misstatements? 


17-10 (OBJECTIVE 17-2) Explain what is meant by acceptable risk of incorrect acceptance. What are the major 
audit factors affecting ARIA? 


17-11 (OBJECTIVE 17-4) From the following scenarios, determine the extent of the population misstatement by 
the auditor: 


a. The client has a tendency to forget to declare goods in transit. The auditor is of the opinion that he cannot 
accept the value of finished goods presented in the client’s Statement of Financial Position. 

b. The auditor was not very familiar with the concept of consignment goods. He thought that goods sent to 
a hub were considered sold. 

c. The client provides music downloads to its customers. The client will only bill the customer 7 days after he 
or she downloads a song. The auditor is of the opinion that the sales figure of the client was under declared 
and must be adjusted. 


17-12 (OBJECTIVE 17-3) Explain what is meant by basic precision. How is it determined? 


17-13 (OBJECTIVE 17-3) Assume that a sample of 100 units was obtained in sampling the inventory in Question 17-8. 
Assume further that the following three misstatements were found: 


Misstatement Recorded Value Audited Value 
1 $ 897.16 $ 609.16 
2 47.02 0 
3 1,621.68 1,522.68 


Calculate the overstatement bound for the population. Draw audit conclusions based on the results. 


17-14 (OBJECTIVE 17-3) Why is monetary unit sampling (MUS) the most commonly used statistical method of 
sampling for tests of details of balances? 


17-15 (OBJECTIVE 17-4) Define what is meant by the population standard deviation and explain its importance 
in variables sampling. What is the relationship between the population standard deviation and the required 
sample size? 


17-16 (OBJECTIVE 17-5) In using difference estimation, an auditor took a random sample of 100 inven- 
tory items from a large population to test for proper pricing. Several of the inventory items were mis- 
stated, but the combined net amount of the sample misstatement was not material. In addition, a review 
of the individual misstatements indicated that no misstatement was by itself material. As a result, the 
auditor did not investigate the misstatements or make a statistical evaluation. Explain why this practice 
is improper. 

17-17 (OBJECTIVE 17-4) What are some sampling techniques used in variables sampling? 


17-18 (OBJECTIVES 17-3, 17-4) Give an example of the use of attributes sampling, MUS, and variables sampling in 
the form of an audit conclusion. 


MULTIPLE CHOICE QUESTIONS FROM CPA 
AND CIA EXAMINATIONS 


17-19 (OBJECTIVE 17-2) The following questions relate to determining sample size in tests of details of 
balances. For each one, select the best response. 


a. Mr. Murray decides to use stratified sampling. The reason for using stratified sampling rather than unre- 
stricted random sampling is to 
(1) reduce as much as possible the degree of variability in the overall population. 
(2) give every element in the population an equal chance of being included in the sample. 
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(3) allow the person selecting the sample to use personal judgment in deciding which 
elements should be included in the sample. 
(4) allow the auditor to emphasize larger items from the population. 


b. Which of the following sample planning factors will influence the sample size for a 
test of details of balances for a specific account? 


Expected Amount Measure of Tolerable 
of Misstatements Misstatement 

(1) No No 

(2) Yes Yes 

(3) No Yes 

(4) Yes No 


c. How would increases in tolerable misstatement and assessed level of control risk 
affect the sample size in substantive tests of details? 


Increase in Tolerable Increase in Assessed Level 
Misstatement of Control Risk 
(1) Increase sample size Increase sample size 
(2) Increase sample size Decrease sample size 
(3) Decrease sample size Increase sample size 
(4) Decrease sample size Decrease sample size 


17-20 (OBJECTIVES 17-2, 17-3, 17-4) The following apply to evaluating results of audit sampling 
for tests of details of balances. For each one, select the best response. 


a. While performing a substantive test of details during an audit, the auditor determined 
that the sample results supported the conclusion that the recorded account balance 
was materially misstated. It was, in fact, not materially misstated. This situation il- 
lustrates the risk of 
(1) assessing control risk too high. 

(2) assessing control risk too low. 

(3) incorrect rejection. 

(4) incorrect acceptance. 

b. In an MUS sample with a sampling interval of $5,000, an auditor discovered that a 


selected accounts receivable with a recorded amount of $10,000 had an audit value 
of $8,000. If this is the only error discovered by the auditor, the projected error of the 


sample would be 
(1) $1,000. (3) $4,000. 
(2) $2,000. (4) $5,000. 


c. The accounting department reports the accounts receivable balance as $175,000. You 
are willing to accept that balance if it is within $15,000 of the actual balance. Using 
a variables sampling plan, you compute a 95% confidence interval of $173,000 to 
$187,000. You would therefore 
(1) find it impossible to determine the acceptability of the balance. 

) accept the balance but with a lower level of confidence. 

) take a larger sample before rejecting the sample and requiring adjustments. 

4) accept the $175,000 balance because the confidence interval is within the 

materiality limits. 


17-21 (OBJECTIVES 17-3, 17-4, 17-5) The following relate to the use of statistical sampling for 
tests of details of balances. For each one, select the best response. 


SS) 


a. When the auditor uses monetary unit statistical sampling to examine the total dollar 
value of invoices, each invoice 
(1) hasan equal probability of being selected. 

(2) can be represented by no more than one monetary unit. 

(3) has an unknown probability of being selected. 

(4) has a probability proportional to its dollar value of being selected. 
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b. Which of the following would be an advantage of using variables sampling rather 

than probability-proportional-to-size (PPS) sampling? 

(1) An estimate of the standard deviation of the population’s recorded amount is not 
required. 

(2) The auditor rarely needs the assistance of a computer program to design an 
efficient sample. 

(3) The inclusion of zero and negative balances usually does not require special 
design considerations. 

(4) Any amount that is individually significant is automatically identified and selected. 


. In applying variables sampling, an auditor attempts to 
(1) estimate a qualitative characteristic of interest. 
(2) determine various rates of occurrence for specified attributes. 
(3) discover at least one instance of a critical deviation. 

(4) predict a monetary population value within a range of precision. 


DISCUSSION QUESTIONS AND PROBLEMS 


17-22 (OBJECTIVE 17-2) Your audit of Italian Hospital Group (IHG) includes examining 
whether accounts receivable is misstated. As part of your procedures, you decide to 
use stratified sampling. The accounts receivable subsidiary ledger shows the following 
accounts, separated by strata: 


No. in Dollars in 

Stratum Stratum Criteria Population Population 
1 > $25,000 5 $268,000 

2 $15,000—$25,000 12 $231,500 

3 $5,000-$15,000 26 $209,639 

4 <$5,000 58 $127,035 
101 $836,174 
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The auditor decides that internal controls are relatively weak, so the tolerable misstate- 
ment is $25,000 (about 3% of the population). As a result, all five accounts in the first 
stratum will be separately examined. Based on the risk of incorrect acceptance, the auditor 
determines the appropriate confidence factor to use is 2.4. 


Required a. Which strata should be selected for use in the sampling procedures? 
b. Following your answer to part (a), calculate the required sample size for selected strata 
based on the following non-statistical formula to determine sample size: 


Population Recorded Amount X Confidence Factor 


Sample size = 
i alc Tolerable Misstatement 
c. If the auditor had instead determined that the internal controls are relatively strong 
and that the tolerable misstatement is $75,000 and the appropriate confidence factor 
is 1.7, how does that change the sampling and sample size? 


17-23 (OBJECTIVE 17-2) Your audit of Scottish Distillery Limited focuses on whether 
accounts receivable are misstated. Because Scottish Distillery mainly sells to small pubs 
and restaurants across the country, its accounts receivable include a large number of small 
balances with no single account exceeding $10,000. As a result, the sampling procedure 
only includes one stratum. Based on the sampling procedures, 59 confirmations were sent 
out of the 237 accounts receivable. 46 confirmations were returned with the following 


total values: 
Dollars Audited 
Recorded Audited Client 
Stratum Stratum Size Value Value Misstatement 
1 46 $336,720 $321,826 $14,894 


Of the 46 confirmations returned, only 6 exceptions were reported as follows: 


Acct. Recorded Confirmation 

No. Value Response Auditor Follow-up 

114 $6,293 $8,114 Customer was unaware of discount received for 
a purchase during promotional period. 

127 $4,823 $4,283 Invoice amount was $4,283. Entry error in the 
client’s journal. 

183 $7,419 $0 Customer sent payment of $7,419 on 
December 30%. received on January 3rd 

274 $4,761 $3,761 Good received were of inferior quality. 


Customer returned $1,000 of wines on 
December 30*; received by client on 
December 31°*. 


431 $6,695 $4,500 Order was shipped in two batches. First batch 
of $4,500 shipped December 29" and received 
by client on December 31. Second batch of 
$2,195 shipped December 31 and received 
January 5°¢, 

601 $7,390 $6,218 $1,172 of incorrect wines was shipped to the 
customer. Rather than request the customer 
to return the incorrect wines, $1,172 was dis- 
counted from the invoice. 


uRare SoWideRPEBOAT GDbalGAtibh Poats dd FcRRDGASGIED DHE SAQESHANOKOOttECTION CYCLE 
om/lib/undip-ebooks/detail.action?doclID=5185606. 
1-07-27 00:57:25. 


a. Evaluate each of the confirmation exceptions to determine whether they represent Required 
misstatements, and if so, the dollar amount of the misstatement. 

b. Discuss any additional information that the audit should consider for the above situ- 
ation to determine the extent of any misstatement, e.g. are there related accounts or 
other cause for concern? 


17-24 (OBJECTIVES 17-2, 17-3) Assume you performed sampling for an accounts receivable © @,. 
population with a recorded population amount of $2,000,000. Tolerable misstatement om 
is set at $100,000 for the test, and there are no individually significant accounts greater 
than $100,000. Several different sampling results for this population are presented below; 
the upper bound is the projected misstatement plus an allowance for sampling risk. The 
results presented are for an MUS sample, but the decision as to how to resolve the pro- 
jected misstatement, including consideration of sampling risk, also applies to nonstatisti- 
cal sampling. The differences in sample size reflect differences in confidence levels and 
expected misstatement used in designing the sample. 
You are to make a recommendation as to the appropriate action to take given the sample 
results. Assume that the client is willing to record an audit adjustment for actual misstate- 
ments detected in your testing, but is unwilling to record an adjustment for projected errors. 
Issuing a qualified or adverse opinion is not included as an option. Because the audited fi- 
nancial statements are required under the terms of a loan agreement, the client will agree to 
additional testing or will correct the population if needed to receive an unmodified opinion. 


Dollar Amount 


Sample Number of of Actual Projected Upper Nature of 
Size Interval Misstatements Misstatements Misstatement Bound Misstatements 
1. 54 36,450 1 20,000 20,000 104,200 Improper contract 
price applied 
2. 46 43,290 3 425 4,731 106,979 Various pricing and 
quantity errors 
3. 54 36,450 8 20,400 110,568 241,468 Incorrect shipments, 
cutoff errors, and 
pricing errors 
4, 33 60,385 1 4,000 12,077 114,007 Incorrect currency 
translation on 
foreign shipment 
5. 72 27,500 1 400 7,333 95,333 Incorrect product 
shipped 
6. 44 44,845 2 2,500 29,897 112,934 Duplicate shipment, 


incorrect price 


For each of the sampling results 1 through 6, recommend the appropriate response(s) Required 
from the options listed below. Explain the reason for your decision. 

a. Accept the population as fairly stated. 

b. Request the client to record an adjustment for the actual misstatements. 

c. Expand the sample size. 

d. Request the client to fix the population, which will then be reaudited. 

e. Treat the misstatement as an anomaly that is an isolated occurrence that should not 

be projected to the population. 


17-25 (OBJECTIVE 17-3) Below is the total monthly sales population for Jafar’s Custom 
Candles. Cumulative amounts have been included to help you complete the problem. The 
population is somewhat smaller than is ordinarily the case for statistical sampling, but an 
entire population is useful to show how to select PPS samples. 
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a. Select a random PPS sample of 10 items, using computer software. Required 
b. Select a sample of 10 items using systematical PPS sampling using the same concepts 

discussed in Chapter 15 for systematic sampling. Use a starting point of 1857. Identify 

the physical units associated with the sample dollars. (Hint: The interval is 78,493+10.) 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Educat@haptien, 2016. RtdDUTsSAMALOBIGaFOR TESTS OF DETAILS OF BALANCES 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-07-27 00:57:25. 


c. Which sample items will always be included in the systematic PPS sample regardless 
of the starting point? Will that also be true of random PPS sampling? 

d. Which method is preferable in terms of ease of selection in this case? 

e. Why will an auditor use MUS? 


Population Recorded Cumulative | Population Recorded Cumulative 
Item Amount Amount Item (cont.) Amount (cont.) Amount (cont.) 
| $ 2,493 $ 2,493 21 $ 973 $ 39,682 
2 1,209 3,702 22 1,552 41,234 
3 930 4,632 23 2,345 43,579 
4 3,027 7,659 24 879 44,458 
5 506 8,165 25 5,675 50,133 
6 380 8,545 26 589 50,722 
7 782 9,327 27 1,234 51,956 
8 1,304 10,631 28 1,008 52,964 
9 2,604 13,235 29 2,130 55,094 
10 5,455 18,690 30 792 55,886 
II 2,300 20,990 31 1,354 57,240 
12 903 21,893 32 4,197 61,437 
13 850 22,743 33 842 62,279 
14 1,203 23,946 34 512 62,79 | 
15 3,120 27,066 35 5,768 68,559 
16 4,760 31,826 36 1,254 69,813 
17 403 32,229 37 2,348 72,161 
18 3,349 35,578 38 3,092 75,253 
19 2,101 37,679 39 1,843 77,096 
20 1,030 38,709 40 1,397 78,493 


30, the auditor set a tolerable misstatement of $50,000 at an ARIA of 10%. A PPS sample 
of 100 was selected from an accounts receivable population that had a recorded balance 
of $1,975,000. The following table shows the differences uncovered in the confirmation 


17-26 (OBJECTIVE 17-3) In the audit of Rand Farm Products for the year ended September 


process: 
Accounts Accounts 
Receivable Receivable Follow-up Comments 
per Records per Confirmation by Auditor 
1. $2,728.00 $2,498.00 Pricing error on two invoices. 
2. $5,125.00 -0- Customer mailed check 9/26; company received 
check 10/3. 
3. $3,890.00 $1,190.00 Merchandise returned 9/30 and counted in 
inventory; credit was issued 10/6. 
4. $815.00 $785.00 Footing error on an invoice. 
5. $548.00 -0- Goods were shipped 9/28; customer received 
goods on 10/2; sale was recorded on 9/28. 
$3,215.00 $3,190.00 Pricing error on a credit memorandum. 
$1,540.00 -0- Goods were shipped on 9/29; customer received 
goods 10/3; sale was recorded on 9/30. 
Required a. Calculate the upper misstatement bound on the basis of the client misstatements in 
the sample. 


b. Is the population acceptable as stated? If not, what options are available to the auditor 
at this point? Which option should the auditor select? Explain. 
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17-27 (OBJECTIVE 17-3) Your audit of Belgium Custom Manufacturing Limited (BCML) uses 
monetary unit sampling (MUS). The accounts receivable population of BCML is listed below: 


Unit # Recorded Amount Cumulative Total 
1 $2,893 $2,893 
2 $5,096 $7,989 
3 $1,162 $9,151 
4 $967 $10,118 
5 $4,683 $14,801 
6 $3,970 $18,771 
7 $5,447 $24,218 
8 $8,068 $32,386 
9 $3,492 $35,778 

10 $1,106 $36,884 
11 $7,205 $44,089 
12 $2,840 $46,929 
13 $5,538 $52,467 
14 $6,110 $58,577 
15 $890 $59,467 
16 $3,261 $62,728 
17 $1,945 $64,673 
18 $8,224 $72,897 
19 $4,209 $77,106 


Based on the assessed risk of material misstatement and the acceptable risk of incorrect 
acceptance, you decide that the appropriate sample size is 6. 

a. Suppose you select the sample with probability proportional to size sample selec- Required 
tion (PPS) and randomly select $6,439 as the start, describe the six units selected for 
sample testing and explain how they are selected. 

b. Explain the difference between probability proportion to size sample selection (PPS) 
and random selection of dollars/units to be included in the sample. 

c. List some of the limitations of proportion to size sample selection (PPS) with mon- 
etary unit sampling (MUS). 

d. After the sampling method and sample is selected, the auditor must generalize from 
the sample to the population. Part of this procedure results in the calculation of the 
misstatement bound. Explain what the misstatement bound is and how it related to 
the audit in general. (Assume that the number of misstatements found during the 
sampling procedures is not zero). 


17-28 (OBJECTIVES 17-2, 17-3, 17-4) An audit partner is developing an office training program 
to familiarize her professional staff with audit sampling decision models applicable to the 
audit of dollar-value balances. She wishes to demonstrate the relationship of sample sizes to 
population size and estimated population misstatement rate and the auditor’s specifications 
as to tolerable misstatement and ARIA. The partner prepared the following table to show 
comparative population characteristics and audit specifications of the two populations: 
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Audit Specifications as to a 


Characteristics of Population | Sample from Population | 
Relative to Population 2 Relative to a Sample from Population 2 
Estimated Population Tolerable 

Size Misstatement Rate Misstatement ARIA 

Case 1 Equal Equal Equal Lower 
Case 2 Larger Equal Smaller Higher 
Case 3 Smaller Smaller Equal Higher 
Case 4 Larger Equal Equal Lower 

Case 5 Equal Larger Larger Equal 


Required In items (1) through (5) you are to indicate for the specific case from the table the required 
sample size to be selected from population 1 relative to the sample from population 2. 
(1) Incase 1, the required sample size from population lis ___. 
(2) Incase 2, the required sample size from population lis ____ 
(3) Incase 3, the required sample size from population 1 is 
(4) Incase 4, the required sample size from population 1 is 
(5) Incase 5, the required sample size from population 1 is 
Your answer choice should be selected from the following responses: 
a. Larger than the required sample size from population 2. 
b. Equal to the required sample size from population 2. 
c. Smaller than the required sample size from population 2. 
d. Indeterminate relative to the required sample size from population 2.* 


17-29 (OBJECTIVE 17-5) In auditing the valuation of inventory, the auditor, Abbas Saleh, 

decided to use difference estimation. He decided to select an unrestricted random sample 
of 80 inventory items from a population of 1,840 that had a book value of $175,820. Saleh 
decided in advance that he was willing to accept a maximum misstatement in the popu- 
lation of $6,000 at an ARIA of 5 percent. There were eight misstatements in the sample, 
which were as follows: 


Audit Value Book Value Sample Misstatements 

$812.50 $740.50 $(72.00) 

12.50 78.20 65.70 

10.00 51.10 41.10 

25.40 61.50 36.10 

600.10 651.90 51.80 

12 0 (12) 

51.06 81.06 30.00 

83.11 104.22 21.11 

Total $1,594.79 ‘$1,768.48 $173.69 
Required a. Calculate the point estimate, the computed precision interval, the confidence interval, 


and the confidence limits for the population. Label each calculation. Use a computer 
for this purpose (instructor’s option). 

b. Should Butler accept the book value of the population? Explain. 

c. What options are available to her at this point? 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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CASES 
17-30 (OBJECTIVE 17-3) You are doing the audit of Mahsa Tire and Parts, a wholesale auto 


parts company. You have decided to use monetary unit sampling (MUS) for the audit of 
accounts receivable and inventory. The following are the recorded balances: 


Accounts receivable $12,000,000 
Inventory $23,000,000 
You have already made the following judgments: 
Performance materiality $800,000 
Acceptable audit risk 5% 
Inherent risk: 
Accounts receivable 80% 
Inventory 100% 
Assessed control risk: 
Accounts receivable 50% 
Inventory 80% 


Analytical procedures have been planned for inventory, but not for accounts receivable. 
The analytical procedures for inventory are expected to have a 60% chance of detecting a 
material misstatement should one exist. 

You have concluded that it will be difficult to alter sample size for accounts receivable 
confirmation once confirmations are sent and replies are received. However, inventory 
tests can be reopened without great difficulty. 

After discussions with the client, you believe that the accounts are in about the same 
condition this year as they were last year. Last year no misstatements were found in the con- 
firmation of accounts receivable. Inventory tests revealed an overstatement amount of about 
1%. For requirements a—c, make any assumptions necessary in deciding the factors affecting 
sample size. If no table is available for the ARIA chosen, estimate sample size judgmentally. 


a. Plan the sample size for the confirmation of accounts receivable using MUS. Required 
b. Plan the sample size for the test of pricing of inventories using MUS. 
c. Plan the combined sample size for both the confirmation of accounts receivable and 
the price tests of inventory using MUS. 
d. (Instructor’s option) Using an electronic spreadsheet, generate a list of random dol- 
lars in generation order and in ascending order for the sample of accounts receivable 
items determined in part a. 


17-31 (OBJECTIVES 17-2, 17-3) The audit of Xin Long Plastics, based in Taipei, Taiwan includes 
the confirmation of accounts receivable from a number of exporters who use their plastic 
packaging products. The auditor uses MUS sampling with a sampling interval of $8,250. 

Most of the confirmations indicated that the recorded accounts receivable amount 
matched the customers’ records. Of the ones that were mismatched, the audit determined 

that all but five were due to timing differences and did not indicate a misstatement. The 

five misstatements discovered by the audit are listed below: 
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Recorded Accounts Audited Accounts Factual 
Account No. Receivable Amount Receivable Amount Misstatement 
1095 $4,803 $4,352 $ 451 
2274 $9,500 $8,791 $ 709 
4187 $5,932 $4,287 $1,645 
4214 $6,698 $7,100 $(402) 
5246 $2,370 $2,060 $ 310 


The auditor selects a 10% risk of incorrect acceptance. The chart below shows the confi- 
dence factors based on the number of overstatement misstatements and a 10% ARIA. 
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No. of Overstatement Risk of Incorrect Incremental Change 


Misstatements Acceptance in Confidence Factor 

0 2.31 - 

| 3.89 1.58 
2 5.33 1.44 
3 6.69 1.36 
4 8.00 1.31 
5 9.28 1.28 
6 10.54 1.26 
7 11.78 1.24 
8 13.00 1.22 

Required a. From the misstatements listed above, calculate the percentage misstatement for each 


misstatement as appropriate. 

b. Project the sample misstatement by multiplying the percentage misstatement by the 
length of the sampling interval. 

c. Add an allowance for sampling risk based on the confidence factors for the actual 
number of misstatements and acceptable risk of incorrect acceptance. 


ACL PROBLEM 


ACD 17-32 (OBJECTIVE 17-3) This problem requires the use of ACL software, which can be 
accessed through the textbook Web site. Information about downloading and using 
ACL and the commands used in this problem can also be found on the textbook Web 
site. You should read all of the reference material, especially the material on sampling, 
to answer questions a. through e. For this problem, use the “Invoices” file in the “Sales 
and Collection” subfolder under tables in the ACL_Rockwood project. This file contains 
information on sales invoices generated during calendar year 2014, including those that 
have been paid versus those still outstanding. Suggested commands, where applicable, are 
indicated at the end of the problem requirements. 


Required a. Using the Invoices file, filter the file to retain only those invoices that are still out- 
standing and save this filter as “Accounts_Receivable.” (Filter) Determine the total 
dollar amount of the outstanding invoices (Total). Using the “Accounts_Receivable” 
data, calculate the sample size and sampling interval for an MUS sample based on 
total Invoice Amount. Use a confidence level of 90%, materiality of $50,000, and 
expected errors of $2,500. (Sampling/Calculate Sample Size; select “monetary” radio 
button) 

b. What is the sampling size and sampling interval if you increase materiality to $60,000 
and decrease expected errors to $1,000? 

c. Select the sample based on the sampling interval determined in part a. (Sampling / 
Sample; select “Sample type” as MUS. For “Sample Parameters” select fixed interval 
and enter the interval from part a.; use a random start of 3179.) 

d. How many items were selected for testing? Why is the number selected for testing 
less than the sample size determined in part a.? 

e. What is the largest item selected for testing? How many sample items are larger than 
the sampling interval? How many items are larger than the sampling interval in the 
population? 
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APPLICATION OF THE 
AUDIT PROCESS TO 
OTHER CYCLES 


CHAPTERS 18-23 


ach chapter in PART 4 demonstrates the relationship 

of internal controls, substantive tests of transactions, 

and substantive analytical procedures to the related 
balance sheet and income statement accounts in the cycle and 
to test of details of balances. 


Chapters 18 and 19 address the audit of the 
acquisition and payment cycle, including the audit 
of accounts payable and other liability accounts. 


Chapter 20 covers the audit of the payroll and 
personnel cycle. 


Chapter 21 addresses the audit of the inventory and 
warehousing cycle, including physical observation tests 
and the relationship of the inventory and warehousing 
cycle to other cycles. 


Chapter 22 includes the audit of the capital acquisition 
and repayment cycle. 


Chapter 23 is the audit of cash and investment 
balances, which is covered last because cash is 
affected by the transactions in other cycles. 


3 
© 
2 
© 
n 
2 
nan 
£ 
ee. 
oa 
<x 
3 
£ 
= 
ea 
< 
2 
3 
S) 
=| 
5 
uw 
= 
5 
2 
w 
© 
a 
o 
2 
So 
a 
{2) 
z 
a 
= 
roM 
fo) 
Oo 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, Limited, 2016. ProQuest Ebook Central, 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-07-27 00:57:25. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


CHAPTER 


lo. 


LEARNING OBJECTIVES 


After studying this chapter, you should 


be able to 
18-1 Identify the accounts and 


the classes of transactions in 
the acquisition and payment 


cycle. 
18-2 Describe the business 
functions and the related 


documents and records in the 

acquisition and payment cycle. 
18-3 Understand internal control, 

and design and perform tests 


of controls and substantive 
tests of transactions for the 


acquisition and payment cycle. 
18-4 Describe the methodology for 


designing tests of details of 


balances for accounts payable 


using the audit risk model. 

18-5 Design and perform 
substantive analytical 
procedures for 
accounts payable. 

18-6 Design and perform tests 
of details of balances for 
accounts payable, including 
out-of-period liability tests. 

18-7 Distinguish the reliability of 
vendors’ invoices, vendors’ 


statements, and confirmations 


of accounts payable as audit 
evidence. 


AUDIT OF THE 
ACQUISITION AND 

oq! SYMENT CYCLE: TESTS OF 
®CONTROLS, SUBSTANTIVE 
TESTS OF TRANSACTIONS, 
AND ACCOUNTS PAYABLE 


False Purchases Camouflage Overstated Profits 


Comptronix Corporation announced that senior members of its management team overstated 
profits, and there would be material adjustments to the prior years’ audited financial state- 
ments. Central to the fraud was the use of fictitious purchases of large equipment items to 
overstate fixed assets and hide fictitious sales. 


The senior executives circumvented Comptronix’s existing internal controls by bypassing the 
purchasing and receiving departments so that no one at Comptronix could discover the scheme. 
Comptronix employees usually created a fairly extensive paper trail for equipment purchases. 
Company internal controls over acquisition and cash disbursement transactions typically required 
a purchase order, receiving re- 
port, and vendor invoice before 
payment could be authorized 
by the chief operating officer 
or the controller/treasurer, 
who were both participants in 
the fraud. As a result, the exec- 
utives were able to bypass con- 
trols over cash disbursements 
and authorize payment for 
nonexistent purchases without 
creating any documents for the 
fictitious transactions. 


The company also created fictitious sales and related receivables. The company issued checks 
to pay for the false purchase transactions. The checks were then redeposited into the com- 
pany’s bank account and recorded as collections on the fictitious receivables. As a result, it 
appeared that the fictitious sales were collected, and that payments were made to support the 
false fixed asset purchases. 


The fraud scheme grossly exaggerated the company’s performance by reporting profits when 
the company was actually incurring losses. On the day that the public announcement of the 
fraud was made, Comptronix’s common stock price declined abruptly by 72 percent! The SEC 
ultimately charged the executives with violating the antifraud provisions of the Securities Act 
of 1933 and the Securities Exchange Act of 1934. The SEC permanently barred the executives 
from serving as officers or directors of any public company, ordered them to repay bonuses and 
trading losses avoided, and imposed civil monetary penalties against them. 


Source: Based on Accounting and Auditing Enforcement Release No. 543, Commerce Clearing 
House, Inc., Chicago. 
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We'll now discuss the acquisition and payment cycle. The acquisition of goods and services includes the ac- 
quisition of such things as raw materials, equipment, supplies, utilities, repairs and maintenance, and research and 
development. In the first part of the chapter, we'll examine assessing control risk and designing tests of controls 
and substantive tests of transactions for the classes of transactions in the acquisition and payment cycle. Then, we'll 
cover performing tests of details of balances for accounts payable. 

As with the sales and collection cycle, auditors need to understand the business functions and documents and 
records in a company before they can assess control risk and design tests of controls and substantive tests of trans- 
actions. We first examine two related topics: 


1. The acquisition and payment cycle classes of transactions and account balances in a typical company 
2. Typical documents and records used in the acquisition and payment cycle 


ACCOUNTS AND CLASSES OF TRANSACTIONS IN THE 
ACQUISITION AND PAYMENT CYCLE 


The objective in the audit of the acquisition and payment cycle is to evaluate whether ‘OBJECTIVE 18-10 


the accounts affected by the acquisitions of goods and services and the cash disburse- ; 

a ‘ . : ; Identify the accounts and the 
ments for those acquisitions are fairly presented in accordance with accounting stan- classes of transactions in the 
dards. Figure 18-1 shows the way accounting information flows through the various acquisition and payment cycle. 
accounts in the acquisition and payment cycle. 

There are three classes of transactions included in the cycle: 


1. Acquisitions of goods and services 
2. Cash disbursements 
3. Purchase returns and allowances and purchase discounts 


FIGURE |8-| Accounts in the Acquisition and Payment Cycle 
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Ten typical accounts involved in the acquisition and payment cycle are shown by 
T accounts in Figure 18-1. For simplicity, we show only the control accounts for the 
three major categories of expenses used by most companies. For each control account, 
examples of the subsidiary expense accounts are also given. Note the large number of 
accounts affected by this cycle. It is therefore not surprising that auditing the acquisi- 
tion and payment cycle often takes more time than auditing any other cycle. 

Figure 18-1 shows that every transaction is either debited or credited to accounts pay- 
able. Because some companies make acquisitions directly by check or electronic transfer 
or with cash on hand, the figure is an oversimplification. We assume that acquisitions 
made for cash are processed in the same manner as those made by accounts payable. 


BUSINESS FUNCTIONS IN THE CYCLE AND RELATED 
DOCUMENTS AND RECORDS 


Describe the business functions 
and the related documents and 
records in the acquisition and 
payment cycle. 


Processing Purchase 
Orders 


Receiving Goods 
and Services 
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The acquisition and payment cycle involves the decisions and processes necessary for 
obtaining the goods and services for operating a business. The cycle typically begins 
with the initiation of a purchase requisition by an authorized employee who needs 
the goods or services, and it ends with payment on accounts payable. In the follow- 
ing discussion, the example of a small manufacturing company that makes tangible 
products for sale to third parties is used, but the principles covered here also apply to 
service companies, government entities, and other types of organizations. 

The third column of Table 18-1 lists four business functions that occur in every 
business in recording the three classes of transactions in the acquisition and payment 
cycle. The first three functions are for recording the acquisition of goods and services 
on account, and the fourth function is for recording cash disbursements for payments 
to vendors. For simplicity, our illustration does not show processing purchase returns 
and allowances and purchase discounts. Although purchase returns and allowances 
and purchase discounts business functions also occur in this cycle, we omit them here 
because the amounts are not significant for most companies. 

Next, we examine in more detail each of the four business functions, paying par- 
ticular attention to the typical documents and records used. These are listed in the 
fourth column of Table 18-1. 


The request for goods or services by the client’s personnel is the starting point for the 
cycle. The exact form of the request and the required approval depend on the nature 
of the goods and services and company policy. Common documents include: 


Purchase Requisition A purchase requisition is used to request goods and services 
by an authorized employee. This may take the form of a request for such acquisitions 
as materials by production staff or the storeroom supervisor, outside repairs by office 
or plant personnel, or insurance by the vice president in charge of property and equip- 
ment. Companies often rely on pre-specified reorder points used by the computer to 
initiate inventory purchase requisitions automatically. 


Purchase Order A purchase order is a document used to order goods and services 
from vendors. It includes the description, quantity, and related information for goods 
and services the company intends to purchase and is often used to indicate authori- 
zation of the acquisition. Companies often submit purchase orders electronically to 
vendors who have made arrangements for electronic data interchange (EDI). 


The receipt by the company of goods or services from the vendor is a critical point 
in the cycle because it is when most companies first recognize the acquisition and 
related liability on their records. When goods are received, adequate control requires 
examination for description, quantity, timely arrival, and condition. A receiving 
report is a paper or electronic document prepared at the time goods are received. It 
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TABLE 18-1 


Classes of 
Transactions Accounts 


Acquisitions Inventory 
Property, plant, and equipment 
Prepaid expenses 
Leasehold improvements 
Accounts payable 
Manufacturing expenses 
Selling expenses 
Administrative expenses 


Business Functions 


Processing purchase orders 


Classes of Transactions, Accounts, Business Functions, and Related Documents 
and Records for the Acquisition and Payment Cycle 


Documents and Records 


Purchase requisition 
Purchase order 


Receiving goods and services 


Receiving report 


Recognizing the liability 


Vendor’s invoice 

Debit memo 

Voucher 

Acquisitions transaction file 
Acquisitions journal or listing 
Accounts payable master file 
Accounts payable trial balance 
Vendor’s statement 


Cash disbursements Cash in bank 
Accounts payable 
Purchase discounts 


Processing and recording cash 
disbursements 


Check or electronic payment 
Cash disbursements transaction file 
Cash disbursements journal or listing 
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includes a description of the goods, the quantity received, the date received, and other 
relevant data. 


The proper recognition of the liability for the receipt of goods and services requires 
prompt and accurate recording. The initial recording affects the financial statements 
and the actual cash disbursement; therefore, companies must take care to include all 
acquisition transactions, only acquisitions that occurred, and at the correct amounts. 
Common documents and records include: 


Vendor’s Invoice A vendor’s invoice is a document received from the vendor and 
shows the amount owed for an acquisition. It indicates the description and quantity 
of goods and services received, price (including freight), cash discount terms, date of 
the billing, and total amount. The vendor’s invoice is important because it indicates 
the amount recorded in the acquisition transaction file. For companies using EDI, the 
vendor’s invoice is transmitted electronically, which affects how the auditor evaluates 
evidence. 


Debit Memo A debit memo is also a document received from the vendor and in- 
dicates a reduction in the amount owed to a vendor because of returned goods or an 
allowance granted. It often takes the same form as a vendor’s invoice, but it supports 
reductions in accounts payable rather than increases. 


Voucher A voucher is commonly used by organizations to establish a formal means 
of recording and controlling acquisitions, primarily by enabling each acquisition 
transaction to be sequentially numbered. Vouchers include a cover sheet or folder for 
containing documents and a package of relevant documents such as the purchase or- 
der, copy of the packing slip, receiving report, and vendor’s invoice. After payment, a 
copy of the check or electronic funds transfer is added to the voucher package. 


Acquisitions Transaction File This is a computer-generated file that includes all ac- 
quisition transactions processed by the accounting system for a period, such as a day, 
week, or month. It contains all information entered into the system and includes infor- 
mation for each transaction, such as vendor name, date, amount, account classification 
or classifications, and description and quantity of goods and services purchased. The 
file can also include purchase returns and allowances or there can be a separate file for 


Recognizing the 
Liability 
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Processing and 
Recording Cash 
Disbursements 
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those transactions. Depending on the company’s needs, the information in the acquisi- 
tions transaction file is used for a variety of records, listings, or reports, such as an ac- 
quisitions journal, accounts payable master file, and transactions for a certain account 
balance or division. 


Acquisitions Journal or Listing The acquisitions journal or listing, often referred 
to as the purchases journal, is generated from the acquisitions transaction file and 
typically includes the vendor name, date, amount, and account classification or clas- 
sifications for each transaction, such as repair and maintenance, inventory, or utilities. 
It also identifies whether the acquisition was for cash or accounts payable. The journal 
or listing can cover any time period, typically a month. The journal or listing includes 
totals of every account number included for the time period. The same transactions 
included in the journal or listing are also posted simultaneously to the general ledger 
and, if they are on account, to the accounts payable master file. 


Accounts Payable Master File An accounts payable master file records acquisitions, 
cash disbursements, and acquisition returns and allowances transactions for each ven- 
dor. The master file is updated from the acquisition, returns and allowances, and cash dis- 
bursement computer transaction files. The total of the individual account balances in the 
master file equals the total balance of accounts payable in the general ledger. A printout 
of the accounts payable master file shows, by vendor, the beginning balance in accounts 
payable, each acquisition, acquisition return and allowance, cash disbursement, and the 
ending balance. Many companies do not maintain an accounts payable master file by 
vendor. These companies pay on the basis of individual vendor’s invoices. Therefore, the 
total of unpaid vendors’ invoices in the master file equals total accounts payable. 


Accounts Payable Trial Balance An accounts payable trial balance listing includes 
the amount owed to each vendor or for each invoice or voucher at a point in time. It is 
prepared directly from the accounts payable master file. 


Vendor’s Statement A vendor’s statement is a document prepared monthly by 
the vendor that indicates the beginning balance, acquisitions, returns and allowances, 
payments to the vendor, and ending balance. These balances and activities are the ven- 
dor’s representations of the transactions for the period, not the client’s. Except for dis- 
puted amounts and timing differences, the client’s accounts payable master file should 
be the same as the vendor’s statement. 


The payment for goods and services represents a significant activity for all entities. 
This activity directly reduces balances in liability accounts, particularly accounts pay- 
able. Documents associated with the disbursement process that auditors examine 
include: 


Check This document is commonly used to pay for the acquisition when payment is 
due. Most companies use computer-prepared checks based on information included 
in the acquisition transactions file at the time goods and services are received. Checks 
are typically prepared in a multi-copy format, with the original going to the payee, 
one copy filed with the vendor’s invoice and other supporting documents, and an- 
other filed numerically. In most cases, individual checks are recorded in a cash dis- 
bursements transaction file. 

After a check includes the signature of an authorized person, it is an asset. 
Therefore, signed checks should be mailed by the signer or a person under the signer’s 
control. When cashed by the vendor and cleared by the client’s bank, it is called a can- 
celled check. At that point it is no longer an asset, but now is a document. In many EDI 
arrangements, the company submits payments to the vendor electronically through 
an electronic funds transfer (EFT) between the company’s bank and the vendor’s bank. 


Cash Disbursements Transaction File This is a computer-generated file that in- 
cludes all cash disbursements transactions processed by the accounting system for a 
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period, such as a day, week, or month. It includes the same type of information dis- 
cussed for the acquisitions transaction file. 


Cash Disbursements Journal or Listing This is a listing or report generated from 
the cash disbursements transaction file that includes all transactions for any time 
period. The same transactions, including all relevant information, are included in the 
accounts payable master file and general ledger. 


METHODOLOGY FOR DESIGNING TESTS OF CONTROLS 
AND SUBSTANTIVE TESTS OF TRANSACTIONS 


In a typical audit, the most time-consuming accounts to verify by substantive tests 
of details of balances are accounts receivable, inventory, fixed assets, accounts pay- 
able, and expense accounts. Notice that four of these five are directly related to the 
acquisition and payment cycle. If the auditor can reduce tests of details of the account 
balances by using tests of controls and substantive tests of transactions to verify the 
effectiveness of internal controls for acquisitions and cash disbursements, the net 
time saved can be dramatic. Tests of controls and substantive tests of transactions for 
the acquisition and payment cycle receive a considerable amount of attention, espe- 
cially when the client has effective internal controls. 

Tests of controls and substantive tests of transactions for the acquisition and pay- 
ment cycle are divided into two broad areas: 


1. Tests of acquisitions, which concern three of the four business functions dis- 
cussed earlier in this chapter: processing purchase orders, receiving goods and 
services, and recognizing the liability 

2. Tests of payments, which concern the fourth function, processing and recording 
cash disbursements 


Figure 18-2 (p. 634) illustrates the methodology for designing tests of controls and 
substantive tests of transactions for the acquisition and payment cycle. It is the same 
methodology used in earlier chapters. Next, let’s examine each part of Figure 18-2, 
starting with understanding internal control. 


The auditor gains an understanding of internal control for the acquisition and pay- 
ment cycle as part of performing risk assessment procedures by studying the client’s 
flowcharts, reviewing internal control questionnaires, and performing walkthrough 
tests for acquisition and cash disbursement transactions. The procedures for under- 
standing internal control in the acquisition and payment cycle are similar to the pro- 
cedures performed in other transaction cycles, as discussed in earlier chapters. 


Next, the key internal controls for each of the business functions described earlier in 
this chapter are examined. These are authorization of purchases, separation of the 
custody of the received goods from other functions, timely recording and indepen- 
dent review of transactions, and authorization of payments to vendors. 


Authorization of Purchases Proper authorization for acquisitions ensures that the 
goods and services acquired are for authorized company purposes, and it avoids the 
acquisition of excessive or unnecessary items. Most companies require different levels of 
authorization for different types of acquisitions or dollar amounts. For example, acquisi- 
tions of fixed assets in excess of a specified dollar limit require approval by the board of 
directors; items acquired relatively infrequently, such as insurance policies and long-term 
service contracts, are approved by certain officers; supplies and services costing less 
than a designated amount are approved by supervisors and department heads; and some 
types of raw materials and supplies are reordered automatically when they fall below a 
predetermined level, often by direct communication with vendors’ computers. 


Understand internal control, 
and design and perform tests 
of controls and substantive 
tests of transactions for the 
acquisition and payment cycle. 


Understand Internal 
Control 


Assess Planned 
Control Risk 
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Methodology for Designing Tests of Controls and Substantive 


FEE Tests of Transactions for the Acquisition and Payment Cycle 


Understand internal control— 
acquisitions and 
cash disbursements 


es 


Assess planned control risk— 
acquisitions and 
cash disbursements 


Determine extent 
of tests of controls* 


Design tests of Audit procedures 
controls and 


substantive tests of 
transactions for 
acquisitions and cash 
disbursements to meet 
transaction-related 
audit objectives Timing 


Sample size 


Items to select 


* Extent of tests of controls is determined by planned reliance on controls. For accelerated 
filer public companies, testing must be sufficient to issue an opinion on internal control 
over financial reporting. 


After the purchase requisition for an acquisition has been approved, a purchase 
order to acquire the goods or services must be initiated. A purchase order is issued to a 
vendor for a specified item at a certain price to be delivered at or by a designated time. 
The purchase order, issued either in written or electronic form, is generally viewed as a 
legal document, and represents an offer to buy the goods or services. 

Companies commonly establish purchasing departments to ensure an ade- 
quate quality of goods and services at a minimum price. For effective internal 
control, the purchasing department should be separate from those who authorize 
the acquisition or receive the goods. All purchase orders should be prenumbered 
to permit easier accounting for all outstanding purchase orders and should be 
designed to minimize the likelihood of unintentional omissions on the form when 
goods are ordered. 


Separation of Asset Custody from Other Functions Most companies have the re- 
ceiving department initiate a receiving report as evidence of the receipt and examina- 
tion of goods. One copy is normally sent to the raw materials storeroom and another 
to the accounts payable department for their information needs. To prevent theft and 
misuse, the goods should be physically controlled from the time of their receipt until their 
use or disposal. The personnel in the receiving department should be independent 
of the storeroom personnel and the accounting department. Finally, the accounting 
records should transfer responsibility for the goods each time they are moved, from 
receiving to storage, from storage to manufacturing, etc. 


Timely Recording and Independent Review of Transactions In some companies, 
the recording of the liability for acquisitions is made on the basis of the receipt of 
goods and services. In others, recording is deferred until the vendor’s invoice is 
received. In either case, the accounts payable department typically has responsi- 
bility for verifying the appropriateness of acquisitions. This is done by comparing 
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the details on the purchase order, the receiving report, and the vendor’s invoice to 
determine that the descriptions, prices, quantities, terms, and freight on the ven- 
dor’s invoice are correct. Typically, the accounts payable department also verifies 
extensions, footings, and account distributions. In some cases, computer software 
matches documents and verifies invoice accuracy automatically. The accounts pay- 
able department should also account for all receiving reports to assure that the com- 
pleteness objective is satisfied. 

An important control in the accounts payable and information technology 
departments is the requirement that personnel who record acquisitions do not have 
access to cash, marketable securities, and other assets. Adequate documents and 
records, proper procedures for record keeping, and independent checks on perfor- 
mance are also necessary controls in the accounts payable function. 


Authorization of Payments The most important controls over cash disbursements 
include: 


* The signing of checks by an individual with proper authority 

* Separation of responsibilities for signing checks and performing the accounts 
payable function 

* Careful examination of supporting documents by the check signer at the time 
the check is signed 


The checks should be prenumbered to make it easier to account for all checks 
and printed on special paper that makes it difficult to alter the payee or amount. 
Companies should take care to provide physical control over blank, voided, and 
signed checks. They should also have a method of canceling supporting docu- 
ments to prevent their reuse as support for another check at a later time. A common 
method is to document the check number on the supporting documents. A number 
of organizations issue payment electronically using EDI technologies that disburse 
funds from the organization’s bank accounts to the vendors’ accounts. Controls over 
authorization of electronic payments are just as important as controls over printed 
checks. Restrictions should be in place that allow only authorized individuals to issue 
an electronic payment, and those individuals should be separate from the accounts 
payable function. 


After auditors identify key internal controls and deficiencies, they assess control risk. 
When an auditor intends to rely on controls to support a preliminary control risk 
assessment below maximum, the auditor performs tests of controls to obtain evi- 
dence that controls are operating effectively. As the operating effectiveness of controls 
improves and is supported by additional tests of controls, the auditor is able to reduce 
substantive testing. Of course, if the client is an accelerated filer public company, the 
auditor must document and test controls sufficiently to issue an opinion on internal 
control over financial reporting. 


Table 18-2 (p. 636) summarizes key internal controls, common tests of controls, and 
common substantive tests of transactions for each transaction-related audit objective. 
We assume the existence of a separate acquisitions journal or listing for recording all 
acquisitions. 

As you examine Table 18-2, you should: 

* Relate each of the internal controls to transaction-related audit objectives 

* Relate tests of controls to internal controls 

* Relate substantive tests of transactions to transaction-related audit objectives 

after considering controls and deficiencies in the system 


The audit evidence for an audit engagement will vary with the internal controls 
and other circumstances. Significant audit efficiencies can be achieved on many 
audits when controls are operating effectively. 


Determine Extent 
of Tests of Controls 


Design Tests of Controls 


and Substantive Tests 
of Transactions for 
Acquisitions 
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TABLE 18-2 


Transaction-Related 
Audit Objectives 


Recorded acquisitions are 
for goods and services 
received, consistent with 
the best interests of the 
client (occurrence). 


Key Internal Controls 


Purchase requisition, purchase 
order, receiving report, and 
vendor’s invoice are attached 
to the voucher.* 


Acquisitions are approved at the 
proper level. 


Computer accepts entry of pur- 
chases only from authorized 
vendors in the vendor master 
file. 


Documents are cancelled to 
prevent their reuse. 


Vendors’ invoices, receiving 
reports, purchase orders, 
and purchase requisitions 
are internally verified.* 


Common Tests of Controls 


Examine documents in voucher 
package for existence. 


Examine indication of approval. 


Attempt to input transactions with 
valid and invalid vendors. 


Examine indication of cancellation. 


Examine indication of internal 
verification. 


Summary of Transaction-Related Audit Objectives, Key Controls, Tests of Controls, 
and Substantive Tests of Transactions for Acquisitions 


Common Substantive Tests 
of Transactions 


Review the acquisitions journal, general 
ledger, and accounts payable master file 
for large or unusual amounts. 

Examine underlying documents for rea- 
sonableness and authenticity (vendors’ 
invoices, receiving reports, purchase 
orders, and purchase requisitions).* 

Examine vendor master file for unusual 
vendors. 

Trace inventory acquisitions to 
inventory master file. 

Examine fixed assets acquired. 


Existing acquisition trans- 
actions are recorded 
(completeness). 


Purchase orders are prenumbered 
and accounted for. 


Receiving reports are prenum- 
bered and accounted for.* 


Vouchers are prenumbered and 
accounted for. 


Account for a sequence of purchase 
orders. 


Account for a sequence of receiving 
reports. 


Account for a sequence of vouchers. 


Trace from a file of receiving reports 
to the acquisitions journal.* 

Trace from a file of vendors’ invoices 
to the acquisitions journal. 


Recorded acquisition 
transactions are accurate 
(accuracy). 


Calculations and amounts are 
internally verified. 


Batch totals are compared with 
computer summary reports. 


Acquisitions are approved for 
prices and discounts. 


Examine indication of internal 
verification. 


Examine file of batch totals for initials 


of data control clerk; compare 
totals to summary reports. 


Examine indication of approval. 


Compare recorded transactions 
in the acquisitions journal with 
the vendor’s invoice, receiv- 
ing report, and other supporting 
documentation.* 

Recompute the clerical accuracy 
on the vendor’s invoice, including 
discounts and freight. 


Acquisition transactions 
are correctly included 
in the accounts payable 
and inventory master 
files and are correctly 
summarized (posting and 
summarization). 


Accounts payable master file 
contents are internally verified. 


Accounts payable master file 
or trial balance totals are 
compared with general ledger 
balances. 


Examine indication of internal 
verification. 


Examine initials on general ledger 
accounts indicating comparison. 


Test clerical accuracy by footing the 
journals and tracing postings to general 
ledger and accounts payable and 
inventory master files. 


Acquisition transactions 
are correctly classified 
(classification). 


An adequate chart of accounts is 
used. 


Account classifications are inter- 
nally verified. 


Examine procedures manual and chart 


of accounts. 


Examine indication of internal 
verification. 


Compare classification with chart of 
accounts by referring to vendors’ 
invoices. 


Acquisition transactions are 
recorded on the correct 
dates (timing). 


Procedures require recording 
transactions as soon as possible 
after the goods and services 
have been received. 


Dates are internally verified. 


Examine procedures manual and 
observe whether unrecorded 
vendors’ invoices exist. 


Examine indication of internal 
verification. 


Compare dates of receiving reports and 
vendors’ invoices with dates in the 
acquisition journal.* 
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are the only documentation available. 
iThis analytical procedure can also apply to other objectives, including completeness, accuracy, and timing. 
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*Receiving reports are used only for tangible goods and are therefore not used for services, such as utilities and repairs and maintenance. Often, vendors’ invoices 


APPLE MANAGER An Apple Computer manager was accused of the kickbacks, and also received payments directly 
receiving over $1 million in kickbacks from Asian when traveling to Asia. The payments were referred 
ACCUSED OF suppliers of iPhone and iPod accessories. The man- to by code words such as “sample” to avoid 
RECEIVING ager transmitted confidential information to the detection by coworkers. 
KICKBACKS suppliers that allowed them to negotiate favorable 


RELATED TO contracts with Apple. 


The alleged scheme involved a chain of U.S. and Source: Based on Pete Carey, “Apple Manager Indicted in 
IPHONE AND foreign bank accounts, as well as a front company to Kickback Scheme,” San Jose Mercury News, August 13, 2010 


1 >X@)D) receive payments. The manager reportedly opened (www.mercurynews.com). 
bank accounts in several countries in Asia to receive 


Four of the six transaction-related audit objectives for acquisitions deserve special 
attention and are therefore examined more closely. The correctness of many asset, 
liability, and expense accounts depends on the correct recording of transactions in the 
acquisitions journal, especially related to these four objectives. 


1. Recorded Acquisitions Are for Goods and Services Received, Consistent with the Best Interests 
of the Client (Occurrence). If the auditor is satisfied that the controls are adequate for 
this objective, tests for improper transactions and recorded transactions that did 
not occur can be greatly reduced. Adequate controls prevent the unintentional 
recording of acquisitions that did not occur, especially recording duplicate ac- 
quisitions. Adequate controls are also likely to prevent the client from including 
as a business expense or asset fraudulent transactions or those that primarily 
benefit management or other employees rather than the entity being audited. 
In some instances, improper transactions are obvious, such as the acquisition of 
unauthorized personal items by employees. In other instances, the appropriate- 
ness of a transaction is more difficult to evaluate, such as the payment of officers’ 
memberships to country clubs or expense-paid vacations to foreign countries 
for management and their families. If the controls over improper transactions or 
transactions that did not occur are inadequate, more extensive examination of 
supporting documentation is necessary. 

2. Existing Acquisitions Are Recorded (Completeness). Failure to record the acquisition of 
goods and services received understates accounts payable and may result in an 
overstatement of net income and owners’ equity. Therefore, auditors consider this 
an essential objective for acquisitions. It may be difficult in some audits to perform 
tests of details of balances to determine whether unrecorded transactions exist, so 
the auditor must rely on controls and substantive tests of transactions for this pur- 
pose. In addition, because the audit of accounts payable usually takes considerable 
time, effective internal controls, properly tested, can significantly reduce audit costs. 

3. Acquisitions Are Accurately Recorded (Accuracy). The extent of tests of details of many bal- 
ance sheet and expense accounts depends on the auditor's evaluation of the effective- 
ness of the internal controls over the accuracy of recorded acquisition transactions. 
For example, if the auditor believes that the fixed asset transactions are correctly 
recorded in the acquisitions journal, it is acceptable to vouch fewer current period 
acquisitions during tests of details of balances than if the controls are inadequate. 

When a client uses perpetual inventory records, tests of details of inventory can 
also be significantly reduced if the auditor believes the perpetual records are accurate. 
The controls over acquisitions included in the perpetual records are normally tested 
as a part of the tests of controls and substantive tests of transactions for acquisitions. 

4. Acquisitions Are Correctly Classified (Classification). Tests of details of certain individual 
accounts can be reduced if the auditor believes that internal controls are adequate 
to provide reasonable assurance of correct classification in the acquisitions journal. 
Although all accounts are affected to some degree by effective controls over clas- 
sification, the two areas most affected are current period acquisitions of fixed assets, 
and all expense accounts, such as repairs and maintenance, utilities, and advertising. 
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DEFICIENT 
INTERNAL 
CONTROL OVER 
DISBURSEMENTS 
LEADS TO 

$8 MILLION 
EMBEZZLEMENT 


Design Tests of Controls 
and Substantive Tests of 
Transactions for Cash 
Disbursements 


Attributes Sampling for 


Tests of Controls and 
Substantive Tests of 
Transactions 
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When Nathan Mueller, an employee of ING, first 
learned that he was able to both initiate a check re- 
quest and subsequently approve the disbursement, he 
managed to resist the temptation. Ultimately, though, 
when he and his wife were having financial difficulties, 
he headed down the slippery slope that would end 
with his embezzling over $8 million. Mueller was part 
of a team that implemented an enterprise resource 
planning system at ING. He and a coworker were acci- 
dentally given the authority to approve check requests 
over $250,000. That responsibility, coupled with a 
loose control environment in the small accounting 
department, where coworkers regularly logged in for 


to have a name that was very similar to a vendor 
frequently used by ING. Based on his success with 
that transaction, he opened an account and cre- 
ated a legal entity that also had a name similar to 
an ING vendor, and then wrote several checks 

to the account for over $1 million each. Several 
red flags were missed or ignored by other ING 
workers, including a check to his credit card com- 
pany that was returned to ING, and obvious clues 
that Mueller was living beyond his means. After 
four years of requesting and approving checks, 
Mueller was caught by a coworker who became 
suspicious and began investigating after Mueller’s 


then ex-wife disclosed that she did not believe 
Mueller was simply lucky at gambling, which 

had been his cover for his extravagant lifestyle. 
Mueller was sentenced to 97 months in prison 
and is slowly repaying the funds he embezzled. 


each other in order to process transactions when oth- 
ers were away from the office, allowed Mueller to log 
into a coworker’s account to request checks, and then 
log into his own account to approve them. Mueller’s 
accounting responsibilities also allowed him to enter 
the account codes for the other side of the transaction 
and successfully hide the disbursements. 

Initially, Mueller requested a check made out to 
one of his credit card companies, which happened 


Source: M.J. Nigrini and N.J. Mueller. “Lessons from an 
$8 million fraud,” Journal of Accountancy (August |, 2014) 
(www.journalofaccountancy.com). 


It is relatively time-consuming for auditors to perform documentation tests of 
current period fixed asset acquisitions and expense accounts for accuracy and classifi- 
cation. Therefore, time savings can be significant when controls are effective. 


Table 18-3 for cash disbursements uses the same format as Table 18-2 (p. 636) for acquisi- 
tions. We assume for these controls and audit procedures that separate cash disburse- 
ments and acquisitions journals exist. Our comments about the methodology and process 
for developing audit procedures for acquisitions apply equally to cash disbursements. 

Auditors typically perform the acquisitions and cash disbursements tests at the 
same time. For a transaction selected for examination from the acquisitions journal, 
the vendor’s invoice, receiving report, and other acquisition documentation are exam- 
ined at the same time as the related cancelled check. Thus, the verification is done 
efficiently without reducing the effectiveness of the tests. 


Because of the importance of tests of controls and substantive tests of transactions for acqui- 
sitions and cash disbursements, the use of attributes sampling is common. The approach 
is similar to that used for the tests of controls and substantive tests of transactions for sales 
discussed in the “Statistical Audit Sampling” section on pages 503-506 of Chapter 15. 

There are three important differences in acquisitions and payments compared to 
other cycles. 


1. As discussed in the beginning of the chapter, there are a larger number of ac- 
counts involved in this cycle, including both income statement and balance sheet 
accounts. The effect is an increased potential for classification misstatements, 
some of which are likely to affect income. An example is a misclassification be- 
tween repair and maintenance expenses and fixed assets. As a result, auditors of- 
ten reduce the tolerable exception rate, especially for the classification attribute. 

2. It is more common in this cycle for transactions to require significant judgment, 
such as for leases and construction costs. These judgment requirements result in 
an increased likelihood of misstatements. As a result, auditors often reduce the 
tolerable exception rate for the accuracy attribute. 

3. The dollar amounts of individual transactions in the cycle cover a wide range. As 
a result, auditors commonly segregate large and unusual items and test them ona 
100 percent basis. 
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Transaction-Related 
Audit Objectives 


Recorded cash disbursements are 
for goods and services actually 
received (occurrence). 


Key Internal Controls 


There is adequate segregation of 
duties between accounts payable 
and custody of signed checks 
or authority to disburse funds 
electronically. 


Supporting documentation is exam- 
ined before signing of checks or 
electronic disbursement of funds 
by an authorized person. 


Approval of payment on supporting 
documents is given at the time 
checks are signed. 


Summary of Transaction-Related Audit Objectives, Key Controls, Tests of Controls, 
and Substantive Tests of Transactions for Cash Disbursements 


Common Tests of Controls 


Discuss with personnel and 
observe activities. 


Discuss with personnel and 
observe activities. 


Examine indication of approval. 


Common Substantive 
Tests of Transactions 


Review the cash disbursements 
journal, general ledger, and 
accounts payable master file for 
large or unusual amounts.* 

Trace the cancelled check or 
electronic bank records 
of disbursements to the 
related acquisitions journal 
entry and examine for payee 
name and amount. 

Examine cancelled check for 
authorized signature, proper 
endorsement, and cancella- 
tion by the bank or use bank 
records to verify payee for 
electronic payments. 

Examine supporting documents as 
part of the tests of acquisitions. 


Existing cash disbursement 
transactions are recorded 
(completeness). 


Checks are prenumbered and 
accounted for. 


The bank reconciliation is prepared 
monthly by an employee 
independent of recording cash 
disbursements or custody of 
assets. 


Account for a sequence of checks. 


Examine bank reconciliations and 
observe their preparation. 


Reconcile recorded cash disburse- 
ments with the cash disburse- 
ments on the bank statement 
(proof of cash disbursements). 


Recorded cash disbursement trans- 
actions are accurate (accuracy). 


Calculations and amounts are 
internally verified. 


The bank reconciliation is prepared 
monthly by an independent 
person. 


Examine indication of internal 
verification. 


Examine bank reconciliations and 
observe their preparation. 


Compare cancelled checks 
and electronic bank records 
of disbursements with the 
related acquisitions journal and 
cash disbursements journal 
entries. 

Recompute cash discounts. 

Prepare a proof of cash 
disbursements. 


Cash disbursement transactions are 
correctly included in the accounts 
payable master file and are cor- 
rectly summarized (posting and 
summarization). 


Accounts payable master file 
contents are internally verified. 


Accounts payable master file or trial 
balance totals are compared with 
general ledger balances. 


Examine indication of internal 
verification. 


Examine initials on general 
ledger accounts indicating 
comparison. 


Test clerical accuracy by footing 
journals and tracing postings to 
general ledger and accounts pay- 
able master file. 


Cash disbursement transactions are 
correctly classified (classification). 


An adequate chart of accounts is 
used. 


Account classifications are internally 
verified. 


Examine procedures manual and 
chart of accounts. 


Examine indication of internal 
verification. 


Compare classification with chart of 
accounts by referring to vendors’ 
invoices and acquisitions journal. 


Cash disbursement transactions are 
recorded on the correct dates 
(timing). 


Procedures require recording of 
transactions as soon as possible 
after the check has been signed 
or electronically submitted for 
bank processing. 


Dates are internally verified. 


Examine procedures manual and 
observe whether unrecorded 
checks exist. 


Examine indication of internal 
verification. 


Compare dates on cancelled 
checks or electronic bank 
records with the cash 
disbursements journal. 

Compare dates on cancelled 
checks or electronic bank 
records with the bank 
cancellation date. 
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*This analytical procedure can also apply to other objectives, including completeness, accuracy, and timing. 
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CONCEPT CHECK 

1. What are the most significant balance sheet and income statement accounts related to 
the acquisition and payment cycle? 

2. What is meant by a voucher? Explain how its use can improve an organization’s internal 
controls. 

3. Explain why most auditors consider the receipt of goods and services the most impor- 
tant point in the acquisition and payment cycle. 


METHODOLOGY FOR DESIGNING TESTS OF DETAILS 
OF BALANCES FOR ACCOUNTS PAYABLE 


Describe the methodology for 
designing tests of details of 
balances for accounts payable 
using the audit risk model. 


Identify Significant Risks 
and Assess the Risk of 
Material Misstatement 
for Accounts Payable 
(Phase 1) 
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Because all acquisition and payment cycle transactions typically flow through 
accounts payable, this account is critical to any audit of the acquisition and payment 
cycle. Accounts payable are unpaid obligations for goods and services received in the 
ordinary course of business. Accounts payable includes obligations for the acquisition 
of raw materials, equipment, utilities, repairs, and many other types of goods and ser- 
vices that were received before the end of the year. Most accounts payable can also be 
identified by the existence of vendors’ invoices for the obligation. 

Accounts payable should be distinguished from accrued liabilities and interest- 
bearing obligations. A liability is an account payable only if the total amount of the 
obligation is known and owed at the balance sheet date. If the obligation includes the pay- 
ment of interest, it should be recorded as a note payable, contract payable, mortgage 
payable, or bond payable. 

Figure 18-3 summarizes the methodology for designing tests of details for 
accounts payable. This methodology is the same as that used for accounts receivable 
in Chapter 16 (see Figure 16-1 on p. 525). 

If tests of controls and related substantive tests of transactions show that controls 
are operating effectively, and if substantive analytical procedures results are satisfac- 
tory, the auditor is likely to reduce tests of details of balances for accounts payable. 
However, because accounts payable tend to be material for most companies, auditors 
almost always perform some tests of details of balances. 


Like accounts receivable, a large number of transactions can affect accounts payable. 
The balance is often significant and made up of a large number of vendor balances, 
and it is relatively expensive to audit the account. For these reasons, auditors often 
assess inherent risk as medium or high. They are especially concerned about the 
completeness and cutoff balance-related audit objectives because of the potential for 
understatements in the account balance. 

As part of the process of identifying significant risks and assessing the risk of 
material misstatement in accounts payable, the auditor considers any recent changes 
in the acquisition and payment cycle. The focus by many companies on improving 
their supply-chain management activities has led to numerous changes in the design 
of systems used to initiate and record acquisition and payment activities. Efforts 
to streamline the purchasing of goods and services, including increased sharing of 
information with suppliers and the use of technology and e-commerce to transact 
business, are changing all aspects of the acquisition and payment cycle for many com- 
panies. These arrangements and systems can be complex. 

Significant client business risks may arise from these changes. For example, sup- 
pliers may have greater access to accounts payable records, allowing them to continu- 
ally monitor the status of payable balances and to perform detailed reconciliations 
of transactions. Access by external parties, such as suppliers, to accounting records 
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Methodology for Designing Tests of Details of Balances 


FIGURE 13-3 


Identify significant risks 
and assess risk of material Phase I 
misstatement for accounts payable 


Set performance materiality 
for accounts payable 


Phase | 


Assess control risk for 
the acquisition and 
payment cycle 


Design and perform tests 
of controls and substantive 
tests of transactions for the 

acquisition and payment cycle 


Design and perform substantive 
analytical procedures for 
accounts payable 


Design tests of details of 
accounts payable to 
satisfy balance-related 
audit objectives 


Phase II 


Phase Ill 


Audit procedures 


Sample size 
Phase III 


Items to select 


Timing 


threatens the likelihood of misstatement if that access is not properly controlled. Also, 
increased focus on improving the logistics of physically moving inventory through- 
out a company’s distribution chain may increase the difficulty of establishing effective 
cutoff of accounts payable balances at year-end. 


Because a large number of transactions affect accounts payable, its balance is often 
significant and made up of multiple vendor balances, and it is relatively expensive to 
audit, auditors typically set performance materiality for accounts payable relatively 
high. These are the same reasons that result in a higher assessed inherent risk. 


As shown in Figure 18-3, after auditors set performance materiality and assess risk of 
material misstatement for accounts payable, they assess control risk based on an under- 
standing of internal control. The auditor’s ultimate substantive tests depend on the 
relative effectiveness of internal controls related to accounts payable. Therefore, auditors 
must have a thorough understanding of how these controls relate to accounts payable. 

The effects of the client’s internal controls on accounts payable tests can be illus- 
trated by two examples: 


1. Assume that the client has highly effective internal controls over recording and 
paying for acquisitions. The receipt of goods is promptly documented by pre- 
numbered receiving reports; prenumbered vouchers are promptly and efficiently 
prepared and recorded in the acquisition transactions file and the accounts 


Set Performance 
Materiality (Phase 1) 


Assess Control Risk and 


Design and Perform 
Tests of Controls and 
Substantive Tests 

of Transactions 
(Phases I and II) 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, \otiag taort6| 8rd QuSDEDOMLTHELACQUISITION AND PAYMENT CYCLE 657 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?’docID=5185606. 


Created from undip-ebooks on 2021-07-27 00:57:25. 


Design and Perform 
Substantive Analytical 
Procedures (Phase III) 


Design and perform substantive 
analytical procedures for 
accounts payable. 


Design and Perform 
Tests of Details of 
Accounts Payable 
Balance (Phase III) 


Design and perform tests of 
details of balances for accounts 
payable, including out-of-period 
liability tests. 
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payable master file. Cash disbursements are made promptly when due and im- 
mediately recorded in the cash disbursements transactions file and the accounts 
payable master file. Individual accounts payable balances in the master file are 
reconciled monthly with vendors’ statements, and the computer automatically 
reconciles the master file total to the general ledger. Under these circumstances, 
the verification of accounts payable should require little audit effort once the au- 
ditor concludes that internal controls are operating effectively. 

2. Assume that receiving reports are not used, the client defers recording acquisi- 
tions until cash disbursements are made, and because of cash shortages, bills are 
often paid several months after their due date. When an auditor faces such a situ- 
ation, there is a high likelihood of an understatement of accounts payable; there- 
fore, extensive tests of details of accounts payable are necessary to determine 
whether accounts payable is correctly stated on the balance sheet date. 


We discussed the most important controls over accounts payable and the related 
tests of controls and substantive tests of transactions earlier in this chapter. In addition 
to those controls, each month an independent person or computer program should 
reconcile vendors’ statements with recorded liabilities and the accounts payable master 
file with the general ledger. After assessing control risk, the auditor designs and per- 
forms tests of controls and substantive tests of transactions for acquisitions and cash 
disbursements. 


The use of analytical procedures is as important in the acquisition and payment cycle 
as it is in every other cycle, especially for uncovering misstatements in accounts pay- 
able. Table 18-4 illustrates analytical procedures for the balance sheet and income 
statement accounts in the acquisition and payment cycle that are useful for uncover- 
ing areas in which additional investigation is desirable. 

Auditors should compare current year expense totals with prior years to uncover 
misstatements of accounts payable as well as in the expense accounts. Because of 
double-entry accounting, a misstatement of an expense account usually also results 
in an equal misstatement of accounts payable. Therefore, comparing current expenses 
such as rent, utilities, and other regularly scheduled bills with prior years is an effec- 
tive procedure for analyzing accounts payable when expenses from year to year are 
expected to be relatively stable. 


The overall objective in the audit of accounts payable is to determine whether the 
accounts payable balance is fairly stated and properly disclosed. Seven of the eight 
balance-related audit objectives discussed in Chapter 6 (pp. 162-164) are applicable to 
accounts payable: existence, completeness, accuracy, classification, cutoff, detail tie- 
in, and rights and obligations. Realizable value is not applicable to liabilities. 


Substantive Analytical Procedures for the Acquisition 


EE and Payment Cycle 


Substantive Analytical Procedure Possible Misstatement 


Compare acquisition-related expense account Misstatement of accounts payable and expenses. 
balances with prior years. 


Review list of accounts payable for unusual, Classification misstatement for nontrade liabilities. 
nonvendor, and interest-bearing payables. 


Compare individual accounts payable with Unrecorded or nonexistent accounts, or 
previous years. misstatements. 

Calculate ratios, such as purchases divided by accounts Unrecorded or nonexistent accounts, or 
payable, and accounts payable divided by current misstatements. 
liabilities. 
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There is an important difference in emphasis in the audit of liabilities and assets. 
When auditors verify assets, they emphasize overstatements through verification by 
confirmation, physical examination, and examination of supporting documents. The 
opposite approach is taken in verifying liability balances; that is, the main focus is on 
understated or omitted liabilities. 

The difference in emphasis in auditing assets and liabilities results directly from 
the legal liability of CPAs. If equity investors, creditors, and other users determine sub- 
sequent to the issuance of the audited financial statements that earnings and own- 
ers’ equity were materially overstated, a lawsuit against the CPA firm is fairly likely. 
Because an overstatement of owners’ equity can arise either from an overstatement 
of assets or an understatement of liabilities, it is natural for CPAs to emphasize those 
two types of misstatements. Auditors should not ignore the possibility that assets 
are understated or liabilities are overstated, and should design tests to detect material 
understatements of earnings and owners’ equity, including those arising from mate- 
rial overstatements of accounts payable. 

We will use the same balance-related audit objectives from Chapter 16 that we 
applied to verifying accounts receivable, as they also apply to liabilities, with three 
minor modifications: 


1. The realizable value objective is not applicable to liabilities. Realizable value ap- 
plies only to assets. 

2. The rights aspect of the rights and obligations objective is not applicable to li- 
abilities. For assets, the auditor is concerned with the client’s rights to the use 
and disposal of the assets. For liabilities, the auditor is concerned with the client’s 
obligations for the payment of the liability. If the client has no obligation to pay a 
liability, it should not be included as a liability. 

3. For liabilities, there is emphasis on the search for understatements rather than for 
overstatements, as we just discussed. 


Table 18-5 (p. 644) includes the balance-related audit objectives and common 
tests of details of balances procedures for accounts payable. The auditor’s actual audit 
procedures vary considerably depending on the nature of the entity, the materiality of 
accounts payable, the nature and effectiveness of internal controls, and inherent risk. 
As auditors perform tests of details of balances for accounts payable and other liabil- 
ity accounts, they may also gather evidence about the four presentation and disclosure 
objectives, especially when performing completeness objective tests. Other proce- 
dures related to presentation and disclosure objectives are done as part of procedures 
to complete the audit, which we will discuss in Chapter 24. 


Out-of-Period Liability Tests Because of the emphasis on understatements in liabil- 
ity accounts, out-of-period liability tests are important for accounts payable. The extent 
of tests to uncover unrecorded accounts payable, often called the search for unrecorded 
accounts payable, depends heavily on assessed control risk and the materiality of the 
potential balance in the account. The same audit procedures used to uncover unre- 
corded payables are applicable to the accuracy objective. The following are typical 
audit procedures: 


Examine Underlying Documentation for Subsequent Cash Disbursements Auditors 
examine supporting documentation for cash disbursements subsequent to the bal- 
ance sheet date to determine whether a cash disbursement was for a current period 
liability. If it is a current period liability, the auditor should trace it to the accounts 
payable trial balance to make sure it is included. The receiving report indicates the 
date inventory was received and is therefore an especially useful document. Similarly, 
the vendor’s invoice usually indicates the date services were provided. Auditors often 
examine documentation for cash disbursements made in the subsequent period for 
several weeks after the balance sheet date, especially when the client does not pay bills 
on a timely basis. 
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TABLE 18-5 


Balance-Related Audit Objective 


Accounts payable in the accounts payable list 
agree with related master file, and the total 
is correctly added and agrees with the gen- 
eral ledger (detail tie-in). 


Balance-Related Audit Objectives and Tests of Details of Balances for Accounts Payable 


Common Tests of Details 
of Balances Procedures 


Re-add or use the computer to total the accounts 
payable list. 
Trace the total to the general ledger. 


Trace individual vendor’s invoices to master file for 
names and amounts. 


Comments 


All pages need not ordinarily be footed if footing 
manually. 


Unless controls are deficient, tracing to master 
file should be limited. 


Accounts payable in the accounts payable list 
exist (existence). 


Trace from accounts payable list to vendors’ invoices 


and statements. 


Confirm accounts payable, emphasizing large and 
unusual amounts. 


Ordinarily receives little attention because the 
primary concern is with understatements. 


Existing accounts payable are included in the 
accounts payable list (completeness). 


Perform out-of-period liability tests (see discussion). 


These are essential audit tests for accounts 
payable. 


Accounts payable in the accounts payable list 
are accurate (accuracy). 


Perform same procedures as those used for 
existence objective and out-of-period liability 
tests. 


Ordinarily, the emphasis in these procedures 
for accuracy is understatement rather than 
omission. 


Accounts payable in the accounts payable list 
are correctly classified (classification). 


Review the list and master file for related parties, 
notes or other interest-bearing liabilities, long- 


Knowledge of the client’s business is essential for 
these tests. 


term payables, and debit balances. 


(cutoff). 


Transactions in the acquisition and payment 
cycle are recorded in the proper period 


These are essential audit tests for accounts 
payable. These are called cutoff tests. 


Perform out-of-period liability tests (see discussion). 


Perform detailed tests as part of physical observa- 
tion of inventory (see discussion). 


Test for inventory in transit (see discussion). 


(obligations). 


The company has an obligation to pay the 
liabilities included in accounts payable 


Examine vendors’ statements and confirm accounts 
payable. 


Normally not a concern in the audit of accounts 
payable because all accounts payable are 
obligations. 
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Examine Underlying Documentation for Bills Not Paid Several Weeks After the Year-End 
Auditors carry out this procedure in the same manner as the preceding one and for the 
same purpose. This procedure differs in that it is done for unpaid obligations near the 
end of the audit rather than for obligations that have already been paid. 

For example, in an audit with a March 31 year-end, assume the auditor examines 
the supporting documentation for checks paid through June 28. Bills that are still 
unpaid on June 28 should be examined to determine whether they are obligations at 
March 31. 


Trace Receiving Reports Issued Before Year-End to Related Vendors’ Invoices All mer- 
chandise received before the year-end of the accounting period should be included 
as accounts payable. By tracing receiving reports issued up to year-end to vendors’ 
invoices and making sure that they are included in accounts payable, the auditor is 
testing for unrecorded obligations. 


Trace Vendors’ Statements That Show a Balance Due to the Accounts Payable Trial Bal- 
ance If theclient maintains a file of vendors’ statements, auditors can trace any state- 
ment that has a balance due at the balance sheet date to the listing to make sure it is 
included as an account payable. 


Send Confirmations to Vendors with Which the Client Does Business Although the use 
of confirmations for accounts payable is less common than for accounts receivable, 
auditors use them occasionally to test for vendors omitted from the accounts payable 
list, omitted transactions, and misstated account balances. Sending confirmations 
to active vendors for which a balance has not been included in the accounts payable 
list is a useful means of searching for omitted amounts. This type of confirmation is 
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commonly called a zero balance confirmation. Additional discussion of confirmation 
of accounts payable is deferred until the end of this chapter. 


Cutoff Tests Accounts payable cutoff tests are done to determine whether trans- 
actions recorded a few days before and after the balance sheet date are included in 
the correct period. The five out-of-period liability audit tests we just discussed are 
all cutoff tests for acquisitions, but they emphasize understatements. For the first 
three procedures, it is also appropriate to examine supporting documentation as a 
test of overstatement of accounts payable. For example, the third procedure tests for 
understatements (unrecorded accounts payable) by tracing receiving reports issued 
before year-end to related vendors’ invoices. To test for overstatement cutoff amounts, 
the auditor should trace receiving reports issued after year-end to related invoices to 
make sure that they are not recorded as accounts payable (unless they are inventory in 
transit, which is discussed shortly). 

We've already discussed most cutoff tests in the preceding section, but we will 
focus on two aspects here: the relationship of cutoff to physical observation of inven- 
tory and the determination of the amount of inventory in transit. 


Relationship of Cutoff to Physical Observation of Inventory In determining that the 
accounts payable cutoff is correct, it is essential that the cutoff tests be coordinated with the 
physical observation of inventory. For example, assume that an inventory acquisition for 
$400,000 is received late in the afternoon of December 31, after the physical inven- 
tory is completed. If the acquisition is included in accounts payable and purchases but 
excluded from ending inventory, the result is an understatement of net earnings of 
$400,000. Conversely, if the acquisition is excluded from both inventory and accounts 
payable, there is a misstatement in the balance sheet, but the income statement is cor- 
rect. The only way the auditor will know which type of misstatement has occurred is 
to coordinate cutoff tests with the observation of inventory. 

The cutoff information for acquisitions should be obtained during the physical 
observation of inventory. At that time, the auditor should review the procedures in 
the receiving department to determine that all inventory received was counted, and 
the auditor should record in the audit documentation the last receiving report num- 
ber of inventory included in the physical count. Subsequent to the physical count 
date, the auditor should then test the accounting records for cutoff. The auditor 
should trace the previously documented receiving report numbers to the accounts 
payable records to verify that they are correctly included or excluded. For example, 
assume that the last receiving report number representing inventory included in 
the physical count was 3167. The auditor should record this document number 
and subsequently trace it and several preceding numbers to their related vendors’ 
invoices and to the accounts payable list or the accounts payable master file to 
determine that they are all included. Similarly, accounts payable for acquisitions 
recorded on receiving reports with numbers larger than 3167 should be excluded 
from accounts payable. 

When the client’s physical inventory takes place before the last day of the year, the 
auditor must still perform an accounts payable cutoff at the time of the physical count 
in the manner described in the preceding paragraph. In addition, the auditor must 
verify whether all acquisitions that took place between the physical count and the end 
of the year were added to the physical inventory and accounts payable. 


Inventory in Transit In accounts payable, auditors must distinguish between acquisi- 
tions of inventory that are on an FOB destination basis and those that are made FOB 
origin. For FOB destination, title passes to the buyer when the inventory is received, 
so only inventory received on or before the balance sheet date should be included in 
inventory and accounts payable at year-end. When an acquisition is FOB origin, the 
company must record the inventory and related accounts payable in the current period 
if shipment occurred on or before the balance sheet date. 
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Reliability of Evidence 


Distinguish the reliability of 
vendors’ invoices, vendors’ state- 
ments, and confirmations of ac- 
counts payable as audit evidence. 
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Auditors can determine whether inventory has been acquired FOB destination 
or origin by examining vendors’ invoices. Auditors should examine invoices for mer- 
chandise received shortly after year-end to determine whether they were on an FOB 
origin basis. For those that were, and when the shipment dates were on or before the 
balance sheet date, the inventory and related accounts payable must be recorded in the 
current period if the amounts are material. 


Auditors need to understand the relative reliability of the three primary types of 
evidence ordinarily used for verifying accounts payable: vendors’ invoices, vendors’ 
statements, and confirmations. 


Distinction Between Vendors’ Invoices and Vendors’ Statements Auditors should 
distinguish between vendors’ invoices and vendors’ statements in verifying the 
amount due to a vendor. Auditors get highly reliable evidence about individual transac- 
tions when they examine vendors’ invoices and related supporting documents, such 
as receiving reports and purchase orders. A vendor's statement is not as desirable as 
invoices for verifying individual transactions because a statement includes only the 
total amount of the transaction. The units acquired, price, freight, and other data are 
not included. 

Which of these two documents is better for verifying the correct balance in 
accounts payable? The vendor’s statement is superior for verifying accounts payable because it 
includes the ending balance. The auditor can compare existing vendors’ invoices with 
the client’s list and still not uncover missing ones, which is the primary concern in 
accounts payable. 

Which of these two documents is better for testing acquisitions in tests of controls 
and substantive tests of transactions? The vendor’s invoice is superior for verifying transac- 
tions because the auditor is verifying individual transactions and the invoice shows the 
details of the acquisitions. 


Difference Between Vendors’ Statements and Confirmations The most important 
distinction between a vendor’s statement and a confirmation of accounts payable is 
the source of the information. A vendor’s statement has been prepared by the vendor 
(an independent third party) but is in the hands of the client at the time the auditor 
examines it. This provides the client with an opportunity to alter a vendor’s statement 
or to withhold certain statements from the auditor. 

A response to a confirmation request for accounts payable is normally an item- 
ized statement sent directly to the CPA’s office by the vendor. It provides the same 
information as a vendor’s statement but is more reliable. In addition, confirmations of 
accounts payable often include a request for information about notes and acceptances 
payable as well as consigned inventory owned by the vendor but stored on the client’s 
premises. An illustration of a typical accounts payable confirmation request is given 
in Figure 18-4. 

Due to the availability of vendors’ statements and vendors’ invoices, which are 
both relatively reliable evidence because they originate from a third party, confirma- 
tion of accounts payable is less common than confirmation of accounts receivable. 
If the client has adequate internal controls and vendors’ statements are available for 
examination, confirmations are normally not sent. However, when the client’s inter- 
nal controls are deficient, when statements are not available, or when the auditor 
questions the client’s integrity, it is desirable to send confirmation requests to ven- 
dors. Because of the emphasis on understatements of liability accounts, the accounts 
confirmed should include large, active, zero balance accounts and a representative 
sample of all others. 

When auditors examine vendors’ statements or receive confirmations, there must 
be a reconciliation of the statement or confirmation with the accounts payable list. 
Differences are often caused by inventory in transit, checks mailed by the client but 
not received by the vendor at the statement date, and delays in processing accounting 
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FIGURE 18-4 Accounts Payable Confirmation Request 


January 15, 2017 


ROGER MEAD, INC. 
Jones Sales, Inc. 

2116 Stewart Street 
Wayneville, Kentucky 36021 


To Whom It May Concern: 


Our auditors, Murray and Rogers, CPAs, are conducting an audit of our financial statements. 
For this purpose, please furnish them with the following information as of December 31, 
2016. 


(1) Itemized statements of our accounts payable to you showing all unpaid items; 

(2) Acomplete list of any notes and acceptances payable to you (including any which 
have been discounted) showing the original date, dates due, original amount, unpaid 
balance, collateral, and endorsers; and 

(3) An itemized list of your merchandise consigned to us. 


Your prompt attention to this request will be appreciated. An envelope is enclosed for 
your reply. 


Yours truly, 


Phil Geriovini 


Phil Geriovini, President 


records. The reconciliation is of the same general nature as that discussed in Chapter 16 
for accounts receivable. The documents typically used to reconcile the balances on the 
accounts payable list with the confirmations or vendors’ statements include receiving 
reports, vendors’ invoices, and cancelled checks. 


Our discussion of tests of details of the accounts payable balance has focused heavily 
on the typical audit procedures performed, the documents and records examined, 
and the timing of the tests. The auditor must also consider sample sizes in the audit of 
accounts payable. Sample sizes for accounts payable tests vary considerably, depend- 
ing on such factors as the materiality of accounts payable, the number of accounts 
outstanding, assessed control risk, and the results of the prior year. 

Statistical sampling is less commonly used for the audit of accounts payable than 
for accounts receivable. Defining the population and determining the population size 
is more difficult for accounts payable. Because the emphasis is on omitted accounts 
payable, auditors must try to ensure that the population includes all potential payables. 


CONCEPT CHECK 


I. Explain the relationship between tests of the acquisition and payment cycle and tests of ac- 
counts payable. Give specific examples of how these two types of tests affect each other. 


2. In testing the cutoff of accounts payable at the balance sheet date, explain why it is im- 
portant that auditors coordinate their tests with the physical observation of inventory. 
What can the auditor do during the physical inventory to enhance the likelihood of an 
accurate cutoff? 


3. What is the primary audit procedure the auditor performs to test the completeness of 
accounts payable? 
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SUMMARY 


Figure 18-5 summarizes how the four types of audit procedures are used to obtain audit 
assurance for transactions and accounts in the acquisition and payment cycle. After using 
procedures to obtain an understanding of internal control and tests of controls, auditors 
can evaluate whether controls over transactions in the cycle are operating effectively. 
When control risk is assessed as low, the auditor can reduce substantive testing of ending 
balances in the related accounts. On the other hand, a higher assessed control risk results 
in the need for more substantive testing in related accounts. In this chapter, the ending bal- 
ance we focused on was accounts payable. 

By combining all types of audit tests shown in Figure 18-5, the auditor can obtain a 
higher overall assurance for transactions and accounts in the acquisition and payment cycle 
than the assurance obtained from any one test. The auditor can increase the assurance ob- 
tained from any one of the tests, and thereby increase the overall assurance for the cycle. 


FIGURE 18-5 Types of Audit Tests for the Acquisition and Payment 


Cycle (see Figure 18-1 on p. 629 for accounts) 


Cash in Bank Accounts Payable Acquisition Expenses 


<—— Payments ——~> <——— Expenses ————> 


Audited by Audited by 
TOC, STOT, and SAP TOC, STOT, and SAP 


Ending balance 


Audited by 
SAP and TDB 
Acquisition Assets 


Acquisition of 
Assets 


Audited by 
TOC, STOT, and SAP 


Ending balance Ending balance 


Substantive 
analytical 
procedures 
(SAP) 


Substantive 
tests of 
transactions 
(STOT) 


Tests of controls 
(including procedures to 
obtain an understanding 
of internal control) (TOC) 


Sufficient 
appropriate 
evidence 


details of 
balances 
(TDB) 


+ 


ESSENTIAL TERMS 


Accounts payable master file—a com- 
puter file for maintaining a record for each 
vendor of individual acquisitions, cash 
disbursements, acquisition returns and 
allowances, and vendor balances 


Accounts payable trial balance—a list- 
ing of the amount owed to each vendor at 
a point in time; prepared directly from the 
accounts payable master file 
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Acquisition and payment cycle—the 
transaction cycle that includes the acquisi- 
tion of and payment for goods and services 
from suppliers outside the organization 

Acquisitions journal—a journal or listing 
generated from the acquisitions transac- 
tion file that typically includes information 
such as vendor name, date, amount, and ac- 
count classification for each transaction 


Cutoff tests—tests to determine whether 
transactions recorded a few days before 
and after the balance sheet date are in- 
cluded in the correct period 


Debit memo—a document indicating a 
reduction in the amount owed to a vendor 
because of returned goods or an allowance 
granted 


FOB destination—shipping contract in 
which title to the goods passes to the buyer 
when the goods are received 


FOB origin—shipping contract in which 
title to the goods passes to the buyer at the 
time that the goods are shipped 


Purchase order—a document prepared 
or electronically issued by the purchas- 
ing department indicating the descrip- 
tion, quantity, and related information for 
goods and services that the company in- 
tends to purchase 


Purchase requisition—request by an 
authorized employee to the purchasing 


department to place an order for inventory 
and other items used by an entity 


Receiving report—a document prepared 
by the receiving department at the time 
tangible goods are received, indicating 
the description of the goods, the quantity 
received, the date received, and other rel- 
evant data; it is part of the documentation 
necessary for payment to be made 


Vendor’s invoice—a document or record 
that specifies the details of an acquisition 
transaction and amount of money owed to 
the vendor for an acquisition 


Vendor’s statement—a statement pre- 
pared monthly by the vendor that indicates 
the customer’s beginning balance, acquisi- 
tions, payments, and ending balance 


Voucher—a document used to establish a 
formal means of recording and controlling 
acquisitions, primarily by enabling each 
acquisition transaction to be sequentially 
numbered 


REVIEW QUESTIONS 


18-1 (OBJECTIVE 18-1) List five asset accounts, three liability accounts, and five expense 
accounts included in the acquisition and payment cycle for a typical manufacturing company. 


18-2 (OBJECTIVES 18-2, 18-7) Distinguish between a vendor’s invoice and a vendor's state- 
ment. Which document should ideally be used as evidence in auditing acquisition transac- 
tions and which is best when verifying accounts payable balances? Why? 


18-3 (OBJECTIVES 18-2, 18-3) If an audit client does not have prenumbered checks, what type 
of misstatement has a greater chance of occurring? Under the circumstances, what audit 
procedure can the auditor use to compensate for the deficiency? 


18-4 (OBJECTIVE 18-3) List one possible internal control for each of the six transaction- 
related audit objectives for cash disbursements. For each control, list a test of control to 
test its effectiveness. 


18-5 (OBJECTIVE 18-3) What are the two broad areas into which tests of controls and sub- 
stantive tests of transactions for the acquisition and payment cycle are divided? 


18-6 (OBJECTIVE 18-3) Evaluate the following statement by an auditor concerning tests of 
acquisitions and cash disbursements: “In selecting the acquisitions and cash disburse- 
ments sample for testing, the best approach is to select a random month and test every 
transaction for the period. Using this approach enables me to thoroughly understand 
internal control because I have examined everything that happened during the period. As 
a part of the monthly test, I also test the beginning and ending bank reconciliations and 
prepare a proof of cash for the month. At the completion of these tests I feel I can evaluate 
the effectiveness of internal control.” 


18-7 (OBJECTIVE 18-3) What are the four key internal controls for the acquisition and pay- 
ment cycle? Briefly explain the procedures in place that would suggest these controls are 
followed effectively. 


18-8 (OBJECTIVE 18-3) What are the similarities and differences in the objectives of the fol- 
lowing two procedures? (1) Select a random sample of receiving reports and trace them to 
related vendors’ invoices and acquisitions journal entries, comparing the vendor’s name, 
type of material and quantity acquired, and total amount of the acquisition. (2) Select a 
random sample of acquisitions journal entries and trace them to related vendors’ invoices 
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and receiving reports, comparing the vendor’s name, type of material and quantity 
acquired, and total amount of the acquisition. 

18-9 (OBJECTIVES 18-3, 18-6) What is the primary difference between the design and tests of 
details of accounts payable balances compared with the tests of details of accounts receiv- 
able balances? 

18-10 (OBJECTIVE 18-4) Describe two major changes a client may make to its supply-chain 
management system and discuss how those changes might increase or decrease the risk of 
material misstatement in specific accounts. 

18-11 (oBjectIVE 18-5) Explain the relationship between accounts payable and expenses 
and its influence on analytical procedures for accounts payable. 

18-12 (OBJECTIVE 18-6) The CPA examines all unrecorded invoices on hand as of February 
28, 2017, the last day of the audit. Which of the following misstatements is most likely to 
be uncovered by this procedure? Explain. 

a. Accounts payable are overstated at December 31, 2016. 

b. Accounts payable are understated at December 31, 2016. 

c. Operating expenses are overstated for the 12 months ended December 31, 2016. 

d. Operating expenses are overstated for the two months ended February 28, 2017." 
18-13 (oBjecTIVE 18-7) Explain why it is common for auditors to send confirmation 
requests to vendors with “zero balances” on the client’s accounts payable listing but 
uncommon to follow the same approach in verifying accounts receivable. 

18-14 (OBJECTIVE 18-7) It is less common to confirm accounts payable at an interim date 
than accounts receivable. Explain why. 

18-15 (OBJECTIVE 18-6) Explain two out-of-period liability tests used related to the balance- 
related audit objective and tests of details of balances for accounts payable. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


18-16 (OBJECTIVE 18-3) The following questions concern internal controls in the acquisition 
and payment cycle. Choose the best response. 


a. Which of the following is an internal control that will prevent paid cash disburse- 
ment documents from being presented for payment a second time? 
(1) The date on cash disbursement documents must be within a few days of the date 
that the document is presented for payment. 
(2) The official signing the check compares the check with the documents and 
should deface the documents. 
3) Unsigned checks are prepared by individuals who are responsible for signing checks. 
(4) Cash disbursement documents are approved by at least two responsible manage- 
ment officials. 


b. Which of the following questions would be best to include in an internal control 

questionnaire concerning the completeness assertion for purchases? 

(1) Is an authorized purchase order required before the receiving department can 
accept a shipment or the vouchers payable department can record a voucher? 

(2) Are purchase requisitions prenumbered and independently matched with ven- 
dor invoices? 

(3) Is the unpaid voucher file periodically reconciled with inventory records by an 
employee who does not have access to purchase requisitions? 

(4) Are purchase orders, receiving reports, and vouchers prenumbered and periodi- 
cally accounted for? 


c. The authority to accept incoming goods in receiving should be based on a(n) 
(1) vendor’s invoice. (3) bill of lading. 
(2) purchase requisition. (4) approved purchase order. 


* Based on AICPA question paper, American Institute of Certified Public Accountants. 
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18-17 (OBJECTIVES 18-6, 18-7) The following questions concern accumulating evidence in 
the acquisition and payment cycle. Choose the best response. 


a. In auditing accounts payable, an auditor’s procedures most likely will focus primarily 
on management’s assertion of 
(1) existence. (3) completeness. 
(2) realizable value. (4) valuation and allocation. 


b. Which of the following audit procedures is best for identifying unrecorded trade 

accounts payable? 

(1) Examining unusual relationships between monthly accounts payable balances 
and recorded cash payments 

(2) Reconciling vendors’ statements to the file of receiving reports to identify items 
received just prior to the balance sheet date 

(3) Reviewing cash disbursements recorded subsequent to the balance sheet date to 
determine whether the related payables apply to the prior period 

(4) Investigating payables recorded just prior to and just subsequent to the balance 
sheet date to determine whether they are supported by receiving reports 


c. An auditor traced a sample of purchase orders and the related receiving reports to the 
acquisitions journal and cash disbursements journal. The purpose of this substantive 
test of transactions most likely was to 
(1) identify unusually large purchases that should be investigated further. 

(2) verify that cash disbursements were for goods actually received. 
(3) determine that purchases were properly recorded. 
(4) test whether payments were for goods actually ordered. 


d. When using confirmations to provide evidence about the completeness assertion for 
accounts payable, the appropriate population most likely is 
(1) vendors with whom the entity has previously done business. 

(2) amounts recorded in the accounts payable subsidiary ledger. 

(3) payees of checks drawn in the month after year-end. 

4) invoices filed in the entity’s open invoice file. 
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DISCUSSION QUESTIONS AND PROBLEMS 


18-18 (OBJECTIVE 18-3) Questions 1 through 8 are typically found in questionnaires used 
by auditors to obtain an understanding of internal control in the acquisition and payment 
cycle. In using the questionnaire for a client, a “yes” response to a question indicates a pos- 
sible internal control, whereas a “no” indicates a potential deficiency. 


Required 


1 


2. 


NO 


a. 


d. 


Is the purchasing function performed by personnel who are independent of the re- 
ceiving and shipping functions and the payables and disbursing functions? 

Are all receiving reports prenumbered and the numerical sequence checked by a per- 
son independent of check preparation? 


. Are all vendors’ invoices routed directly to accounting from the mailroom? 
. Does a responsible employee review and approve the invoice account distribution 


before the transaction is entered in the computer? 


. Are all extensions, footings, discounts, and freight terms on vendors’ invoices checked 


for accuracy? 


. Are checks automatically posted in the cash disbursements journal as they are prepared? 
. Are all supporting documents properly cancelled at the time the checks are signed? 
. Is the custody of checks after signature and before mailing handled by an employee 


independent of all payable, disbursing, cash, and general ledger functions? 


For each of the preceding questions, state the transaction-related audit objective(s) 
being fulfilled if the control is in effect. 


. For each internal control, list a test of control to test its effectiveness. 
C. 


For each of the preceding questions, identify the nature of the potential financial 
misstatement(s) if the control is not in effect. 

For each of the potential misstatements in part c., list a substantive audit procedure 
that can be used to determine whether a material misstatement exists. 


18-19 (OBJECTIVE 18-3) BHP Billiton Ltd. is a multinational resources company headquar- 
tered in Melbourne, Australia. 


1. 


2. 


When assessing the transaction-related internal controls of the company, the auditor 

considers the following control procedures used by the company to determine if they 

are properly used and working effectively: 

a. Calculations and amounts are internally verified. 

b. Purchase orders are pre-numbered and accounted for. 

c. Accounts payable master file contents are internally verified. 

d. Purchase requisition, purchase order, receiving report, and vendor’s invoice are 
attached to the voucher. 

. Dates are internally verified. 
Vendors’ invoices, receiving reports, purchase orders, and purchase requisitions 
are internally verified. 

g. Procedures require recording transactions as soon as possible after the goods and 

services have been received. 

h. Receiving reports are pre-numbered and accounted for. 

Accounts payable master file or trial balance totals are compared with general 

ledger balances. 

j. Acquisitions are approved for prices and discounts. 

The auditor interviews employees whose functions include the control procedures 

identified above. 


rho 


m 
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3. Next, the audit procedures requires the auditor test the controls for effectiveness. 
4. Finally, where control risk is deemed to be above the acceptable level, additional 
substantive tests of transactions are conducted. 


For each of the key internal controls listed above (1.a. through 1,.), consider the following: Required 
a. What transaction related audit objective does each control relate to? 
b. What is a common test of control used to assess its effectiveness? 
c. What is a substantive test of transaction related to the internal control? 


18-20 (OBJECTIVE 18-3) Teremok is a fast food restaurant chain in Russia with 174 stores in 
Moscow and Saint Petersburg. The restaurants sell a number of different items including 
Russian crepes, soups, salads, desserts, and beverages. In order to ensure consistent qual- 
ity and flavor offerings at its different stores, restaurants like Teremok often centralized all 
inventory purchases through the purchasing department. The assistant manager of indi- 
vidual stores in charge of keeping sufficient stocks of inventory uses the company’s inven- 
tory management computer system for requisition requests which are approved by the 
store manager. These requests go to the central purchasing office which is able to negotiate 
discounts with suppliers due to the bulk purchases. Suppliers then deliver the inventory 
directly to each store each morning, 365 days a year. The inventory is received by an inven- 
tory clerk whose main tasks include signing off on the inventories received and stocking 
the various food stations when their stock runs low. 

Area managers do not need to approve the requisition requests submitted by each store, 
but will review the purchases, typically once a week. The supplier issues the invoices to the 
purchasing department. The purchasing department will then pay the invoice by the due 
date and charge the individual stores for the purchases plus a small percentage to cover the 
costs of the purchasing department. 

If the inventory (receiving) clerk of any stores finds any defective or incorrect (e.g. not 
ordered) inventories, it returns the inventories directly to the supplier, when the supplier 
delivers the next day’s shipment. The supplier then issues a debit memorandum to the 
purchasing department which also debits the individual store. 


a. When conducting the audit of Teremok’s acquisition and payment cycle, the audit Required 
must assess the overall control risk. Part of this task is to consider potential deficien- 
cies or risks of the firm’s procedures. Describe the procedures used by Teremok and 
comment on the risks, if any, associated with Teremok’s acquisition and payment 
cycle related to the following items: 

(1) Authorization of purchases 

(2) Separation of asset custody from other functions 

(3) Timely recording and independent review of transactions 
(4) Authorization of payments 

b. For the same four items describes in question (a) above, comment on any features of 
used by Teremok that you would consider to be effective controls. 

c. As a part of the audit, the company’s management asks you to make suggestions 
regarding the roles of several specific employees. Based on the procedures designed 
above, what changes or suggestions would you make for the various positions 
involved. 


18-21 (OBJECTIVES 18-2, 18-3, 18-5) Data analytics is a powerful tool in fraud detection and ye 
is often used to search for signs of fraud in the purchasing function. To learn more about “(7>\B> 
data analytics as a fraud detection tool in purchasing, visit the Fraud Magazine Web site y@” 
(www.fraud-magazine.com) and search for the January 2013 article “Devil in the details: 
anti-fraud data analytics.” 


a. The article discusses a purchasing fraud that occurred in a state government agency. Required 
What was the nature of the internal controls over the purchasing function in the 
agency that provided the opportunity for fraud to occur? What were the incentives of 
the purchasing department to commit the fraud? 

b. How can data analytics tools be used to detect fraud in the purchasing function? 
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Required 


c. Describe three analyses a fraud examiner could perform to detect fraud related to a 
particular vendor (e.g., calculate year-to-year percentage changes in total purchases 
from each vendor). 


18-22 (OBJECTIVES 18-3, 18-4) In testing cash disbursements for the Jay Klein Company, you 
obtained an understanding of internal control. The controls are reasonably good, and no 
unusual audit problems arose in previous years. 

Although there are not many individuals in the accounting department, there is a reasonable 
separation of duties in the organization. There is a separate purchasing agent who is respon- 
sible for ordering goods and a separate receiving department that counts the goods when they 
are received and prepares receiving reports. There is a separation of duties between recording 
acquisitions and cash disbursements, and all information is recorded in the two journals inde- 
pendently. The controller reviews all supporting documents before signing the checks, and he 
immediately mails the checks to the vendors. Check copies are used for subsequent recording. 

All aspects of internal control seem satisfactory to you, and you perform minimum 
tests of 25 transactions as a means of assessing control risk. In your tests, you discover the 
following exceptions: 


1. One check amount in the cash disbursements journal was for $100 less than the 
amount stated on the vendor’s invoice. 

2. One voided check was missing. 

3. One invoice was paid twice. The second payment was supported by a duplicate copy 
of the invoice. Both copies of the invoice were marked “paid.” 

4. Two items in the acquisitions journal were misclassified. 

5. Three invoices were not initialed by the controller, but there were no dollar misstate- 
ments evident in the transactions. 

6. Five receiving reports were recorded in the acquisitions journal at least two weeks 
later than their date on the receiving report. 

7. Two receiving reports for vendors’ invoices were missing from the transaction pack- 
ets. One vendor’s invoice had an extension error, and the invoice was initialed that 
the amount had been checked. 


a. Identify whether each of 1 through 7 is a control test deviation, a monetary misstate- 
ment, or both. 

b. For each exception, identify which transaction-related audit objective was not met. 

. What is the audit importance of each of these exceptions? 

. What follow-up procedures would you use to determine more about the nature of 
each exception? 

e. How would each of these exceptions affect the rest of your audit? Be specific. 

f. Identify internal controls that should have prevented each misstatement. 


ao 


18-23 (OBJECTIVES 18-3, 18-6) In the audit of Sri Lanka Tea company, a specialty tea grower 
and processing company, the auditor uncovered evidence that control risk was not at a 
sufficient low level, particularly in areas related to the cutoff objective. Consider the fol- 
lowing independent situations that an audit conducted regarding cutoff tests can poten- 
tially discover: 

1. The audit finds a steady amount of accounts payable recorded throughout the pe- 
riod. However, a large amount of cash disbursements are made near the beginning 
of the subsequent period. Examining the accounts payable balance recorded as of 
the balance sheet date, the subsequent payments did not appear on any outstanding 
accounts payable. The auditor then checks the purchase orders submitted, as well as 
receiving reports recorded prior to year-end. Most of the purchase orders and none 
of the receiving reports are recorded as of the balance sheet date for the payments 
paid during the subsequent period. 

2. During the last week of the fiscal period, the auditor notices that there are very few 
recorded accounts payable. During the same week, the inventory and other expense 
accounts reflect the typical inflows and outflows. After the cutoff, recorded accounts 
payables and payments of existing receivables also appear normal. 
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3. The auditor is concerned about control risk, so decided to send confirmations to 
vendors for which the client showed an account payable for the previous month. Of 
the 84 vendors for which the client had an outstanding account payable in the previ- 
ous month, the auditor randomly selected 25 for confirmation. Of these 25 confir- 
mation requests sent, 19 of the vendors responded with 16 vendors agreeing to the 
account payable balance. For the three that were disagreements, one appears to be a 
purchase made after the fiscal year end date. The other two deviations were for small 
dollar amounts below the materiality threshold. 


a. For the three situations listed above, consider possible explanations for why each situa- | Required 
tion occurred that would not be considered a misstatement. 
b. For each of the three situations listed above, consider additional possible explana- 
tions that would indicate a misstatement occurred. What additional audit evidence 
should be secured to determine whether a misstatement related to the accounts 
payable balance occurred? 
c. In general, explain what accounts payable cutoff tests are used to determine. 


18-24 (OBJECTIVES 18-5, 18-6, 18-7) The balance-related audit objectives related to accounts 
payables are similar to the balance-related audit objectives in general. However there is 
less emphasis on the overstatement of accounts payables since managers are less likely 
to attempt to overstate accounts payables. Rather, the emphasis is typically on the under- 
statement of accounts payables. The seven balance-related audit objectives related to 
accounts payables include the following: 


1. Accounts payable in the accounts payable list agree with related master file, and the 
total is correctly added and agrees with the general ledger (detail tie-in). 

. Accounts payable in the ac-counts payable list exist (existence). 

. Existing accounts payable are included in the accounts payable list (completeness). 

. Accounts payable in the ac-counts payable list are accurate (accuracy). 

. Accounts payable in the ac-counts payable list are correctly classified (classification). 

. Transactions in the acquisition and payment cycle are recorded in the proper period 
(cutoff). 

7. The company has an obligation to pay the liabilities included in accounts payable 

(obligations). 


Nw BWND 


a. For each of the balance-related audit objectives listed above, identify common tests Required 
of details of balances procedures used. 

b. Comment on the need for each test and circumstances that influence the need to conduct 
additional tests related to each procedure. 

c. Comment on the difference in tests relying on vendors’ invoices, vendors’ statements, 
and confirmations. 


18-25 (OBJECTIVES 18-3, 18-6) The Broughton Cap Company requires that prenumbered 
receiving reports be completed when purchased inventory items arrive in the receiving 
department. At the time of receipt, the receiving clerk writes the date of receipt on the 
receiving document. The last receipt in the fiscal year ended June 30, 2016, was recorded on 
receiving report 7279. The accounts payable department prepares prenumbered voucher 
packages as receiving reports are received from the receiving department. Entries in the 
acquisitions journal are prepared using information contained in the voucher package. 


For late June 2016 and early July 2016, receipts of goods are included in voucher packages 
as follows: 


Receiving Report No. Voucher No. 
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7276 2532 
7277 2526 
7278 2527 
7279 2530 
7280 2531 
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Receiving Report No. Voucher No. 
7281 2528 
7282 2529 


The June 2016 and July 2016 acquisitions journals included the following information: 


Acquisitions Journal-June 2016 


Day of Month Voucher No. Amount of Purchase 
29 2526 $7,256.22 
29 2528 $3,466.10 
30 2531 $8,221.89 
30 2532 $1,980.44 
Acquisitions Journal-July 2016 
Day of Month Voucher No. Amount of Purchase 
1 2527 $5,001.99 
1 2529 $4,888.33 
2 2530 $1,933.74 
Required a. Which voucher packages, if any, are recorded in the wrong accounting period? Prepare an 


adjusting entry to correct the financial statements for the year ended June 30, 2016. Assume 
Broughton uses a perpetual inventory system and all purchases are inventory items. 

b. Assume the receiving clerk accidentally wrote June 30 on receiving reports 7280 
through 7282. Explain how that will affect the correctness of the financial state- 
ments. How will you, as an auditor, discover that error? 

c. Describe, in general terms, the audit procedures you would follow in making sure 
that cutoff for purchases is accurate at the balance sheet date. 

d. Identify internal controls that will reduce the likelihood of cutoff misstatements re- 
lated to purchases. 


© @.. 18-26 (oBjective 18-6) You were in the final stages of your audit of the financial statements 

ategd of Ozine Corporation for the year ended December 31, 2016, when you were consulted 
by the corporation’s president, who believes there is no point to your examining the year 
2017 acquisitions journal and testing data in support of year 2017 entries. He stated that 
(a) bills pertaining to 2016 that were received too late to be included in the December 
acquisitions journal were recorded as of the year-end by the corporation by journal entry, 
(b) the internal auditor made tests after the year-end, and (c) he will furnish you with a let- 
ter certifying that there were no unrecorded liabilities. 


Required a. Should a CPA’s test for unrecorded liabilities be affected by the fact that the client 
made a journal entry to record 2016 bills that were received late? Explain. 

b. Should a CPA’s test for unrecorded liabilities be eliminated or reduced because of the 
internal audit tests? Explain. 

c. Should a CPA’s test for unrecorded liabilities be affected by the fact that a letter is ob- 
tained in which a responsible management official certifies that to the best of his or 
her knowledge, all liabilities have been recorded? Explain. 

d. Assume that the corporation, which handled some government contracts, had no 
internal auditor but that an auditor for a federal agency spent three weeks auditing 
the records and was just completing his work at this time. How will the CPA’s unre- 
corded liability test be affected by the work of the auditor for a federal agency? 

e. What sources in addition to the year 2017 acquisitions journal should the CPA con- 
sider to locate possible unrecorded liabilities?" 


© @.. 18-27 (opjective 18-3) Cho Books is a company that produces and distributes teaching 
workbooks and other educational materials to teachers of all levels of schooling, from 


* Based on AICPA question paper, American Institute of Certified Public Accountants. 
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primary to university. Most of the company’s sales are to retail stores throughout Asia. 
Bulk shipments are delivered to individual retail stores or to the corporate warehouse dis- 
tribution facilities for chain stores. In 2011, Cho Books began marketing some of its prod- 
ucts directly to schools. To do this, the company began sending out brochures to different 
schools, listing the telephone number of the company’s local branch and directing school 
administrators to the company’s Web site for more information. Using the Web site or the 
phone number, teachers and administrators can now easily access information about the 
books and order them directly from Cho. Cho’s management decided to make this option 
available because they hope that direct marketing will tap a new population of schools 
that do not have easy access to local retail stores. The company is also targeting schools 
that are currently buying Cho’s products from retail stores but want to pay lower prices by 
buying materials wholesale. Thus, the volume of shipments to retail stores is expected to 
drop slightly. 

Because Cho has had to expand the capabilities of its Web site to handle the new busi- 
ness, management has engaged an information technology consulting firm to update and 
maintain the online sales system. To simplify the system, all online sales are transacted 
through the use of credit cards. No other forms of payment are accepted. Before perform- 
ing analytical procedures related to the payroll and personnel cycle accounts, develop 
expectations of how these recent events at Cho Books, Inc., will affect payroll expense 
for the following departments during 2011 compared to prior years. Indicate the degree 
(extensive, moderate, little) to which you expect the payroll expense account balance in 
each of the departments listed below to increase or decrease during 2011. 


1. Warehouse and Shipping Department 
2. IT Department 

3. Accounts Receivable Department 

4. Accounts Payable Department 

. Receiving Department 

. Executive Management 

. Marketing 


NNW 


18-28 (OBJECTIVE 18-7) As part of the June 30, 2016, audit of accounts payable of Milner 
Products Company, the auditor sent 22 confirmations of accounts payable to vendors in the 
form of requests for statements. Four of the statements were not returned by the vendors, 
and five vendors reported balances different from the amounts recorded in Milner’s accounts 
payable master file. The auditor made duplicate copies of the five vendors’ statements to 
maintain control of the independent information and turned the originals over to the client’s 
accounts payable clerk to reconcile the differences. Two days later, the clerk returned the five 
statements to the auditor with the information on the audit schedule following part c. 


a. Evaluate the acceptability of having the client perform the reconciliations, assuming Required 
that the auditor intends to perform adequate additional tests. 

b. Describe the additional tests that should be performed for each of the five statements 
that included differences. 

c. What audit procedures should be performed for the nonresponses to the confirma- 
tion requests? 
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Statement | Balance per vendor’s statement $ 6,618.01 
Payment by Milner on June 30, 2016 (4,601.01) 
Balance per master file $ 2,017.00 
Statement 2 Balance per vendor’s statement $26,251.80 
Balance per master file (20,516.11) 
Difference cannot be located because the vendor failed to 
provide details of its account balance $ 5,735.69 
Statement 3 Balance per vendor’s statement $ 6,170.15 
Credit memo issued by vendor on July 15, 2016 (2,360.15) 
Balance per master file $ 3,810.00 
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Statement 4 Balance per vendor’s statement $ 8,619.21 


Payment by Milner on July 3, 2016 (3,000.00) 
Unlocated difference not followed up because of minor amount 215.06 
Balance per master file $ 5,834.27 
Statement 5 Balance per vendor’s statement $ 9,618.93 
Invoices not received by Milner (2,733.18) 
Payment by Milner on June 15, 2016 (1,000.00) 
Balance per master file $ 5,885.75 


CASE 


18-29 (OBJECTIVES 18-2, 18-3, 18-4, 18-6) The following tests of controls and substantive tests 
of transactions audit procedures for acquisitions and cash disbursements are to be used 
in the audit of Ward Publishing Company. You concluded that internal control appears 
effective and a reduced assessed control risk is likely to be cost beneficial. Ward’s active 
involvement in the business, good separation of duties, and a competent controller and 
other employees are factors affecting your opinion. 
Ward Publishing Company—Part | 
(See p. 659 for Part Il, and Case 19-26 on p. 659 for Part III) 

Tests of Controls and Substantive Tests of Transactions Audit Procedures 

for Acquisitions and Cash Disbursements 


1. Foot and cross-foot the acquisitions and cash disbursements journals for two months 
and trace totals to postings in the general ledger. 

2. Scan the acquisitions and cash disbursements journals for all months and investigate 
any unusual entries. 

3. Reconcile cash disbursements per books to cash disbursements per bank statement 
for one month. 

4, Examine evidence that the bank reconciliation is prepared by the controller. 

5. Inquire and observe whether the accounts payable master file balances are periodi- 
cally reconciled to vendors’ statements by the controller. 

6. Examine evidence that the numerical sequence of checks is accounted for by someone 
independent of the preparation function. 

7. Inquire and observe that checks are mailed by D. Ward or someone under his supervi- 
sion after he signs checks. 

8. Examine initials indicating that the controller balances the accounts payable master 
file to the general ledger monthly. 

9. Select a sample of entries in the cash disbursements journal, and 


a. obtain related cancelled checks and compare with entry for payee, date, and 
amount and examine signature endorsement. 
b. obtain vendors’ invoices, receiving reports, and purchase orders, and 
(1) determine that supporting documents are attached to vendors’ invoices. 
) determine that documents agree with the cash disbursements journal. 
) compare vendors’ names, amounts, and dates with entries. 
) determine whether a discount was taken when appropriate. 
) examine vendors’ invoices for initials indicating an independent review of 
chart of account codings. 
6) examine reasonableness of cash disbursements and account codings. 
7) review invoices for approval of acquisitions by Ward. 
8) review purchase orders and/or purchase requisitions for proper approval. 
9) verify prices and recalculate footings and extensions on invoices. 
0) compare quantities and descriptions on purchase orders, receiving reports, 
and vendors’ invoices to the extent applicable. 
(11) examine vendors’ invoices and receiving reports to determine that the check num- 
bers are included and the documents are marked “paid” at the time of check signing. 
c. Trace postings to the accounts payable master file for name, amount, and date. 
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10. Select a sample of receiving reports issued during the year and trace to vendors’ 
invoices and entries in the acquisitions journal. 


a. Compare type of merchandise, name of vendor, date received, quantities, and 
amounts. 

b. If the transaction is indicated in the acquisitions journal as paid, trace the check 
number to the entry in the cash disbursements journal. If unpaid, investigate 
reasons. 

c. Trace transactions to accounts payable master file, comparing name, amount, and 
date. 


Prepare all parts of a sampling data sheet (such as the one in Figure 15-2 on p. 494) Required 
through the planned sample size for the preceding audit program, assuming that a line item 
in the cash disbursements journal is used for the sampling unit. Use either nonstatistical or 
attributes sampling. For all procedures for which the line item in the cash disbursements 
journal is not an appropriate sampling unit, assume that audit procedures were performed 
on a nonsampling basis. For all tests of controls, use a tolerable exception rate of 5%, and 
for all substantive tests of transactions, use a rate of 6%. Use an ARO of 10%, which is con- 
sidered medium. Plan for an estimated population exception rate of 1% for tests of controls 
and 0% for substantive tests of transactions. 
Prepare the data sheet using the computer (instructor option — also applies to Part II). 


Part Il 

Assume a sample size of 50 for all procedures, regardless of your answers in Part I. For 
other procedures, assume that an adequate sample size for the circumstance was select- 
ed. The only exceptions in your audit tests for all tests of controls and substantive tests of 
transactions audit procedures are as follows: 


1. Procedure 2 — Two large transactions were identified as being unusual. Investigation 
determined that they were authorized acquisitions of fixed assets. They were both cor- 
rectly recorded. 

2. Procedure 9b(1) — A purchase order was not attached to a vendor’s invoice. The purchase 
order was found in a separate file and determined to be approved and appropriate. 

3. Procedure 9b(5) — Six vendors’ invoices were not initialed as being internally verified. 
Three actual misclassifications existed. The controller explained that he often did not 
review codings because of the competence of the accounting clerk doing the coding 
and was surprised at the mistakes. 


a. Complete the sampling data sheet from Part I using either nonstatistical or attributes Required 
sampling. 

b. Explain the effect of the exceptions on tests of details of accounts payable. Which 
balance-related audit objectives are affected, and how do those objectives, in turn, 
affect the audit of accounts payable? 

c. Given your tests of controls and substantive tests of transactions results, write an audit 
program for tests of details of balances for accounts payable. Assume: 
(1) The client provided a list of accounts payable, prepared from the master file. 
(2) Acceptable audit risk for accounts payable is high. 

(3) Inherent risk for accounts payable is low. 

(4) Substantive analytical procedure results were excellent. 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


19-1 Recognize the many 
accounts in the acquisition 
and payment cycle. 

19-2 Design and perform audit 
tests of property, plant, 
and equipment and 
related accounts. 

19-3 Design and perform audit 
tests of prepaid expenses. 

19-4 Design and perform audit 
tests of accrued liabilities. 

19-5 Design and perform audit 
tests of income and expense 
accounts. 
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COMPLETING THE TESTS 
IN THE ACQUISITION 
“AND PAYMENT CYCLE: 


@VERIFICATION OF 


SELECTED ACCOUNTS 


Incorrect Classifications Hide a Greater Net Loss 


TV Communications Network (TVCN), a Denver-based wireless cable television company, 
materially understated losses in its financial statements by improperly recording $2.5 million 
of expenses as a direct decrease in stockholders’ equity. The misstatement took the company 
from an actual net loss of $4.7 million to a reported loss of only $2.2 million. 


According to the _investiga- 
tion by the SEC, the expenses 
charged to equity were from 
disbursements for the de- 
velopment and distribution 
of brochures promoting the 
company’s business prospects. 
The payments should have 
been expensed and reflected 
in the income statement as 
advertising expenses. 


The internal controls associ- 
ated with the advertising ex- 
penses were clearly inadequate. 
TVCN typically did not have 
invoices or other documenta- 
tion available when payments 
were made by the company’s 
president, who controlled the 
bank account. Because of the 
lack of adequate documenta- 
tion, when the financial state- 
ments were prepared, TVCN 
employees responsible for recording the expenses did not have sufficient information to properly 
classify the disbursements. The SEC found that even when documentation was available, the ac- 
counts where the transactions were recorded conflicted with the supporting documentation. 


Unfortunately, TVCN’s auditor relied on inquiry of the company president as the primary evi- 
dence about the nature of the advertising payments. In substantive testing of transactions exceed- 
ing $10,000, the auditor relied on the company controller to identify all transactions meeting 
the criteria for review. Needless to say, the controller did not present all transactions meeting the 
$10,000 scope. As you might expect, the SEC brought charges against the auditor for failing to 
comply with auditing standards. 


Source: Based on Accounting and Auditing Enforcement Release No. 534, Commerce Clearing 
House, Inc., Chicago. 
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In Chapter 18, we noted that transactions in the acquisition and payment cycle affect several asset accounts: supplies, 
property, plant and equipment, and prepaid expenses accounts, to name a few. Payments made for services also affect 
many expense accounts. To continue our discussion of the acquisition and payment cycle, this chapter examines audit 
issues related to other accounts commonly found in the acquisition and payment cycles of most businesses. 

The story about TVCN highlights the importance of understanding the nature of acquisition and payment cycle 
transactions. Because transactions in this cycle affect numerous accounts in both the balance sheet and the income 
statement, incorrectly classified transactions may significantly affect reported results, as they did for TVCN. Auditors 
need to understand the nature of transactions flowing through the acquisition and payment cycle so that they can ef- 
fectively assess the risk of material misstatement and perform further audit procedures to evaluate accounts in the cycle. 


TYPES OF OTHER ACCOUNTS IN 
THE ACQUISITION AND PAYMENT CYCLE 


Table 19-1 highlights many of the typical accounts associated with transactions in the ‘OBJECTIVE 19-1 


acquisition and payment cycle. The types of assets, expenses, and liabilities will differ ee an 
for many companies, especially those in industries other than retail, wholesale, and the acquisition and payment cycle. 
manufacturing. 
The methodology associated with auditing these accounts is similar to the audits 
of other accounts discussed in earlier chapters. The methodology is the same as 
Figure 18-3 on page 617 for accounts payable, except for the name of the account 
being audited. 
The previous chapter presented an overview of typical tests of controls and sub- 
stantive tests of transactions for acquisition and payment cycle transactions, as well 
as commonly used analytical procedures and tests of details of balances for accounts 
payable. In this chapter, the issues for some of the other key accounts in this cycle are 
examined, namely the audit of: 


* Property, plant, and equipment 
* Prepaid expenses 

¢ Other liabilities 

* Income and expense accounts 


AUDIT OF PROPERTY, PLANT, AND EQUIPMENT 
Property, plant, and equipment are assets that have expected lives of more than one ‘OBJECTIVE 19-200 


year, are used in the business, and are not acquired for resale. The intent to use the Dende ian ee 
assets as part of the operation of the client’s business and their expected lives of more 6 property, plant, and equipment 
than one year are the significant characteristics that distinguish these assets from and related accounts. 
inventory, prepaid expenses, and investments. Table 19-2 on the next page shows 


ne Accounts Typically Associated with Acquisition 
: and Payment Cycle Transactions 
Assets Expenses Liabilities 
Cash Cost of goods sold Accounts payable 
Inventory Rent expense Rent payable 
Supplies Property taxes Accrued professional fees 
Property, plant, and equipment Income tax expense Accrued property taxes 
Patents, trademarks, and copyrights Insurance expense Other accrued expenses 
Prepaid rent Professional fees Income taxes payable 
Prepaid taxes Retirement benefits 
Prepaid insurance Utilities 
Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Editio@. Fraprsei EA caiG® MRILST PIG. PidGUBRSDSdACEHIELACQUISITION AND PAYMENT CYCLE 677 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-30 00:57:56. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Overview of Equipment- 


Related Accounts 


See Classifications of Property, Plant, and Equipment Accounts 


Land and land improvements 

Buildings and building improvements 

Equipment 

Furniture, computers, and fixtures 

Autos and trucks 

Leasehold improvements 

Construction-in-process for property, plant, and equipment 


examples of some of the typical classifications of property, plant, and equipment 
accounts. The acquisition of property, plant, and equipment occurs through the 
acquisition and payment cycle. 

Because the audits of property, plant, and equipment accounts are similar, one 
example (equipment) is used to illustrate an approach to auditing all three types of 
accounts. Significant differences in the verification of the other two types of accounts 
are discussed as they arise. 


The accounts commonly used for equipment are illustrated in Figure 19-1. Notice 
that the debits to equipment arise from the acquisition and payment cycle. Because 
the source of debits in the asset account is the acquisitions journal, the accounting 
system has normally already been tested for recording current period additions to 
equipment as part of the tests of the acquisition and payment cycle (which we studied 
in the previous chapter). However, because equipment additions are infrequent, often 
for large amounts, and subject to special controls, such as board of directors’ approval, 
the auditor may decide not to rely heavily on these tests as evidence supporting fixed 
asset additions. 

The primary accounting record for equipment and other property, plant, and 
equipment accounts is generally a fixed asset master file. The master file includes a 
detailed record for each piece of equipment and other types of property owned. Each 
record in the file includes a description of the asset, date of acquisition, original cost, 
current year depreciation, and accumulated depreciation for the property. 

The totals for all records in the master file equal the general ledger balances for the 
related accounts: equipment, depreciation expense, and accumulated depreciation. 
The master file also contains information about property acquired and disposed of 
during the year. 


FIGURE 19-1 Equipment and Related Accounts 


Accumulated 
Equipment depreciation 
Beginning Beginning 
balance balance 


(1) Acquisitions Disposals Disposals | Current period 
Ending depreciation 


balance Ending 
balance 


Gain or loss Depreciation 
on disposals expense 


as 


(1) Acquisitions of equipment arise from the acquisition and payment cycle. 
See Figure 18-1 (p. 605). 
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Auditors verify equipment differently from current asset accounts for three reasons: 


1. There are usually fewer current period acquisitions of equipment, especially large 
equipment used in manufacturing. 

2. The amount of any given acquisition is often material. 

3. The equipment is likely to be kept and maintained in the accounting records for 
several years. 


Because of these differences, the auditing of equipment emphasizes the verification 
of current period acquisitions rather than the balance in the account carried forward 
from the preceding year. In addition, the expected life of assets over one year requires 
depreciation expense and accumulated depreciation accounts, as shown in Figure 19-1, 
which are verified as part of the audit of the assets. Finally, equipment may be sold or 
disposed of, triggering a gain or loss entry that the auditor may need to verify. 

Although the approach to verifying equipment differs from that used for current 
assets, several other asset accounts are verified in much the same manner. These include 
patents, copyrights, catalog costs, and all property, plant, and equipment accounts. 

In the audit of equipment and related accounts, it is helpful to separate the tests 
into the following categories: 


¢ Perform substantive analytical procedures 

* Verify current year acquisitions 

¢ Verify current year disposals 

* Verify the ending balance in the asset account 

* Verify depreciation expense 

¢ Verify the ending balance in accumulated depreciation 


Next, let’s examine the use of these categories of tests in the audit of equipment, 
depreciation expense, accumulated depreciation, and gain or loss on disposal accounts. 


As in all audit areas, the type of analytical procedures depends on the nature of the 
client’s operations. Table 19-3 illustrates substantive analytical procedures often per- 
formed for equipment. 

As you can see, most of the typical substantive analytical procedures are used to 
assess the likelihood of material misstatements in depreciation expense and accumu- 
lated depreciation. Later in the chapter, the substantive procedures auditors often use 
to test these accounts are discussed. The auditor may use substantive analytical pro- 
cedures, tests of details of balances, or a combination of both types of tests to verify 
depreciation expense and accumulated depreciation. 


Companies must correctly record current year additions because the assets have long- 
term effects on the financial statements. The failure to capitalize a fixed asset, or the 


Perform Substantive 
Analytical Procedures 


Verify Current 


’ ae . : Year Acquisitions 
recording of an acquisition at the incorrect amount, affects the balance sheet until the q 
Ete Substantive Analytical Procedures for Equipment 
Substantive Analytical Procedure Possible Misstatement 
Compare depreciation expense divided by gross Misstatement in depreciation expense and accumulated 
equipment cost with previous years. depreciation 
Compare accumulated depreciation divided by gross Misstatement in accumulated depreciation. 
equipment cost with previous years. 
Compare monthly or annual repairs and maintenance, Expensing amounts that should be capitalized. 
supplies expense, small tools expense, and similar 
accounts with previous years. 
Compare gross manufacturing cost divided by some Idle equipment or equipment that was disposed of but not 
measure of production with previous years. written off. 
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company disposes of the asset. The income statement is affected until the asset is fully 
depreciated. 

Because of the importance of current period acquisitions in the audit of equip- 
ment, auditors use seven of the eight balance-related audit objectives as a frame 
of reference for tests of details of balances: existence, completeness, accuracy, 
classification, cutoff, detail tie-in, and rights and obligations. (Realizable value is 
discussed in connection with verifying ending balances.) The balance-related audit 
objectives and common audit tests are shown in Table 19-4. Existence, complete- 
ness, accuracy, classification, and rights are usually the major objectives for this 
part of the audit. 

As in all other audit areas, the actual audit tests and sample size depend heavily 
on performance materiality, inherent risk, and assessed control risk. Performance 
materiality is important for verifying current year additions because these transac- 
tions vary from immaterial amounts in some years to a large number of significant 
acquisitions in others. 


Rte Balance-Related Audit Objectives and Tests of Details of Balances for Equipment Additions 


Common Tests of Details 
of Balances Procedures 


Balance-Related Audit Objective Comments 


Foot the acquisitions schedule. 

Trace the individual acquisitions to the 
master file for amounts and descriptions. 

Trace the total to the general ledger. 


Current year acquisitions in the acquisitions 
schedule agree with related master file amounts, 
and the total agrees with the general ledger 
(detail tie-in). 


Footing the acquisitions schedule and tracing 
individual acquisitions should be limited unless 
controls are deficient. 

All increases in the general ledger balance for the 
year should reconcile to the schedule. 


Examine vendors’ invoices and receiving 
reports. 
Physically examine assets. 


Current year acquisitions as listed exist (existence). 


Examine vendors’ invoices of closely 
related accounts such as repairs and 
maintenance to uncover items that 
should be recorded as equipment. 

Review lease and rental agreements. 


Existing acquisitions are recorded (completeness). 


This objective is one of the most important for 
equipment. 

It is uncommon to physically examine assets 
acquired unless controls are deficient or 
amounts are material. 


This objective is important if there are significant 
repairs that may extend the life of assets, or 
if there have been trade-ins or disposals of 
assets. 


Current year acquisitions as listed are accurate Examine vendors’ invoices. 


(accuracy). 


Extent depends on inherent risk and 
effectiveness of internal controls. 


Examine vendors’ invoices in various 
equipment accounts to uncover items 
that should be classified as manufacturing 
or office equipment, part of the 
buildings, or repairs. 

Examine vendors’ invoices of closely 
related accounts such as repairs to 
uncover items that should be recorded 
as equipment. 

Examine rent and lease expense for 
capitalizable leases. 


Current year acquisitions as listed are correctly 
classified (classification). 


Review transactions near the balance sheet 
date for correct period. 


Current year acquisitions are recorded in the 
correct period (cutoff). 


The objective is closely related to tests for 
completeness. It is done in conjunction with 
that objective and tests for accuracy. 


Usually done as part of accounts payable cutoff 
tests. 


The client has rights to current year acquisitions Examine vendors’ invoices. 


(rights). 
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Ordinarily the main concern is whether 
equipment is owned or leased. Purchase or 
lease contracts are examined for equipment; 
property deeds, abstracts, and tax bills 
are frequently examined for land or major 
buildings. 
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The starting point for the verification of current year acquisitions is normally a 
schedule obtained from the client of all acquisitions recorded in the general ledger prop- 
erty, plant, and equipment accounts during the year. The client obtains this information 
from the property master file. A typical schedule lists each addition separately and 
includes the date of the acquisition, vendor, description, notation of whether it is new or 
used, life of the asset for depreciation purposes, depreciation method, and cost. 

As you study Table 19-4, notice that the most common audit test to verify additions 
is to examine vendors’ invoices. Additional testing, beyond that which is done as part of 
the tests of controls and substantive tests of transactions, is often necessary because of 
the complexity of many equipment transactions and the materiality of the amounts. It is 
normal for auditors to verify large and unusual transactions for the entire year as well as 
a representative sample of typical additions. The extent of testing depends on the audi- 
tor’s assessed control risk for acquisitions and the materiality of the additions. 

In testing acquisitions, the auditor must understand accounting standards to 
make certain the client follows the related requirements. For example, the auditor 
needs to be alert for the possibility of the client’s failure to include material transpor- 
tation and installation costs as part of the asset’s acquisition cost and the failure to 
properly record the trade-in of existing equipment. The auditor also needs to know 
the client’s capitalization policies to determine whether acquisitions are treated con- 
sistently with those of the preceding year. For example, if the client’s policy is to auto- 
matically expense acquisitions that are less than a certain amount, such as $1,000, the 
auditor should verify that the policy is followed in the current year. 

Auditors should also verify recorded transactions for correct classification among 
various equipment accounts. In some cases, amounts recorded as manufacturing equip- 
ment should be classified as office equipment or as a part of the building. It is also possi- 
ble the client has incorrectly capitalized repairs, rents, or similar expenses. Poor internal 
controls over document preparation, as illustrated by the chapter-opening story about 
TVCN, can result in significant misclassifications of disbursement transactions. 

Clients commonly include transactions that should be recorded as assets in 
repairs and maintenance expense, lease expense, supplies, small tools, and similar 
accounts. The misstatement may result from a lack of understanding of accounting 
standards or from clients’ desires to avoid income taxes. If auditors conclude that this 
type of material misstatement is likely, they may need to vouch larger amounts deb- 
ited to the expense accounts. It is a common practice to do so as part of the audit of 
the property, plant, and equipment accounts. 

Auditors also need to examine whether the client has a right to record equipment 
as an asset. Some large manufacturing equipment and other types of machinery, 
such as sophisticated medical equipment or computer data center equipment, may be 
under an operating lease. Auditors frequently examine purchase or lease contracts to 
determine whether capitalization of the equipment is appropriate. 


Transactions involving the disposal of equipment are often misstated when company 
internal controls lack a formal method to inform management of the sale, trade-in, 
abandonment, or theft of recorded machinery and equipment. If the client fails to 
record disposals, the original cost of the equipment account will be overstated indefi- 
nitely, and net book value will be overstated until the asset is fully depreciated. Formal 
methods of tracking disposals and provisions for proper authorization of the sale or 
other disposal of equipment help reduce the risk of misstatement. There should also 
be adequate internal verification of recorded disposals to make sure that assets are 
correctly removed from the accounting records. The client should periodically take an 
inventory of fixed assets to identify assets that have been lost or stolen. 

The auditor’s main objectives in the verification of the sale, trade-in, or abandon- 
ment of equipment are to gather sufficient appropriate evidence that all disposals are 
recorded and at the correct amounts. The starting point for verifying disposals is the 
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client’s schedule of recorded disposals. The schedule typically includes the date when 
the asset was disposed of, name of the person or firm acquiring the asset, selling price, 
original cost, acquisition date, and accumulated depreciation. 

Detail tie-in tests of the recorded disposals schedule are necessary, including foot- 
ing the schedule, tracing the totals on the schedule to the recorded disposals in the 
general ledger, and tracing the cost and accumulated depreciation of the disposals to 
the property master file. 

Because the failure to record disposals of equipment no longer used in the busi- 
ness can significantly affect the financial statements, the search for unrecorded disposals is 
essential. The nature and adequacy of the controls over disposals affect the extent of the 
search. The following procedures are often used for verifying disposals: 


* Review whether newly acquired assets replace existing assets 

¢ Analyze gains and losses on the disposal of assets and miscellaneous income for 
receipts from the disposal of assets 

* Review plant modifications and changes in product line, and changes in major, 
costly computer-related equipment; property taxes; or insurance coverage for 
indications of deletions of equipment 

¢ Make inquiries of management and production personnel about the possibility 
of the disposal of assets 


When an asset is sold or disposed of without having been traded in for a replacement 
asset, the accuracy of the transaction can be verified by examining the related sales invoice 
and property master file. The auditor should compare the cost and accumulated deprecia- 
tion in the master file with the recorded entry in the general journal and recompute the 
gain or loss on the disposal of the asset for comparison with the accounting records. When 
trade-in of an asset for a replacement occurs, the auditor should make sure that the new asset is 
capitalized and the replaced asset correctly eliminated from the records, considering the 
book value of the asset traded in and the additional cost of the new asset. 


Two of the auditor’s objectives when auditing the ending balance in the equipment 
accounts include determining that: 


1. All recorded equipment physically exists on the balance sheet date (existence) 
2. All equipment owned is recorded (completeness) 


When designing audit tests to meet these objectives, auditors first consider the 
nature of internal controls over equipment. Ideally, auditors are able to conclude that 
controls are sufficiently effective to allow them to rely on balances carried forward from 
the prior year. Important controls include the use of a master file for individual fixed 
assets, adequate physical controls over assets that are easily movable (such as computers, 
tools, and vehicles), assignment of identification numbers to each plant asset, and peri- 
odic physical count of fixed assets and their reconciliation by accounting personnel. A 
formal method of informing the accounting department of all disposals of fixed assets is 
also an important control over the balance of assets carried forward into the current year. 

Typically, the first audit step concerns the detail tie-in objective: Equipment, as listed 
in the master file, agrees with the general ledger. Examining the master file that totals to 
the general ledger balance is ordinarily sufficient. The auditor may choose to use audit 
software to foot an electronic version of the master file or manually test-foot a few pages. 

After assessing control risk for the existence objective, the auditor decides whether 
it is necessary to verify the existence of individual items of equipment included in the 
master file. If there is a high likelihood of a material amount of missing fixed assets 
still included in the master file, the auditor can select a sample from the master file 
and examine the actual assets. Similarly, based on the auditor’s assessment of control 
risk for the completeness objective, the auditor may physically examine a sample of 
major equipment items and trace them to the master file. In rare cases, the auditor 
may decide it is necessary for the client to take a complete physical inventory of fixed 
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OLYMPUS Olympus, a Japanese digital camera and medical imag- Furthermore, the company allegedly overpaid 
ing manufacturer, was accused of attempting to cover- for preferred stock from undisclosed third par- 
ACQUISITIONS TO ing up operating losses by making flimsy acquisitions ties. All of these actions were designed to hide 
HIDE LOSSES that only exacerbated the problem. the fact that the core business was deteriorating. 
In the 2000s, the digital camera business faced The acquisitions had little to no chance of giv- 
significant pressure from the emergence of smart- ing the company significant revenues; instead, the 
phones with more and more sophisticated cameras. acquisitions and fees associated with the acquisi- 
As a result, digital camera sales, which made up a tions were used as excuses to blame the decline in 
significant portion of Olympus’ sales declined from revenues and the losses that the company gener- 
$3.3 billion to $1.9 billion from 2008 to 2010. ated. Eventually, however, the truth was revealed 
In order to make up for the shortfall in revenues, and the company lost $7 billion in market value. 
executives at the company allegedly engaged in a Olympus’ auditor during part of this time 
shopping spree of other — oftentimes unrelated — raised red flags, but was replaced by the 
businesses to conceal losses. In particular, the company. Should the existing or new auditor 
firm paid $2 billion for Gyrus, an English medical have done more to uncover the truth? This 
equipment manufacturer and almost $800 mil- chapter focuses on some of the issues related to 
lion for several other businesses; prices that were the audit of the acquisition and payment cycle 
high relative to the market values of the firms. that may help address some of these issues. 


assets to make sure they all exist, and the fixed asset records are complete. If a physical 
inventory is taken, the auditor normally observes the count. 

The auditor normally does not need to test the accuracy or classification of fixed 
assets recorded in prior periods because, presumably, they were verified in previous 
audits at the time they were acquired. But the auditor should be aware that companies 
may occasionally have equipment on hand that is no longer used in operations. If the 
amounts are material, the auditor should evaluate whether they should be written 
down to net realizable value (realizable value objective) or at least classified separately 
as “nonoperating equipment.” 

In addition to performing procedures to obtain evidence related to balance-related 
audit objectives for fixed assets, auditors also perform audit procedures related to the 
four presentation and disclosure objectives for fixed assets. A major consideration in 
verifying disclosures related to fixed assets is the possibility of legal encumbrances aris- 
ing from use of fixed assets as collateral for a loan. Auditors may use several methods 
to determine whether equipment is encumbered, including: 


* Read the terms of loan and credit agreements 
¢ Send loan confirmation requests to banks and other lending institutions 
* Have discussions with the client or send letters to legal counsel 


The proper presentation and disclosure of equipment in the financial statements 
must be evaluated carefully to make sure that accounting standards are followed. 
Equipment should include the gross cost and should ordinarily be separated from 
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other fixed assets. Leased property should also be disclosed separately, and all liens on 
property must be included in the footnotes. Auditors must perform sufficient tests to 
verify that all four presentation and disclosure objectives are met. 


Depreciation expense is one of the few expense accounts not verified as part of tests 
of controls and substantive tests of transactions. The recorded amounts are deter- 
mined by internal allocations rather than by exchange transactions with outside parties. 
When depreciation expense is material, more tests of details of depreciation expense 
are required than for an account that has already been verified through tests of con- 
trols and substantive tests of transactions. 

The most important balance-related audit objective for depreciation expense is 
accuracy. Auditors focus on determining whether the client followed a consistent depre- 
ciation policy from period to period and whether the client’s calculations are correct. 

In determining the former, auditors must weigh four considerations: 


1. The useful life of current period acquisitions 

2. The method of depreciation 

3. The estimated salvage value 

4. The policy of depreciating assets in the year of acquisition and disposition 


The client’s policies can be determined by discussions with appropriate personnel 
and comparing their responses with information in the auditor’s permanent files. In 
deciding on the reasonableness of the useful lives assigned to newly acquired assets, 
the auditor must consider the physical life of the asset, the expected life (taking into 
account obsolescence or the company’s normal policy of upgrading equipment), and 
established company policies on trading in equipment. 

Occasionally, changing circumstances may necessitate a company to reevaluate 
the useful life of an asset. When this occurs, the revaluation should involve a change in 
accounting estimate rather than a change in accounting principle. The effect of this on 
depreciation must be evaluated. 

A useful method of auditing depreciation is a substantive analytical procedure 
performed by multiplying undepreciated fixed assets by the depreciation rate for the 
year. In making these calculations, the auditor must make adjustments for current 
year additions and disposals, assets with different lengths of life, and assets with dif- 
ferent methods of depreciation. Many CPA firms maintain an electronic spreadsheet 
in their permanent file that includes a breakdown of the fixed assets by method of 
depreciation and length of life. If the auditor’s expectation for depreciation is reason- 
ably close to the client’s totals, considering performance materiality and assessed con- 
trol risk for depreciation expense, tests of details for depreciation can be eliminated. 

When a substantive analytical procedure cannot be effectively performed or indi- 
cates a potential misstatement, more detailed tests are usually needed. To do this, auditors 
recompute depreciation expense for selected assets to determine whether the client is 
following a proper and consistent depreciation policy. To be relevant, the detailed calcula- 
tions should be tied in to the total depreciation calculations by footing the depreciation 
expense on the property master file and reconciling the total with the general ledger. 
Because accounting standards require footnote disclosures related to fixed asset depre- 
ciation, including disclosure of depreciation methods and related useful lives by asset 
class, auditors perform procedures to obtain evidence that the four presentation and 
disclosure-related audit objectives for depreciation are satisfied. For example, auditors 
compare information obtained through audit tests of the depreciation expense accounts 
to information disclosed in footnotes to ensure the information presented is consistent 
with the actual method and assumptions used to calculate and record depreciation. 


The debits to accumulated depreciation are normally tested as a part of the audit of 
disposals of assets, while the credits are verified as a part of depreciation expense. If 
the auditor traces selected transactions to the accumulated depreciation records in 
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the property master file as a part of these tests, then little additional testing should be 
required for the ending balance in accumulated depreciation. 

Two objectives are usually emphasized in the audit of the ending balance in accu- 
mulated depreciation: 


1. Accumulated depreciation as stated in the property master file agrees with the 
general ledger. This objective can be satisfied by test-footing the accumulated 
depreciation in the property master file and tracing the total to the general ledger. 

2. Accumulated depreciation in the master file is accurate. 


In some cases, the life of equipment may be significantly reduced because of 
reductions in customer demand for products, unexpected physical deterioration, a 
modification in operations, or other changes. Because of these possibilities, auditors 
must consider whether the value of the assets is impaired to make sure that the net 
book value does not exceed the realizable value of the assets. 


CONCEPT CHECK 


1. Explain why the emphasis in auditing property, plant, and equipment is on the current 
period acquisitions and disposals rather than on the balances in the account carried 
forward from the preceding year. 


2. What is the most important balance-related audit objective for depreciation expense? 
What are the auditor’s primary concerns? 


AUDIT OF PREPAID EXPENSES 
Prepaid expenses, deferred charges, and intangibles are assets that vary in life from ‘OBJECTIVE 19-3 


several months to several years. These include: 


* Prepaid rent * Patents * Deferred charges 
° Organization costs ¢ Prepaid insurance * Copyrights 
* Prepaid taxes ¢ Trademarks * Goodwill 


In some cases, these accounts are highly material. However, in a typical audit, the 
company does not have many of the accounts listed or they are immaterial. 

Substantive analytical procedures are often sufficient for prepaid expenses, deferred 
charges, and intangibles. In certain audits, some of these assets can be significant and 
involve complex judgment. For example, the audit of intangibles such as goodwill 
depends heavily on the auditor’s knowledge of the nature of the client’s business and 
industry, and requires testing of management’s significant assumptions, its valuation 
model, and underlying data used as inputs to the model. Given the complexities of eval- 
uating intangible assets, auditors frequently involve business valuation specialists who 
help evaluate whether the value of the intangible asset has been impaired. 

In this section, we examine some of the typical internal controls and related audit tests 
commonly associated with prepaid expenses. In the following discussion, an example of 
the audit of prepaid insurance is used as an account representative of this group because: 


1. Prepaid insurance is found in most audits—virtually every company has some 
type of insurance. 

2. Problems commonly encountered in the audit of prepaid insurance are typical of 
this class of accounts. 

3. The auditor’s responsibility for the review of insurance coverage is an additional 
consideration not found in the other accounts in this category. 


Figure 19-2 on the next page illustrates the accounts typically used for prepaid insur- 
ance and the relationship between prepaid insurance and the acquisition and payment 
cycle through the debits to the prepaid insurance account. Because the source of the 
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FIGURE 19-2. Prepaid Insurance and Related Accounts 


Prepaid insurance Insurance expense 


Beginning Current period 
balance insurance expense 


(1) Acquisitions 
(insurance 


premiums) 


Ending balance 


(1) Acquisitions of insurance premiums arise from the acquisition and payment cycle. 
This can be observed by examining Figure |8-| (p. 605). 


debits in the asset account is the acquisitions journal, the payments of insurance 
premiums have already been partially tested by means of the tests of controls and sub- 
stantive tests of acquisition and cash disbursement transactions. 


Internal controls for prepaid insurance and insurance expense can be conveniently divided 
into three categories: controls over the acquisition and recording of insurance, controls 
over the insurance register, and controls over the charge-off of insurance expense. Controls 
over the acquisition and recording of insurance are a part of the acquisition and payment 
cycle. Consistent with the procedures discussed in that cycle, proper authorization for new 
insurance policies and payment of insurance premiums are important controls. 

An insurance register is a record of insurance policies in force and the expira- 
tion date of each policy. Auditors use insurance registers to identify policies in force 
related to prepaid insurance accounts. Payment terms and amounts for the policies in 
force are contained in the register. Because the terms and amounts provide the basis 
for determining prepaid insurance amounts, the auditor independently verifies these 
terms and amounts to the underlying insurance policies or contracts. 

Companies often have a standard monthly journal entry to reclassify prepaid 
insurance as insurance expense. If a significant entry is required to adjust the balance 
in prepaid insurance at the end of the year, it indicates a potential misstatement in the 
recording of the acquisition of insurance throughout the year or in the calculation of 
the year-end balance in prepaid insurance. 


In the audit of prepaid insurance, the auditor obtains a schedule from the client that 
lists for each policy in force: 


* Policy information, including policy number, amount of coverage, and annual 
premium 

¢ Beginning prepaid insurance balance 

¢ Payment of policy premiums 

¢ Amount charged to insurance expense 

¢ Ending prepaid insurance balance 


Throughout the audit of prepaid insurance and insurance expense, the auditor 
should keep in mind that the amount in insurance expense is a residual. The only tests 
of the balance in the expense account that are ordinarily necessary include substantive 
analytical procedures and a test to be sure that all charges to insurance expense arose 
from credits to prepaid insurance. Because the payments of premiums are tested as 
part of the tests of controls and substantive tests of transactions and analytical proce- 
dures, the emphasis in the tests of details of balances is on prepaid insurance. 

The beginning and ending balances in prepaid insurance are frequently immaterial and 
often there are few transactions debited and credited to the balance during the year, most 
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of which are small and simple to understand. Therefore, the auditor can generally spend 
little time verifying the balance or the transactions. If the auditor decides not to verify the 
balance in detail, substantive analytical procedures become increasingly important to 
identify potentially significant misstatements. Auditors commonly perform the follow- 
ing substantive analytical procedures for prepaid insurance and insurance expense: 


* Compare total prepaid insurance and insurance expense with previous years. 

* Compute the ratio of prepaid insurance to insurance expense and compare it 
with previous years. 

* Compare the individual insurance policy coverage on the schedule of insurance 
obtained from the client with the preceding year’s schedule as a test of the elimi- 
nation of certain policies or a change in insurance coverage. 

* Compare the computed prepaid insurance balance for the current year on a policy- 
by-policy basis with that of the preceding year as a test of an error in calculation. 

* Review the insurance coverage listed on the prepaid insurance schedule with an 
appropriate client official or insurance broker for adequacy of coverage. The 
auditor cannot be an expert on insurance matters, but the auditor’s understand- 
ing of accounting and the valuation of assets is necessary to make sure that a 
company is not underinsured. 


For many audits, no additional substantive procedures are needed unless assessed 
control risk is high or the tests indicate a high likelihood of a significant misstate- 
ment. The remaining audit procedures, which are examined next, should be per- 
formed only when there is a special reason for doing so. Our discussion of these tests 
uses the balance-related audit objectives for performing tests of details of asset bal- 
ances. (Realizable value is not applicable.) 


Insurance Policies in the Prepaid Insurance Schedule Exist and Existing Policies 
Are Listed (Existence and Completeness) Tests for existence and omissions of in- 
surance policies in force can be performed on the client’s prepaid insurance schedule 
in one of two ways: 


1. Examine a sample of insurance invoices and policies in force for comparison to 
the schedule. 

2. Obtain a confirmation of insurance information from the company’s insurance 
agent. Auditors typically prefer to send a confirmation to the client’s insurance 
agent, because this approach is usually less time-consuming than vouching tests 
and it provides third-party verification. 


The Client Has Rights to All Insurance Policies in the Prepaid Insurance Schedule 
(Rights) The party who will receive the benefit if an insurance claim is filed has the 
rights. Ordinarily, the recipient named in the policy is the client, but when there are 
mortgages or other liens, the insurance claim may be payable to a creditor. The review 
of insurance policies for claimants other than the client is an excellent test of unre- 
corded liabilities and pledged assets. 


Prepaid Amounts on the Schedule Are Accurate and the Total Is Correctly Added 
and Agrees with the General Ledger (Accuracy and Detail Tie-in) Audit tests to 
verify the accuracy of prepaid insurance involve verifying the amount of the insurance 
premium, the length of the policy period, and the allocation of the premium to unex- 
pired insurance. The amount of the premium for a given policy and its time period can 
be verified at the same time by examining the premium invoice or the confirmation from 
an insurance agent. After these two have been verified, the client’s calculations of unex- 
pired insurance can be tested by recalculation. The schedule of prepaid insurance can 
then be footed and the totals traced to the general ledger to complete the detail tie-in tests. 


The Insurance Expense Related to Prepaid Insurance Is Correctly Classified 
(Classification) The correct classification of debits to different insurance expense 
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accounts should be reviewed as a test of the income statement. In some cases, the 
appropriate expense account is obvious because of the type of insurance, such as a 
policy insuring a piece of equipment. In other cases, allocations are necessary. For 
example, fire insurance on a building may require allocation to several accounts, in- 
cluding manufacturing overhead. Charging the correct accounts and consistency with 
previous years are the major considerations in evaluating classification. 


Insurance Transactions Are Recorded in the Correct Period (Cutoff) Cutoff for 
acquisitions of insurance is normally not a significant problem because of the small 
number of policies and the immateriality of the amount. If auditors check cutoff of 
insurance acquisitions, they do so as part of accounts payable cutoff tests. 


AUDIT OF ACCRUED LIABILITIES 


Design and perform audit tests 
of accrued liabilities. 


Auditing Accrued 
Property Taxes 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


A third major category of accounts in the acquisition and payment cycle is accrued 
liabilities, which are the estimated unpaid obligations for services or benefits that have 
been received before the balance sheet date. Many accrued liabilities represent future 
obligations for unpaid services resulting from the passage of time but are not payable 
at the balance sheet date. For example, the benefits of property rental accrue through- 
out the year. Therefore, at the balance sheet date, a certain portion of the total rent cost 
that has not been paid should be accrued. Other similar liabilities include: 


¢ Accrued payroll ¢ Accrued professional fees 
¢ Accrued payroll taxes ¢ Accrued rent 
¢ Accrued officers’ bonuses ¢ Accrued interest 


e Accrued commissions 


A second type of accrual involves estimates where the amount of the obligation 
due is uncertain, such as the obligation for federal income taxes when there is a rea- 
sonable likelihood that the amount reported on the tax return will be changed after 
the Internal Revenue Service audits the return. Accrued warranty costs and accrued 
pension costs are similar accruals. 

The verification of accrued expenses varies depending on the nature of the 
accrual and the circumstances of the client. For most audits, accruals take little audit 
time. In other instances, certain accounts, such as accrued income taxes, warranty 
costs, and pension costs, are often material and require considerable audit effort. The 
following discussion of the audit of accrued property taxes is used as an example of 
the audit of an accrued liability account. 


Figure 19-3 illustrates the accounts typically used by companies for accrued property 
taxes, showing the relationship between accrued property taxes and the acquisition and 


FIGURE 19-3 Accrued Property Taxes and Related Accounts 


Accrued property taxes Property tax expense 


Beginning balance 


(1) Payments Current period 
(property taxes) property tax 
expense 


Ending balance 


(1) Payments of property taxes arise from the acquisition and payment cycle. This can be 
observed by examining Figure 18-1 (p. 605). 
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payment cycle through the debits to the liability account. Because the source of the debits 
is the cash disbursements journal, the payments of property taxes should have already 
been partially tested by the tests of the acquisition and payment cycle transactions. 

As with insurance expense, the balance in property tax expense is a residual 
amount that results from the beginning and ending balances in accrued property 
taxes and the payments of property taxes. Therefore, the emphasis in the tests should 
be on the ending property tax liability and payments. When auditors verify accrued 
property taxes, all eight balance-related audit objectives except realizable value are 
relevant. Two are especially significant: 


1. Existing properties for which accrual of taxes is appropriate are on the accrual 
schedule. The failure to include properties for which taxes should be accrued will 
understate the property tax liability (completeness). A material misstatement can 
occur, for example, if taxes on property were not paid before the balance sheet 
date and not included as accrued property taxes. 

2. Accrued property taxes are accurately recorded. The auditor’s concern is the con- 
sistent treatment of the accrual from year to year (accuracy). 


The auditor uses two primary tests for the inclusion of all accruals. Auditors ver- 
ify the accruals at the same time as the audit of current year property tax payments. In 
most audits, there are few property tax payments, but each payment is often material, 
and therefore it is common to verify each one. Auditors also compare the accruals 
with those of previous years. 

The auditor often begins by obtaining a schedule of property tax payments from 
the client and comparing each payment with the preceding year’s schedule to deter- 
mine whether all payments have been included in the client-prepared schedule. The 
fixed asset audit schedules also must be examined for major additions and disposals of 
assets that may affect the property tax accrual. All property affected by local property 
tax regulations should be included in the schedule, even if the first tax payment has not 
yet been made. 

After auditors are satisfied that all taxable property has been included in the client- 
prepared schedule, they evaluate the reasonableness of property taxes on each property 
used by the client to estimate the accrual. In some instances, the total has already been 
set by the taxing authority and sent to the client, so it is possible to verify the amount by 
comparing the amount on the schedule with the tax bill. In other cases, the preceding 
year’s total payments must be adjusted for the expected increase in property tax rates. 

The auditor can verify the accrued property tax by recalculating the portion of the 
total tax applicable to the current year for each piece of property. The most important 
consideration is to use the same portion of each tax payment for the accrual that was used 
in the preceding year, unless there are justifiable conditions for a change. After the accrual 
and property tax expense for each piece of property have been recalculated, the totals 
should be added and compared with the general ledger. In many cases, property taxes are 
charged to more than one expense account. In that case, the auditor should test for correct 
classification by evaluating whether the correct amount was charged to each account. 


AUDIT OF INCOME AND EXPENSE ACCOUNTS 
To complete our discussion of key accounts in the acquisition and payment cycle, OBJECTIVE 19-50 


an overview is provided of procedures auditors typically use to determine whether 
the income and expense accounts in the financial statements are fairly presented in 
accordance with accounting standards. The auditor must be satisfied that each of the 
income and expense totals included in the income statement, as well as net earnings, 
are not materially misstated. 

The auditor needs to be aware that most users of financial statements rely more 
heavily on the income statement than on the balance sheet for making decisions. 
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Equity investors, long-term creditors, union representatives, and even short-term 
creditors are more interested in the ability of a firm to generate profit than in the his- 
torical cost or book value of the individual assets. 

The following two concepts in the audit of income and expense accounts are 
essential when considering the purposes of the income statement: 


1. The matching of periodic income and expense is necessary for a correct determi- 
nation of operating results. 

2. The consistent application of accounting principles for different periods is neces- 
sary for comparability. 


Both of these concepts must be applied to the recording of individual transactions 
and to the combining of accounts in the general ledger for statement presentation. 


The audit of income and expense accounts is directly related to the balance sheet and 
is not a separate part of the audit process. A misstatement of an income statement 
account almost always equally affects a balance sheet account, and vice versa. As we 
have discussed in preceding chapters, the audit of income and expense accounts is 
intertwined with the other parts of the audit. We provide a brief description of these 
tests here as a review of material covered in earlier chapters. This review shows the 
interrelated nature of different parts of the audit with income and expense account 
testing. The parts of the audit directly affecting these accounts are: 


* Substantive analytical procedures 
¢ Tests of controls and substantive tests of transactions 
¢ Tests of details of account balances 


Our emphasis here is on income and expense accounts directly related to the 
acquisition and payment cycle, but the same concepts apply to the income statement 
accounts in all other cycles. 


Chapter 8 addressed analytical procedures. Subsequent chapters refer back to those 
procedures as part of specific audit areas. Table 19-5 shows a few substantive ana- 
lytical procedures and the possible misstatements they may uncover in the audit of 
income and expense accounts, as well as the related balance sheet accounts. 


Substantive Analytical Procedures for Income 


Lad thawl and Expense Accounts 


Substantive Analytical Procedure Possible Misstatement 


Compare individual expenses with previous years. 


Overstatement or understatement of a balance in an 
expense account. 


Compare individual asset and liability balances with pre- 
vious years. 


Overstatement or understatement of a balance sheet 
account that will also affect an income statement 
account (for example, a misstatement of inventory 
affects cost of goods sold). 


Compare individual expenses with budgets. 


Misstatement of expenses and related balance sheet 
accounts. 


Compare gross margin percentage with previous years. 


Misstatement of cost of goods sold and inventory. 


Compare inventory turnover ratio with previous years. 


Misstatement of cost of goods sold and inventory. 


Compare commission expense divided by sales with 
previous years. 


Compare prepaid insurance expense with previous years. 


Misstatement of insurance expense and prepaid 
insurance. 


Misstatement of commission expense and accrued 
commissions. 


Compare individual manufacturing expenses divided by 
total manufacturing expenses with previous years. 


Misstatement of individual manufacturing expenses and 
related balance sheet accounts. 
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Both tests of controls and substantive tests of transactions have the effect of simul- 
taneously verifying balance sheet and income statement accounts. For example, 
assume an auditor concludes that internal controls are adequate to provide reasonable 
assurance that transactions in the acquisitions journal occurred and are accurately 
recorded, correctly classified, and recorded in a timely manner. By doing so, the audi- 
tor obtains evidence about the correctness of individual balance sheet accounts, such 
as accounts payable and fixed assets, and income statement accounts, such as adver- 
tising and repairs. Conversely, inadequate controls and misstatements discovered 
through tests of controls and substantive tests of transactions indicate the likelihood 
of misstatements in both the income statement and the balance sheet. 

The most important means of verifying many of the income statement accounts 
in each transaction cycle are understanding internal control and performing the 
related tests of controls and substantive tests of transactions. For example, if the 
auditor concludes after adequate tests that control risk can be appropriately assessed 
as low for transactions in the acquisition and payment cycle, the only additional veri- 
fication of related income statement accounts, such as utilities, advertising, and pur- 
chases, will occur through the performance of substantive analytical procedures and 
cutoff tests. However, certain income and expense accounts are not verified at all by 
tests of controls and substantive tests of transactions, and others must be tested more 
extensively by other substantive testing. These are discussed next. 


Auditors must analyze the amounts included in certain income statement accounts 
even though the previously mentioned tests have been performed. Next, we examine 
the meaning and methodology of analysis of accounts before moving on to a discus- 
sion of when expense account analysis is appropriate. 

Expense account analysis involves auditor examination of underlying docu- 
mentation of individual transactions and amounts making up the detail of the total 
of an expense account. The documents are the same type as those used for examining 
transactions as part of tests of acquisition transactions, including invoices, receiving 
reports, purchase orders, and contracts. Figure 19-4 (p. 676) illustrates a typical audit 
schedule showing expense analysis for legal expenses. 

Although the focus of expense account analysis is on transactions, these tests dif- 
fer from tests of controls and substantive tests of transactions. The tests of controls 
and substantive tests of transactions are meant to assess control risk. As such, they are 
tests of classes of transactions, such as acquisitions, and therefore include many dif- 
ferent accounts. In the analysis of expense and other income statement accounts, the 
auditor verifies transactions in specific accounts to determine whether the transac- 
tions are appropriate for the client, properly classified, and accurately recorded. 

Assuming satisfactory results are found in tests of controls and substantive tests of 
transactions, auditors normally restrict expense analysis to those accounts with a rela- 
tively high likelihood of material misstatement. As examples, auditors often analyze: 


* Repairs and maintenance expense accounts to determine whether they errone- 
ously include property, plant, and equipment transactions 

* Rent and lease expenses to determine the need to capitalize leases 

* Legal expense to determine whether there are potential contingent liabilities, 
disputes, illegal acts, or other legal issues that may affect the financial statements 


Utilities, travel expense, and advertising accounts are rarely analyzed unless sub- 
stantive analytical procedures indicate high potential for material misstatement. 

Auditors often analyze expense account transactions as part of the verification of a 
related asset. It is common, for example, for auditors to analyze repairs and maintenance 
as part of verifying fixed assets, and insurance expense as part of testing prepaid insurance. 


Several expense accounts result from the allocation of accounting data rather than dis- 
crete transactions. Such expenses include depreciation, depletion, and the amortization of 
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FIGURE 19-4 Expense Analysis for Legal Expense 
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s Schedule V-10 Date 
Gilman Company, Inc. : 
Legal Expenses Prepared by Client/JL 1/21/17 


12/31/16 Approved by __ SW 1/28/17 


AIC 913—Legal Expense 
Paid to For Date Amount 


@ Alexander J. Schweppe Retainer—12 months @ $1,000 Monthly $12,000 ¥ 


ABC v. Carson—patent Apr. |4 9,800 ¥ 
infringement suit Aug. 9 7,109 f 


@ Smith, Tom Consultation re: inquiry from June 6 1,000 ¥ 
Consumer Protection Bureau, July 10 750 4 
State Attorney General's office 


(6) L. Marvin Hall Assistance in collecting overdue Nov. 10 505 
receivable from Star Mfg. 


$31,164 G/L 
F 


@ Per minutes of meeting of Board of Directors 1/10/16. Schweppe reappointed general counsel with retainer. 
@ Attorney’s letter requested. Received 1/23/17. All matters listed are covered therein. Letters filed in General Section of audit file. 


6) Attorney’s letter not requested. Per phone conversation with Mr. Hall 1/21/17, he rarely represents the company, and his services have been 
limited to collection problems. The Star Mfg. matter was closed in October 2016, and he has not been involved in any other matters related to 
the company since that time. 


¢ Examined statement and vouchers F Footed G/L Agreed to general ledger 


copyrights and catalog costs. The allocation of manufacturing overhead between inventory 
and cost of goods sold is an example of a different type of allocation that affects expenses. 

Allocations are important because they determine whether an expenditure is an 
asset or a current period expense. If the client fails to follow accounting standards or 
fails to calculate the allocation correctly, the financial statements can be materially 
misstated. The allocation of expenses such as depreciation of fixed assets and amor- 
tization of copyrights is required because the life of the asset is greater than one year. 
The original cost of the asset is verified at the time of acquisition, but the charge-off 
takes place over several years. 

Other types of allocations directly affecting the financial statements arise because 
the life of a short-lived asset does not expire on the balance sheet date. These may 
include prepaid rent and insurance. Finally, accounting standards require the alloca- 
tion of costs between current period manufacturing expenses and inventory as a 
means of reflecting all costs of making a product. 

In auditing the allocation of expenditures such as prepaid insurance and manufac- 
turing overhead, the two most important considerations are adherence to accounting 
standards and consistency with the preceding period. The two most important audit 
procedures for auditing allocations are tests for overall reasonableness using substan- 
tive analytical procedures and recalculation of the client’s results. 
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Auditors commonly perform these tests as part of the audit of the related asset or 
liability accounts. This may include verifying depreciation expense as part of the audit 
of property, plant, and equipment; testing amortization of patents as part of verifying 
new patents or the disposal of existing ones; and verifying allocations between inven- 
tory and cost of goods sold as part of the audit of inventory. 


CONCEPT CHECK 

I. Distinguish between the evaluation of the adequacy of insurance coverage and the 
verification of prepaid insurance. Explain which is more important in a typical audit. 

2. In verifying accounts payable, it is common to restrict the audit sample to a small portion 
of the population items, whereas in auditing accrued property taxes, it is common to 
verify all transactions for the year. Explain the reason for the difference. 

3. What is meant by the analysis of expense accounts? List four expense accounts that are 
commonly analyzed in audits. 


SUMMARY 


This chapter concludes our discussion of accounts and transactions in the acquisition and 
payment cycle. To adequately audit the numerous accounts associated with this cycle, au- 
ditors need an understanding of key accounts, classes of transactions, business functions, 
documents, and records related to acquisition and payment cycle transactions. Many of 
these accounts—such as accounts payable; property, plant, and equipment; depreciation 
expense; and prepaid expenses—have unique characteristics that affect how the audi- 
tor gathers sufficient appropriate evidence about related account balances. And, finally, 
interrelationships between different audit tests in the acquisition and payment cycle can 
provide a basis for the auditor’s verification of many financial statement accounts. 


ESSENTIAL TERMS 


Accrued liabilities—estimated unpaid ob- 
ligations for services or benefits that have 
been received prior to the balance sheet 
date; common accrued liabilities include ac- 
crued commissions, accrued income taxes, 
accrued payroll, and accrued rent 


Allocation—the division of certain 
expenses, such as depreciation and man- 
ufacturing overhead, among several ex- 
pense accounts 


Expense account analysis—the exami- 
nation of underlying documentation of 


individual transactions and amounts mak- 
ing up the total of an expense account 


Fixed asset master file—a computer file 
containing records for each piece of equip- 
ment and other types of property owned; 
the primary accounting record for manu- 
facturing equipment and other property, 
plant, and equipment accounts 


Insurance register—a record of insur- 
ance policies in force, the expiration date of 
each policy, premium amount and terms, 
and other policy specifics 


REVIEW QUESTIONS 


19-1 (OBJECTIVE 19-1) Identify three asset accounts, three expense accounts, and three 
liability accounts typically associated with acquisition and payment cycle transactions. 


19-2 (OBJECTIVE 19-2) Explain the relationship between substantive tests of transactions for the 
acquisition and payment cycle and tests of details of balances for the verification of property, 
plant, and equipment. Which aspects of property, plant, and equipment are directly affected 
by the tests of controls and substantive tests of transactions and which are not? 

19-3 (OBJECTIVE 19-2) List the assets typically associated with the acquisition and payment 
cycle transactions related to property, plant, and equipment? For each asset, list the 
expenses and liabilities commonly associated with that asset. 
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19-4 (OBJECTIVE 19-2) A number of specific accounts are typically grouped into the prop- 
erty, plant, and equipment account. List the various accounts typically classified under the 
account generally referred to as property, plant, and equipment. 


19-5 (OBJECTIVE 19-2) Describe factors the auditor should consider in developing an expectation 
for depreciation while performing a substantive analytical procedure for depreciation expense. 


19-6 (OBJECTIVE 19-3) What is an insurance register and how does an insurance register assist 
the auditor in determining the appropriate amount of prepaid insurance on the balance sheet? 


19-7 (OBJECTIVE 19-3) Explain why the audit of prepaid insurance should ordinarily take a rel- 
atively small amount of audit time if the client’s assessed control risk for acquisitions is low. 


19-8 (OBJECTIVE 19-3) What are the major differences between the audit of prepaid expenses 
and other asset accounts such as accounts receivable or property, plant, and equipment? 


19-9 (OBJECTIVE 19-4) Explain the relationship between accrued rent and substantive tests 
of transactions for the acquisition and payment cycle. Which aspects of accrued rent are 
not verified as part of the substantive tests of transactions? 


19-10 (OBJECTIVE 19-4) What is an accrued liability? List some common examples of 
accrued liabilities recorded by companies. 


19-11 (OBJECTIVE 19-5) List three expense accounts that are tested as part of the acquisition 
and payment cycle or the payroll and personnel cycle. List three expense accounts that are 
not directly verified as part of the cycle. 

19-12 (OBJECTIVE 19-5) Explain how expense account analysis relates to the tests of controls 
and substantive tests of transactions that the auditor has already completed for the acqui- 
sition and payment cycle. 

19-13 (OBJECTIVES 19-2, 19-5) How will the approach for verifying repair expense differ from 
that used to audit depreciation expense? Why will the approach be different? 

19-14 (OBJECTIVE 19-5) What two accounting concepts are essential when considering the 
audit of income and expense accounts? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


19-15 (OBJECTIVE 19-2) The following questions concern internal controls in the acquisition 
and payment cycle. Choose the best response. 


a. Which of the following controls will most likely justify a reduced assessed level of 

control risk for the existence assertion for equipment? 

(1) Internal auditors periodically select equipment items in the fixed assets master 
file and locate the related equipment on company premises. 

(2) Department heads are asked to provide information to the accounting depart- 
ment each quarter about any equipment no longer in use or somewhat damaged. 

(3) All contracts of equipment purchases are reviewed by both the controller and 
attorney to verify that legal title transfers to the client and that none represent 
operating leases. 

(4) As part of quarterly and annual inventory physical counts, factory equipment is 
listed and subsequently reconciled to the fixed asset master file. 


b. Equipment acquisitions that are misclassified as maintenance expense most likely 
would be detected by an internal control that provides for 
(1) segregation of duties of employees in the accounts payable department. 
2) authorization by the board of directors of significant equipment acquisitions. 
3) investigations of variances within a formal budgeting system. 
4) independent verification of invoices for disbursements recorded as equipment ac- 
quisitions. 


a 


c. Which of the following questions is an auditor least likely to include on an internal con- 
trol questionnaire concerning the initiation and execution of equipment transactions? 
(1) Are requests for major repairs approved at a higher level than the department 

initiating the request? 
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(2) Are prenumbered purchase orders used for equipment and periodically account- 
ed for? 

(3) Are requests for purchases of equipment reviewed for consideration of soliciting 
competitive bids? 

(4) Are procedures in place to monitor and properly restrict access to equipment? 


19-16 (OBJECTIVES 19-2, 19-3) The following questions concern the audit of asset accounts in 
the acquisition and payment cycle. Choose the best response. 


a. In testing for unrecorded disposals of equipment, an auditor most likely will 

(1) select items of equipment from the accounting records and then locate them dur- 
ing the plant tour. 

(2) compare depreciation journal entries with similar prior-year entries in search of 
fully depreciated equipment. 

(3) inspect items of equipment observed during the plant tour and then trace them 
to the equipment master file. 

(4) scan the general journal for unusual equipment additions and excessive debits to 
repairs and maintenance expense. 


b. Which of the following analytical procedure results might suggest that certain repairs 

and maintenance expenses have been inappropriately capitalized? 

(1) The ratio of additions to equipment divided by the beginning balance in the equip- 
ment account is significantly lower than the same ratio from the prior three years. 

(2) The balance in the repairs and maintenance expense account is noticeably lower 
than amounts recorded in the past several years. 

(3) The balance in the gross equipment account has decreased this year compared to 
the prior year. 

(4) The ratio of depreciation expense divided by gross equipment is higher in the cur- 
rent year compared to prior years. 


c. Inconnection with the audit of the prepaid insurance account, which of the following 
procedures is usually not performed by the auditor? 
(1) Recompute the portion of the premium that expired during the year. 
(2) Prepare excerpts of the insurance policies for audit documentation. 
(3) Confirm premium rates with an independent insurance broker. 
(4) Examine support for premium payments. 


19-17 (OBJECTIVES 19-2, 19-5) The following questions concern the audit of income and ex- 
pense accounts. Choose the best response. 


a. The auditor may note that annual depreciation expense is too low for a class of assets 
by noting 
(1) insured values greatly in excess of carrying amounts. 
(2) large numbers of fully depreciated assets are still in use. 
(3) continuous trade-ins of relatively new assets. 
(4) excessive recurring losses on assets retired. 


b. An auditor’s principal objective in analyzing repairs and maintenance expense 
accounts is to 
(1) determine that all obsolete property, plant, and equipment assets were written off 

before the year-end. 

(2) verify that all recorded property, plant, and equipment assets actually exist. 

(3) discover expenditures that were expensed but should have been capitalized. 

(4) identify property, plant, and equipment assets that cannot be repaired and should 

be written off. 


c. Which of the following comparisons will be most useful to an auditor in auditing an 
entity’s income and expense accounts? 
(1) Prior year accounts payable to current year accounts payable 

(2) Prior year payroll expense to budgeted current year payroll expense 

( 

( 
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3) Current year revenue to budgeted current year revenue 
4) Current year warranty expense to current year contingent liabilities 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Editio Ira’ EAchIGD MRIaST PONG. Pid GubsShSdACFHEL ACQUISITION AND PAYMENT CYCLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-07-30 00:57:56. 


DISCUSSION QUESTIONS AND PROBLEMS 


Required 


19-18 (OBJECTIVE 19-2) The following is a list of balance-related audit objectives related to 
equipment additions: 


1, 


NDWDW BW DY 


Current year acquisitions in the acquisitions schedule agree with related master file 
amounts, and the total agrees with the general ledger (detail tie-in). 


. Current year acquisitions as listed exist (existence). 

. Existing acquisitions are recorded (completeness). 

. Current year acquisitions as listed are accurate (accuracy). 

. Current year acquisitions as listed are correctly classified (classification). 
. Current year acquisitions are recorded in the correct period (cutoff). 

. The client has rights to current year acquisitions (rights). 


. For each of the audit objectives listed above, identify one or more of the common tests 


of details of balances procedures used in audits of equipment additions. 


. Comment on the use of each test of details of balance procedures. 
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19-19 (OBJECTIVE 19-2) In the audit of Fluor, a construction and engineering company 
based in South Africa, your concern is whether property, plant, and equipment disposals 
are appropriately recorded. Your audit includes the following steps: 

1. You review the client’s schedule of recorded disposals, mainly consisting of disposal 
of heavy equipment. 

2. Next, you confirm that the disposals listed in the client’s records are consistent with 
entries made to the related accounts. These include appropriate recording of depre- 
ciation expense for the equipment up to the time of disposal, removing the equip- 
ment from the PP&E ledger, removing the associated accumulated depreciation at 
the time of disposal, recording and cash received from the sale of used equipment, 
and proper recording of gains or losses on the income statement. 


a. Comment on the appropriateness of relying on the client’s schedule of recorded disposals Required 
when auditing current year equipment disposals. 

b. What considerations should be taken when tying the transactions shown on the cli- 
ent’s schedule of recorded disposals to the related journals and ledgers? 

c. For additional steps are necessary in the audit of current year disposals? 


19-20 (OBJECTIVES 19-1, 19-2, 19-3, 19-5) The following audit procedures were planned by Linda 

King, CPA, in the audit of the acquisition and payment cycle for Cooley Products, Inc.: 

1. Review the acquisitions journal for large and unusual transactions. 

2. When the check signer’s assistant writes “paid” on supporting documents, watch 
whether she does it after the documents are reviewed and the checks are signed. 

3. Examine invoices and related shipping documents included in the client’s unpaid 
invoice file at the audit report date to determine whether they were recorded in the 
appropriate accounting period and at the correct amounts. 

4. For 20 nontangible acquisitions, select a sample of line items from the acquisitions 
journal and trace each to related vendors’ invoices. Examine whether each transac- 
tion appears to be a legitimate expenditure for the client and that each was approved 
and recorded at the correct amount and date in the journal and charged to the cor- 
rect account per the chart of accounts. 

. Refoot the acquisitions journal for one month and trace all totals to the general ledger. 

6. Send letters to several vendors, including a few for which the recorded accounts 
payable balance is zero, requesting them to inform us of their balance due from 

Cooley. Ask the controller to sign the letter. 

7. Examine a sample of receiving report numbers and determine whether each one 
has an initial indicating that it was recorded as an account payable. 

8. Select a sample of equipment listed on fixed asset master files and inspect the asset 
to determine that it exists and to determine its condition. 

9. Calculate the ratio of equipment repairs and maintenance to total equipment and 
compare with previous years. 

10. Obtain from the client a written statement that all mortgages payable have been in- 
cluded in the current period financial statements and have been accurately recorded 
and that the collateral for each is included in the footnotes. 

11. Select a sample of cancelled checks and trace each one to the cash disbursements 
journal, comparing the name, date, and amount. 

12. Recalculate the portion of insurance premiums on the client’s prepaid insurance 
schedule that is applicable to future periods. 


wa 


a. For each procedure, identify the type of evidence being used. Required 
b. For each procedure, identify whether it is a substantive analytical procedure, a test 
of control, a substantive test of transactions, or a test of details of balances. 
c. For each test of control or substantive test of transactions, identify the transaction- 
related audit objective(s) being met. 
d. For each test of details of balances, identify the balance-related audit objective(s) be- 
ing met. 
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Required 


Required 


Required 


Required 


19-21 (OBJECTIVE 19-2) Your client, Edgartown Corporation, prepared the following sched- 
ule of land, buildings, and equipment for the audit of financial statements for the year 
ended December 31, 2016: 


W/1/16 12/31/16 

Account Description Beginning Balance Additions Disposals Ending Balance 
Land $ 7,500,000 — — $ 7,500,000 
Building—Office 27,000,000 $250,000 a 27,250,000 
Production Equipment 2,345,000 178,223 $34,779 2,488,444 
Office Equipment 1,765,881 72,517 55,339 1,783,059 
IT Hardware 216,542 — 19,098 197,444 

Total $38,827,423 $500,740 $109,216 $39,218,947 


a. What type of evidence would you examine to support the beginning balances in the 

accounts? 

b. What types of evidence would you use to support the additions to each account? 
How might the sources of evidence differ for additions to the building account and 
the equipment accounts? 

. What types of evidence would you examine to support equipment disposals? 

. What procedures would you perform related to the ending balances in the accounts? 

e. In the audit of property, plant, and equipment accounts, auditors should consider 

whether there are any implications to other accounts in the audit. 
(1) What other accounts might be impacted by the additions of buildings and equipment? 
(2) What other accounts might be impacted by disposals of equipment? 

19-22 (OBJECTIVE 19-4) Payroll represents a significant expense for most companies. Also, 

due to differences in timing, payment of payroll often does not coincide with the fiscal 

year-end date. As a result, a number of liabilities related to payroll needs to be accrued. 

These accrued liabilities include: 

¢ Accrued payroll 

* Accrued payroll taxes 

* Accrued commissions 

a. Define each of the accrued liabilities related to payroll listed above. 

b. Indicate some of the factors that the audit of the listed accrued liabilities should focus on. 
19-23 (OBJECTIVE 19-4) Your audit of property taxes for Jollibee, a fast food chain based in the 
Philippines, focuses on three audit objectives: 

1. Whether the general ledger includes all of the property taxes that should be accrued 

as of the balance sheet date (completeness). 

2. Whether the correct amount of property taxes has been accrued (accuracy). 

3. Whether the accrued property taxes have been applied to the correct accounts 

(classification). 

Explain the audit procedures used to verify the property taxes of Jollibee based on the 

three objectives listed above. 

19-24 (OBJECTIVE 19-5) The audit of income and expense accounts to ensure an accurate 

income is highly inter-related with the audit of a number of balance sheet accounts. For exam- 

ple, several balance sheet accounts that are directly tied to income or expense accounts include: 
¢ Inventory 

Accounts receivable 

Property, plant, and equipment 

Long term investments 

Notes and bonds payable. 


ao 


a. List the income statement items likely associated with each of the balance sheet 
accounts listed above. 

b. When auditing the income and expense accounts, what are some of the substantive 
analytical procedures used? 

c. For the substantive analytical procedures listed in your answer to part (b), explain 
what possible misstatement each procedure is designed to discover. 
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Ward Publishing Company—Part III (See Case 18-30 for Parts I and Il) 

19-25 (OBJECTIVES 19-1, 19-2, 19-5) Examine the tests of controls and substantive tests of 
transactions results, including the sampling application in Case 18-30 (pp. 634-635), for 
Ward Publishing Company. Assume that you have already reached several conclusions. 


1. 


2. 
3. 


Your tests of details of balances for accounts payable are completed, and you found 
no exceptions. 

Acceptable audit risk for property, plant, and equipment and all expenses is high. 
Inherent risk for property, plant, and equipment is high because in the current year, 
the client has acquired a material amount of new and used printing equipment and has 
traded in older equipment. Some of the new equipment was ineffective and returned; 
an allowance was received on others. Inherent risk for expense accounts is low. 


. New computer equipment and some printing equipment are being leased. The client 


has never leased equipment before. 


. Substantive analytical procedures for property, plant, and equipment are inconclu- 


sive because of the large increases in acquisition and disposal activity. 


. Substantive analytical procedures show that repairs, maintenance, and small tools 


expenses have increased materially, both in absolute terms and as a percentage of 
sales. Two other expenses have also materially increased, and one has materially 
decreased. 


. In examining the sample for tests of controls and substantive tests of transactions, 


you observe that no sample items included any property, plant, and equipment or 
lease transactions. 


. Explain the relationship between the tests of controls and substantive tests of transac- 


tions results in Case 18-30 and the audit of property, plant, and equipment and leases. 


. How will the tests of controls and substantive tests of transactions results and your 


conclusions (1 through 7) affect your planned tests of details for property, plant, and 
equipment and leases? State your conclusions for each balance-related audit objec- 
tive. Do not write an audit program. 


. Explain the relationship between the tests of controls and substantive tests of transac- 


tions results in Case 18-30 and the audit of expenses. 


. How will the tests of controls and substantive tests of transactions results and your 


conclusions (1 through 7) affect your planned tests of details of balances for expenses? 
Do not write an audit program. 


19-26 (OBJECTIVE 19-2) You are doing the audit of the UTE Corporation for the year ended 
December 31, 2016. The following schedule for the property, plant, and equipment and 
related allowance for depreciation accounts has been prepared by the client. You have 


compared the opening balances with the prior year’s audit documentation. 


UTE Corporation Analysis of Property, Plant, and Equipment 
and Related Allowance for Depreciation Accounts 
Year Ended December 31, 2016 


Final Per Books 
Description 12/31/15 Additions Retirements 12/31/16 
Assets 
Land $ 225,000 $50,000 $ 275,000 
Buildings 1,200,000 175,000 1,375,000 


Machinery and equipment 3,850,000 404,000 260,000 3,994,000 


$5,275,000 $629,000 $260,000 $5,644,000 
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Allowance for 

Depreciation 
Building $ 600,000 $ 51,500 $ 651,500 
Machinery and equipment 1,732,500 392,200 2,124,700 
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The following information is found during your audit: 

1. All equipment is depreciated on the straight-line basis (no salvage value taken into 
consideration) based on the following estimated lives: buildings, 25 years; all other 
items, 10 years. The corporation’s policy is to take one-half year’s depreciation on all 
asset acquisitions and disposals during the year. 

2. On April 1, the corporation entered into a 10-year lease contract for a die-casting ma- 
chine with annual rentals of $50,000, payable in advance every April 1. The lease is 
cancelable by either party (60 days’ written notice is required), and there is no option 
to renew the lease or buy the equipment at the end of the lease. The estimated useful 
life of the machine is 10 years with no salvage value. The corporation recorded the 
die-casting machine in the machinery and equipment account at $404,000, the pres- 
ent value at the date of the lease, and $20,200, applicable to the machine, has been 
included in depreciation expense for the year. 

3. The corporation completed the construction of a wing on the plant building on June 
30. The useful life of the building was not extended by this addition. The lowest con- 
struction bid received was $175,000, the amount recorded in the buildings account. 
Company personnel were used to construct the addition at a cost of $160,000 (mate- 
rials, $75,000; labor, $55,000; and overhead, $30,000). 

4. On August 18, $50,000 was paid for paving and fencing a portion of land owned 
by the corporation and used as a parking lot for employees. The expenditure was 
charged to the land account. 

5. The amount shown in the machinery and equipment asset retirement column represents 
cash received on September 5, upon disposal of a machine acquired in July 2012 for $480,000. 
The bookkeeper recorded depreciation expense of $35,000 on this machine in 2016. 

6. Crux City donated land and building appraised at $100,000 and $400,000, respec- 
tively, to the UTE Corporation for a plant. On September 1, the corporation began 
operating the plant. Because no costs were involved, the bookkeeper made no entry 
for the foregoing transaction. 


Required a. In addition to inquiry of the client, explain how you would have found each of these 
six items during the audit. 
b. Prepare the adjusting journal entries with supporting computations that you would 
suggest at December 31, 2016, to adjust the accounts for the preceding transactions. 
Disregard income tax implications.” 


19-27 (OBJECTIVE 19-5) Your audit of Singapore Taxi Company is focused on the relation be- 
tween the income statement and key balance sheet accounts. The tests of controls and sub- 
stantive tests of transaction determined that the control risk is relatively low. As a result, your 
audit tests of details of account balances for expenses are restricted to those accounts with a 
relatively high likelihood of material misstatement. In particular, you selected the following 
situations to audit: 

* Singapore Taxi Company previously recorded lease expense under operating leases. 
For the current period, Singapore Taxi Company indicates that it has entered into long- 
term leases for office space that cover a substantial portion of the asset’s useful life and 
fair market value, so no longer reports lease expense, but uses capital lease treatment. 

* Due to the increase traffic accidents in Singapore, Singapore Taxi Company recorded 
a large legal expense and also increased its provision for insurance expense. 


Required a. What are the primary concerns in the audit of the expenses related to leases and 
insurance? 
b. List and explain the analytical procedures or tests of detailed balanced related to lease 
expenses and insurance you plan to use in the audit of Singapore Taxi Company. 


19-28 (OBJECTIVE 19-2) This problem requires you to research the disclosure require- 


LN 
oP» ments for fixed assets using the FASB Codification at www.fasb.org. Access to the FASB 
? 2” Codification requires that your educational institution be enrolled in the FASB academic 


access program, or provides access to the codification through a third-party provider. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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| Paste 


a. Identify the section in the FASB Codification that addresses property, plant, and Required 


equipment, and the subsection that provides disclosure requirements. 


b. Indicate the disclosures for fixed assets that should be made in the financial state- 


ments or footnotes to the statements. 


c. The section on disclosure also includes requirements for impairment or disposal of 
long-lived assets. What is the definition of impairment? (Hover your cursor over the 
highlighted term to see the glossary definition.) 

d. Identify the information that must be disclosed in the notes to the financial state- 
ments for the period in which an impairment loss is recognized. 
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Account 


Sales 

Sales returns and allowances 
Gain on sale of assets 
Interest income 
Miscellaneous income 


Cost of goods sold: 
Beginning inventory 
Purchases 
Freight in 
Purchase returns 
Factory wages 
Factory benefits 
Factory overhead 
Factory depreciation 
Ending inventory 


Selling, general, and administrative: 


Executive salaries 
Executive benefits 
Office salaries 

Office benefits 

Travel and entertainment 
Advertising 

Other sales expense 
Stationery and supplies 
Postage 

Telephone 

Dues and memberships 
Rent 

Legal fees 

Accounting fees 
Depreciation, SG&A 
Bad debt expense 
Insurance 

Interest expense 
Other expense 


Income before taxes 
Income taxes 
Net income 


Vernal Manufacturing Co. 
Income Statement Accounts 


12/31/16 

Per G/L Per GIL Steuee 
12/31/15 12/31/16 Amount Percent 
$8,467,312 $9,845,231 $1,377,919 16.3 
(64,895) (243,561) (178,666) = 275.3 
43,222 (143,200) (186,422) —431.3 
243 223 (20) 8.2 
6,365 25,478 LOS 30033 
8,452,247 9,484,171 1,031,924 12.2 
1,487,666 1,389,034 (98,632) -6.6 
2,564,45 | 3,430,865 866,414 33.8 
45,332 65,782 20,450 45.1 
(76,310) (57,643) 18,667 24.5 
986,755 1,145,467 158,712 16.1 
197,652 201,343 3,691 ES) 
478,659 490,765 12,106 2.5 
344,112 314,553 (29,559) -8.6 
(1,389,034) (2,156,003) (766,969) 55.2 
4,639,283 4,824,163 184,880 4.0 
167,459 174,562 7,103 4.2 
32,321 34,488 2,167 6.7 
95,675 98,540 2,865 3.0 
19,888 21,778 1,890 9.5 
56,845 75,583 18,738 33.0 
130,878 156,680 25,802 19.7 
34,880 42,334 7,454 21.4 
38,221 2904 (16,667) 43.6 
14,657 18,756 4,099 28.0 
36,551 67,822 31,271 85.6 
3,644 4,522 878 24.1 
15,607 15,607 0 0.0 
14,154 35,460 21,306 150.5 
16,700 18,650 1,950 11.7 
73,450 69,500 (3,950) 54. 
166,454 143,871 (22'583) 3:6 
44,321 45,702 1,381 eh 
120,432 137,922 17,490 14.5 
5,455 28,762 23307 ee A2U;3 
1,087,592 1,212,093 124,501 11.4 
5,726,875 6,036,256 309,381 Sa 
23125; 311.2, 3,447,919 722,543 26.5 
926,626 1,020,600 93,974 10.1 
$1,798,746 $2,427,315 $ 628,569 34.9 


Explanations by Client 


Sales increase due to two new customers who 
account for 20% of volume. Larger returns 
due to need to cement relations with these 
customers. 

Trade-in of several sales cars that needed replacement. 


Increase in these accounts due to increased volume 
with new customers as indicated above. 


Inventory being held for new customers. 


Normal salary increases. 


Sales and promotional expenses increased in 
an attempt to obtain new major customers. 
Two obtained and program will continue. 

Probably a misclassification; will investigate. 

Normal increase. 

Normal increase. 

Normal increase. 


Timing of billing for fees. 

Normal increase. 

Normal change. 

Haven't reviewed yet for the current year. 
Normal change. 

Normal change. 

Amount not material. 


Increase due to increased income before tax. 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


20-1 


20-2 


20-3 


20-4 


Identify the accounts and 
transactions in the payroll 
and personnel cycle. 
Describe the business 
functions and the related 
documents and records in 
the payroll and personnel cycle. 
Understand internal control 
and design and perform tests 
of controls and substantive 
tests of transactions for the 
payroll and personnel cycle. 
Design and perform substan- 
tive analytical procedures and 
tests of details for accounts 
in the payroll and personnel 
cycle. 


AUDIT OF THE PAYROLL 
AND PERSONNEL CYCLE 


The Staff Auditor Must Never “Simply Follow Orders” 


During Leslie Davenport’s first “busy season,” she worked on the audit of Sysco, Inc., a software 
development company. Her immediate supervisor on the audit was Bob Stith, who had joined 
the firm three years earlier and worked on the Sysco audit the previous year. 


Stith drafted an audit program for capitalized software development costs, which Davenport 
was asked to complete. She knew from her coursework that costs cannot be capitalized 
until technological feasibility 
has been established, either 
through detailed program de- 
sign or product design and 
the completion of a working 
model, confirmed by testing. 


Stith told Davenport to ver- 
ify the payroll expenses that 
were a significant part of the 
development cost and to talk 
to Jack Smart, Sysco’s control- 
ler, about whether the projects with capitalized costs had reached the technological feasibility 
stage. Davenport tested the payroll costs and found no misstatements. She also made inquiries 
of Smart and was told that the appropriate stage was reached. Davenport documented Smart’s 
representation in the audit files and went on to the next area assigned to her. 


Later, Davenport began to have second thoughts. She doubted whether Smart was the most 
knowledgeable person about the technical status of software projects. Davenport decided to 
talk to the responsible software engineers about one of the projects. She intended to clear this 
with Stith, but he was at another client’s office, so she proceeded on her own initiative. An 
engineer on the first project told her that he was almost finished with a working model but had 
not tested it yet. She inquired about another project and discovered the same thing. Davenport 
documented these findings, which she discussed with Stith as soon as he returned to the job. 
Based on her discussion and his review of the documentation, he told her the following: 


“Listen, Leslie, | told you to just talk to Jack. You shouldn’t do procedures that you're not instructed 
to do. | want you to destroy this schedule and don’t record the wasted time. We're under a lot of 
time pressure and we can’t bill Sysco for procedures that aren’t necessary. There’s nothing wrong 
with the capitalized software development costs. The fact that they have working products that 
they're selling indicates technological feasibility was reached.” 


Davenport was extremely distressed with this reaction from Stith but followed his instructions. 
The following fall, the SEC conducted an investigation of Sysco and found, among other things, 
that they had overstated capitalized software development costs. The SEC brought an action 
against both the management of Sysco and its auditors. 
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The payroll and personnel cycle involves the employment and payment of all employees. Labor is an important 
consideration in the valuation of inventory in manufacturing, construction, and other industries. As the story in- 
volving Leslie Davenport and the audit of Sysco, Inc., demonstrates, improper valuation and allocation of labor can 
result in a material misstatement of net income. Payroll is also an area in which company resources can be wasted 
because of inefficiency or stolen through fraud. 

As with the sales and collection and acquisition and payment cycles, the audit of the payroll and personnel cycle 
includes obtaining an understanding of internal control, assessing control risk, tests of controls and substantive 
tests of transactions, substantive analytical procedures, and tests of details of balances. In a typical audit, the main 
differences between the payroll and personnel cycle and other cycles include: 


° There is only one class of transactions for payroll. Most cycles include at least two classes of transactions. For exam- 
ple, the sales and collection cycle includes both sales and cash receipts transactions, and often includes sales 
returns and charge-off of uncollectible accounts. Payroll has only one class because the receipt of services 
from employees and the payment for those services through payroll usually occur within a short time period. 

* Transactions are generally far more significant than related balance sheet accounts. Payroll-related accounts such as ac- 
crued payroll and withheld taxes are usually small compared to the total amount of transactions for the year. 

¢ Internal controls over payroll are effective for almost all companies, even small ones. Strict federal and state regulations 
encourage effective controls for withholding and paying payroll taxes. Also, employee morale problems can 
occur if employees are not paid or are underpaid. 


Because of these three characteristics, auditors typically emphasize tests of controls, substantive tests of transac- 
tions, and substantive analytical procedures in the audit of payroll. Tests of details of balances take only a few minutes 
for most payroll-related accounts. Before we discuss the tests in the cycle, let’s review the transactions and account 
balances, as well as the documents and records used in the payroll and personnel cycle for a typical company. 


ACCOUNTS AND TRANSACTIONS IN THE 
PAYROLL AND PERSONNEL CYCLE 


The overall objective in the audit of the payroll and personnel cycle is, of course, to ‘OBJECTIVE 20-1 


evaluate whether the account balances affected by the cycle are fairly stated in accor- 4, tiedie ena 
dance with applicable accounting standards. transactions in the payroll 
Typical accounts in the payroll and personnel cycle are shown in Figure 20-1 and personnel cycle. 

(p. 688). T accounts are used to illustrate the way in which accounting information 

flows through the various accounts in the payroll and personnel cycle. In most sys- 

tems, the accrued wages and salaries account is used only at the end of an accounting 

period. Throughout the period, expenses are charged when the employees are actually 

paid rather than when the labor costs are incurred. Accruals for labor are recorded by 

adjusting entries at the end of the period for any earned-but-unpaid labor costs. 


BUSINESS FUNCTIONS IN THE CYCLE 
AND RELATED DOCUMENTS AND RECORDS 


The payroll and personnel cycle begins with hiring employees and ends with pay- ‘OBJECTIVE 20-200 


ing them for the services they performed and the government and other institutions po. hibe the business functions 
for withheld and accrued payroll taxes and benefits. In between, the cycle involves and the related documents and 
obtaining services from employees consistent with company objectives, and properly __ records in the payroll and per- 
accounting for the services. sonnel cycle. 

Turn to Table 20-1 on page 689. The third column identifies the four business func- 
tions in a typical payroll and personnel cycle and illustrates the relationships among 
the business functions, classes of transactions, accounts, and documents and records. 
Auditors must understand the business functions and documents and records before they 
can assess control risk and design tests of controls and substantive tests of transactions. 
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FIGURE 20-| Accounts in the Payroll and Personnel Cycle 


Accrued wages, 
salaries, bonuses, 
and commissions 


Beginning balance 
Payment 


Earned wages, salaries, etc. 


Cash in bank Direct labor® 


Payment for Ending balance 


salaries 


Payment for 


payroll taxes Withheld income taxes 


and other deductions 


Beginning balance 


Payment | Payroll withholding 


Ending balance 


Accrued payroll 
tax expense 


Beginning balance 
Payment Payroll tax 


Payroll tax expense 
rey 


*Separate operating accounts for payroll also normally include officers’ salaries and bonuses, office 


Ending balance 


salaries, sales salaries and commissions, and indirect manufacturing labor. These accounts have the 
same relationship to accrued wages and withheld taxes and other deductions that is shown for 
direct labor. 


The human resources department provides an independent source for interview- 
ing and hiring qualified personnel. The department is also an independent source 
of records for the internal verification of wage information, including additions and 
deletions from the payroll and changes in wages and deductions. 


Human Resource Records Human resource records include such data as the date 
of employment, personnel investigations, rates of pay, authorized deductions, perfor- 
mance evaluations, and termination of employment. 


Deduction Authorization Employees may submit a form or make online selections that 
authorize payroll deductions, including the number of exemptions for withholding income 
taxes, 401(K) and other retirement savings plans, health insurance, and union dues. 


Rate Authorization A form or other electronic record is used to authorize the rate of 
pay. The source of the information is a labor contract, authorization by management, 
or in the case of officers, authorization from the board of directors. 


Timekeeping and payroll preparation are important in the audit of payroll because 
they directly affect payroll expense for each period. Adequate controls are necessary 
to prevent misstatements in the following four activities: 


Prepare time records by employees 

¢ Summarize and calculate gross pay, deductions, and net pay 
¢ Payment of payroll 

¢ Prepare payroll records 
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TABLE 20-1 Classes of Transactions, Accounts, Business Functions, and Related 
- Documents and Records for the Payroll and Personnel Cycle 
Class of 


Transactions Accounts Business Functions Documents and Records 


Payroll Payroll cash Human resources and employment Human resource records 
All payroll expense accounts Deduction authorization form 
All payroll withholding accounts Rate authorization form 


All payroll accrual accounts 


Timekeeping and payroll preparation Time record 
Job time ticket 
Payroll transaction file 
Payroll journal or listing 
Payroll master file 


Payment of payroll Payroll direct deposit or check 


Payroll bank account reconciliation 


Preparation of payroll tax returns and W-2 form 
payment of taxes Payroll tax returns 


Time Record The time record is a document indicating the time the hourly em- 
ployee started and stopped working each day and the number of hours the employee 
worked. Time records may be in paper or electronic form, and they may be prepared 
automatically by time clocks or identification card readers. In many environments, 
especially retailers, employees enter arrival and departure times using point-of-sale 
machines that capture time record information daily. In other environments, time 
records may be submitted weekly. 

Salaried or exempt employees usually do not complete time records. They may be 
required to complete time reports to be compensated for overtime, vacation, or sick days. 


Job Time Ticket The job time ticket is a form indicating which jobs an employee 
worked on during a given time period. This form is used only when an employee works 
on different jobs or in different departments. Job time tickets are often done electronically 
by atime and expense reporting system. 


Payroll Transaction File This computer-generated file includes all payroll transac- 
tions processed by the accounting system for a period, such as a day, week, or month. 
The file contains all information entered into the system and information for each 
transaction, such as employee name and identification number, date, gross and 
net pay, various withholding amounts, and account classification or classifications. 
Depending on the company’s needs, the information on the payroll transaction file is 
used for a variety of records, listings, and reports, such as the payroll journal, payroll 
master file, and payroll bank reconciliation. 


Payroll Journal or Listing This report is generated from the payroll transaction file 
and typically includes the employee name, date, gross and net payroll amounts, with- 
holding amounts, and account classification or classifications for each transaction. 
The same transactions included in the journal or listing are also posted simultane- 
ously to the general ledger and to the payroll master file. 


Payroll Master File The payroll master file is a computer file used for recording 
payroll transactions for each employee and maintaining total employee wages paid 
for the year to date. The record for each employee includes gross pay for each payroll 
period, deductions from gross pay, net pay, check number, and date. This master file is 
updated from payroll transaction files. The total of the individual employee earnings 
in the master file equals the total balance of gross payroll in various general ledger 
accounts. 
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Payment of Payroll 


Preparation of Payroll 
Tax Returns and 
Payment of Taxes 


Understand internal control 

and design and perform tests of 
controls and substantive tests of 
transactions for the payroll and 
personnel cycle. 
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The approval and distribution of payroll must be carefully controlled to prevent theft. 
To increase control, payroll disbursements are generally processed separately from 
other disbursements. 


Payment of Payroll Payments are issued to employees in exchange for services 
performed. Payments may be made by check, but are usually deposited directly into 
employees’ individual bank accounts. The amount paid is the gross pay less taxes and 
other deductions withheld. 


Payroll Bank Account Reconciliation An independent bank reconciliation is impor- 
tant for all cash accounts, including payroll, for finding errors and fraud. An imprest 
payroll account is a separate payroll account in which a small balance is maintained. 
The exact amount of each net payroll is transferred by check or electronic funds trans- 
fer from the general account to the imprest account immediately before distribution 
of the payroll. The imprest account limits the client’s exposure to payroll fraud and 
separates routine payroll expenditures from other expenditures. It also simplifies rec- 
onciliation of the payroll bank account. 


Federal and state payroll laws require the timely preparation and submission of pay- 
roll tax returns. Most computerized payroll systems prepare payroll tax returns using 
information on the payroll transaction and master files. To prevent misstatements 
and potential liability for taxes and penalties, a competent individual must indepen- 
dently verify the output. 


W-2 Form This is a form sent to each employee that summarizes the employee's 
earning for the calendar year, including gross pay, income taxes withheld, and FICA 
(Social Security) withheld. The same information is also submitted to the Internal 
Revenue Service and state and local tax commissions when applicable. This informa- 
tion is prepared from the payroll master file and is normally computer generated. 


Payroll Tax Returns These are forms submitted to local, state, and federal units of 
government to show payment of withheld taxes and the employer’s tax. The nature and 
due dates of the forms vary depending on the type of taxes. These forms are prepared 
from information on the payroll master file and are usually computer generated. 
Federal withholding and Social Security payments are due semiweekly or monthly, 
depending on the amount of withholding. Most state unemployment taxes are due 
quarterly. 


CONCEPT CHECK 


|. Describe why transactions in the payroll and personnel cycle are generally more signifi- 
cant than payroll-related balance sheet accounts. 


2. Explain the differences in the primary roles performed by human resources, the em- 


ployee’s primary supervisor, and those who oversee the creation of a payroll journal or 
listing and the payroll master file. 


METHODOLOGY FOR DESIGNING TESTS OF CONTROLS 
AND SUBSTANTIVE TESTS OF TRANSACTIONS 


Now that you are familiar with the business functions and related documents and 
records in the payroll and personnel cycle, we will discuss understanding internal 
control, assessing control risk, and designing tests of controls and substantive tests 
of transactions for the cycle. The methodology for designing tests of controls and 
substantive tests of transactions for the payroll and personnel cycle is the same as that 
used in Chapter 14 for the sales and collection cycle and in Chapter 18 for the acqui- 
sition and payment cycle: understand internal control, assess planned control risk, 
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determine the extent of testing of controls, and design tests of controls and substan- 
tive tests of transactions to meet transaction-related audit objectives. 


Internal control for payroll is normally highly structured and well controlled to man- 
age cash disbursed, to minimize employee complaints and dissatisfaction, and to min- 
imize payroll fraud. Because of relatively common payroll concerns from company to 
company, high-quality computerized payroll accounting programs are available. 

Because processing payroll is similar for most organizations, and programs need to 
be modified annually for changes in withholding schedules, companies commonly use 
an outside payroll service for processing payroll. The auditor can often rely on the inter- 
nal controls of the service organization if the service organization’s auditor issues a report 
on the service organization’s internal control, discussed in Chapter 12 (pp. 380-381). 

It is usually not difficult for companies to establish good control in the payroll and 
personnel cycle. For factory and office employees, there are usually a large number of 
relatively homogeneous, small-amount transactions. For executives, there are usually 
fewer payroll transactions, but they are ordinarily consistent in timing and amount. 
Consequently, auditors seldom expect to find exceptions in testing payroll transac- 
tions. Occasionally, control test deviations occur, but most monetary misstatements 
are corrected by internal verification controls or in response to employee complaints. 
Even when there are misstatements, they are rarely material. As a result, control risk is 
often assessed as low for this cycle. 

Key controls in the payroll and personnel cycle are summarized in Table 20-2 
(p. 692). We take a closer look at these controls as we next describe tests of controls 
and substantive tests of transactions for the payroll and personnel cycle. 


Tests of controls and substantive tests of transactions procedures are the most impor- 
tant means of verifying account balances in the payroll and personnel cycle. These 
tests are emphasized because of the lack of independent third-party evidence, such 
as confirmation, for verifying accrued wages, withheld income taxes, accrued payroll 
taxes, and other balance sheet accounts. Furthermore, in most audits, the amounts in 
the balance sheet accounts are small and can be verified with relative ease if the audi- 
tor is confident that payroll transactions are correctly entered into the computer and 
payroll tax returns are correctly prepared. 

Even though tests of controls and substantive tests of transactions are the most 
important parts of testing payroll, tests in this area are usually not extensive. Many 
audits have a minimal risk of material misstatements, even though payroll is often a 
significant part of total expenses. There are three reasons for this: 


1. Employees are likely to complain to management if they are underpaid. 

2. All payroll transactions are typically uniform and uncomplicated. 

3. Payroll transactions are subject to audit by federal and state governments for in- 
come tax withholding, Social Security, and unemployment taxes. 


Following the same approach used in Chapter 14 for tests of sales and cash 
receipts transactions, the internal controls, tests of controls, and substantive tests 
of transactions for each transaction-related audit objective are summarized in Table 
20-2. Again, you should recognize the following: 


* Internal controls vary from company to company; therefore, the auditor must 
identify the controls, significant deficiencies, and material weaknesses for each 
organization. 

* Controls the auditor intends to rely on to reduce assessed control risk must be 
tested with tests of controls. 

¢ If the auditor is reporting on the effectiveness of internal control over financial 
reporting, the level of understanding controls and extent of tests of controls 
must be sufficient to issue an opinion on the effectiveness of internal control 
over financial reporting. 


Understand Internal 
Control and Assess 
Control Risk—Payroll 
and Personnel Cycle 


Design Tests of Controls 


and Substantive Tests of 
Transactions—Payroll 
and Personnel Cycle 
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TABLE 20-2 


Transaction-Related 
Audit Objectives 


Key Internal Controls 


Common Tests of Controls 


Summary of Transaction-Related Audit Objectives, Key Controls, Tests of Controls, 
and Substantive Tests of Transactions for Payroll 


Common Substantive 
Tests of Transactions 


Recorded payroll 
payments are for work 
actually performed by 
existing employees 
(occurrence). 


Time records are approved by 
supervisor. 

Time clock is used to record time. 

Adequate human resource files 
are maintained. 

Employment is authorized. 

There is separation of duties 
among human resources, 
timekeeping, and payroll 
disbursements. 

Only employees existing in 
the computer data files are 
accepted when they are entered. 


Disbursements are authorized 
before issuance. 


Examine time records for indication of 
approvals. 

Examine time records. 

Review human resource policies. 


Examine human resource files. 

Review organization chart, 
discuss with employees, 
and observe duties being 
performed. 

Examine printouts of transactions 
rejected by the computer as 
having nonexistent employee 
numbers. 

Examine payroll records for indication 
of approval. 


Review the payroll journal, general 
ledger, and payroll earnings records 
for large or unusual transactions or 
amounts.* 

Compare cancelled check or direct 
deposit information with human 
resource records. 

Compare cancelled checks with payroll 
journal for name, amount, and date. 

Examine cancelled checks for proper 
endorsement. 


Existing payroll 
transactions 
are recorded 
(completeness). 


Payroll checks are prenumbered and 
accounted for. 

Bank accounts are independently 
reconciled. 


Account for a sequence of payroll 
checks. 

Discuss with employees and observe 
reconciliation. 


Reconcile the disbursements in 
the payroll journal with the 
disbursements on the payroll bank 
statement. 

Prove the bank reconciliation. 


Recorded payroll 
transactions are for 
the amount of time 
actually worked and 
are at the proper pay 
rates; withholdings are 
correctly calculated 
(accuracy). 


Calculations and amounts are 
internally verified. 

Batch totals are compared with 
computer summary reports. 


Wage rate, salary, or commission rate 
is properly authorized. 

Withholdings, including amounts for 
insurance and payroll savings, are 
properly authorized. 


Examine indication of internal 
verification. 

Examine file of batch totals for 
initials of data control clerk; 
compare totals to summary 
reports. 

Examine payroll records for 
indication of authorization. 
Examine authorizations in human 

resource file. 


Recompute hours worked from time 
records. 

Compare pay rates with union 
contract, approval by board of 
directors, or other source. 


Recompute gross pay. 

Check withholdings by referring to tax 
tables and authorization forms in 
human resource file. 

Recompute net pay. 

Compare cancelled check or direct 
deposit with payroll journal for 
amount. 


Payroll transactions 
are correctly included 
in the payroll master 
file and are correctly 
summarized (posting 
and summarization). 


Payroll transactions are 
correctly classified 
(classification). 


Payroll master file contents are 
internally verified. 

Payroll master file totals are 
compared with general 
ledger totals. 


An adequate chart of accounts 
is used. 

Account classifications are 
internally verified. 


Examine indication of internal 
verification. 

Examine initialed summary 
total reports indicating that 
comparisons have been made. 


Review chart of accounts. 


Examine indication of internal 
verification. 


Test clerical accuracy by footing 
the payroll journal and tracing 
postings to the general ledger 
and the payroll master file. 


Compare classification with chart of 
accounts or procedures manual. 

Review time record for employee 
department and job ticket for job 
assignment and trace through to 
labor distribution. 


Payroll transactions are 
recorded on the correct 
dates (timing). 
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Procedures require recording 
transactions as soon as possible 
after the payroll is paid. 

Dates are internally verified. 


Examine procedures manual and 
observe when recording takes 
place. 

Examine indication of internal 
verification. 


Compare date of recorded payment 
in the payroll journal with date on 
cancelled check or direct deposit and 
time record. 

Compare date on check with date the 
check cleared the bank. 


*While this is a type of analytical procedure, it also serves as a substantive test of transaction for the occurrence objective, in addition to other objectives, including 
completeness, accuracy, and timing. 
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¢ Substantive tests of transactions vary depending on the assessed control risk 
and the other considerations of the audit, such as the effect of payroll on 
inventory. 

¢ Tests are not actually performed in the order given in Table 20-2. The tests of 
controls and substantive tests of transactions are combined when appropriate 
and are performed in as convenient a manner as possible, using a performance 
format audit program. 


The purposes of many internal controls and the nature of the tests of controls and 
substantive tests of transactions are apparent for most tests from their descriptions 
in Table 20-2. Next, the key controls for the payroll and personnel cycle for assessing 
control risk are discussed. 


Adequate Separation of Duties Separation of duties is important in the payroll and 
personnel cycle, especially to prevent overpayments and payments to nonexistent em- 
ployees. The payroll function should be kept independent of the human resources de- 
partment, which controls key payroll activities, such as adding and deleting employees. 
Payroll processing should also be separate from the issuance of payroll disbursements. 


Proper Authorization As already noted, only the human resources department 
should be authorized to add and delete employees from the payroll or change pay 
rates and deductions. The number of hours worked by each employee, especially over- 
time, should be authorized by the employee’s supervisor. Approval may be indicated 
electronically or noted on all time records or done on an exception basis only for over- 
time hours. 


Adequate Documents and Records The appropriate documents and records de- 
pend on the nature of the payroll system. Time records are necessary for hourly em- 
ployees but not for salaried employees. For employees compensated based on piece 
rate or other incentive systems, different records are required. For many companies, 
time records must be adequate to accumulate payroll costs by job or assignment. 
Prenumbered documents for recording time are less of a concern for payroll because 
the completeness objective is normally not a concern. 


Physical Control Over Assets and Records Many organizations pay employees 
through direct deposit. In those situations, access to systems used to authorize pay- 
ments should be restricted. When payment is made by check, access to unsigned payroll 
checks should be restricted. Checks should be signed by a responsible employee, and 
payroll should be distributed by someone independent of the payroll and timekeeping 
functions. Any unclaimed checks should be returned for redeposit. If checks are signed 
by a signature machine, access to the machine should be restricted. 


Independent Checks on Performance Payroll computations should be indepen- 
dently verified, including comparison of batch totals to summary reports. A member 
of management or other responsible employee should review the payroll output for 
any obvious misstatements or unusual amounts. When manufacturing labor affects 
inventory valuation or when it is necessary to accumulate costs by job, adequate con- 
trols are necessary to verify the proper assignment of costs. 


Payroll taxes and other withholdings are important in many companies, both because 
the amounts are often material and because the potential liability for failure to timely 
file tax forms can be severe. 


Preparation of Payroll Tax Forms As a part of understanding internal control, the 
auditor should review the preparation of at least one of each type of payroll tax form 
that the client is responsible for filing. The potential for liability for unpaid taxes, pen- 
alty, and interest arises if the client fails to prepare the tax forms correctly. The payroll 
tax forms are for such taxes as federal income and FICA withholding, state and city 
income withholding, and federal and state unemployment. 


Payroll Tax Forms 
and Payments 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, Lime aoterP2Oved BDbK Q@AtBHE PAYROLL AND PERSONNEL CYCLE 709 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-30 00:57:56. 


Inventory and 
Fraudulent Payroll 
Considerations 


CFOs 
PERSONALLY 
LIABLE FOR TAXES 
OF THE ENTITY 
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A detailed reconciliation of the information on the tax forms and the payroll 
records may be necessary when the auditor believes the tax returns may be incorrectly 
prepared. Indications of potential misstatements in the returns include the payment 
of penalties and interest in the past for improper payments, new personnel in the 
payroll department who are responsible for the preparation of the returns, the lack of 
internal verification of the information, and cash flow problems for the client. 


Timely Payment of the Payroll Taxes Withheld and Other Withholdings It is desir- 
able to test whether the client has fulfilled its legal obligation in submitting payments 
for all payroll withholdings as a part of the payroll tests even though the payments are 
usually made from general cash disbursements. The withholdings of concern in these 
tests include taxes, 401(K) and other retirement savings, union dues, insurance, and 
payroll savings. 

Auditors must first determine the client’s requirements for submitting the pay- 
ments, which can be determined by referencing such sources as tax laws, union con- 
tracts, and agreements with employees. Once auditors know the requirements, they 
can easily determine whether the client has made timely payments at correct amounts 
by comparing the subsequent cash disbursement with the payroll records. 


Auditors often extend their payroll audit procedures if payroll significantly affects the 
valuation of inventory, or when the auditor is concerned about the possibility of mate- 
rial fraudulent payroll transactions, such as nonexistent employees or fraudulent hours. 


Relationship Between Payroll and Inventory Valuation When payroll is a significant 
portion of inventory, which is common for manufacturing and construction compa- 
nies, the improper account classification of payroll can materially affect asset valuation 
for accounts such as work in process, finished goods, or construction in process. For 
example, the overhead charged to inventory at the balance sheet date can be overstated 
if the salaries of administrative personnel are inadvertently or intentionally charged 
to indirect manufacturing overhead. Similarly, the valuation of inventory is affected 
if the direct labor cost of individual employees is incorrectly charged to the wrong 
job or process. When jobs are billed on a cost-plus basis, revenue and the valuation of 
inventory are both affected by charging labor to incorrect jobs. 

When labor is a material part of inventory valuation, auditors should emphasize 
testing internal controls over proper classification of payroll transactions. Consistency 
from period to period is essential for classification and can be tested by tracing job 
tickets or other evidence of an employee having worked on a job or process to the 
accounting records that affect inventory valuation. For example, if employees must 
account for all of their time each week by assigning it to individual jobs, a useful test 
is to trace the recorded hours of several employees to the related job-cost records to 


Serving as an organization’s chief financial officer 
can be rewarding but challenging. Along with all the 
responsibilities that come with this role, a detail 
that may surprise a new CFO is the fact that he or 
she may be held personally liable if the business fails 
to pay taxes due, including payroll taxes. State and 
federal laws include provisions stating that “respon- 
sible persons” are personally liable for taxes owed, 
but not paid, to the government. That would include 
taxes withheld by the business as wage withhold- 
ings from employees and sales taxes collected from 
customers. 

Companies that are struggling financially may be 
looking for ways to juggle their limited cash flows. In 
some instances, the company may consider delaying 
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indefinitely the payment of tax obligations with the 
hope of catching up in the near term. Unfortunately, 
in those situations companies often fail, and by the 
time the government begins seeking taxes owed, the 
company has no way to pay. Responsible person li- 
ability laws address that by making individuals, such 
as CFOs, liable for business taxes due if they fail to 
ensure that the taxes are submitted. Executives need 
to implement controls to ensure taxes are properly 
paid, or they may face a huge personal tax bill. 


Sources: |. Arthur R. Rosen and Matthew C. Boch, “CFOs Face 
Liability for Business Taxes,” CFO.com (January 5, 2015) (www 
.cfo.com); 2. Dennis Brager, “Case Finds CFOs Liable for 
Payroll Taxes,” CFO.com (October 4, 2012) (www.cfo.com). 
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make sure each has been correctly recorded. It may also be desirable to trace from 
the job-cost records to time records as a test for nonexistent payroll charges being 
included in inventory. 


Tests for Nonexistent Employees Issuing payroll disbursements to individuals who 
do not work for the company (nonexistent employees) often results from the continu- 
ance of an employee on payroll after employment was terminated. Usually, the person 
committing this type of embezzlement is a payroll clerk, supervisor, fellow employee, 
or perhaps the former employee. Under some systems, a supervisor can clock in 
daily for an employee and approve the time card at the end of the time period. If the 
supervisor also distributes paychecks or if payroll is deposited directly into employees’ 
accounts, considerable opportunity exists for embezzlement. 

To detect embezzlement, auditors may compare the names on cancelled checks 
or the account into which payroll has been deposited with time records and other 
records for authorized signatures and reasonableness of the endorsements. Audit 
software can be used to compare all account numbers into which payroll is deposited 
to search for duplicates. It is also common to scan endorsements on cancelled checks 
for unusual or recurring second endorsements as an indication of a possible fraudu- 
lent check. Examining checks that are recorded as voided is also desirable to make sure 
that they have not been fraudulently used. 

To test for nonexistent employees, auditors can trace selected transactions recorded 
in the payroll journal to the human resources department to determine whether the 
employees were actually employed during the payroll period. If paid by check, the 
endorsement on the cancelled check written out to an employee can be compared with 
the authorized signature on the employee’s withholding authorization forms. 

A procedure that tests for proper handling of terminated employees is to select 
several files from the human resource records for employees who were terminated 
in the current year to determine whether each received termination pay consistent 
with company policy. Continuing payments to terminated employees can be tested 
by using audit software to compare termination dates according to the human 
resources department to payroll disbursement dates in the payroll journal to verify 
the employee is no longer being paid. Naturally, this procedure is not effective if the 
human resources department is not informed of terminations. 

In some cases, the auditor may request a surprise payroll payoff. This is a pro- 
cedure in which all employees must pick up and sign their checks or direct deposit 
payroll records in the presence of a supervisor and the auditor. Any checks that have 
not been claimed must be subject to an extensive investigation to determine whether 
an unclaimed check is fraudulent. Surprise payoff is often expensive, but it may be the 
only likely means of detecting an embezzlement. 


Tests for Fraudulent Hours Fraudulent hours occur when an employee reports 
more time than was actually worked. Because of the lack of available evidence, it 
is usually difficult for an auditor to discover fraudulent hours. One procedure is to 
reconcile the total hours paid according to the payroll records with an independent 
record of the hours worked, such as those often maintained by production control. 
Audit software can be used to test the reasonableness of hours worked or total pay 
for each employee and unusual amounts identified for follow-up testing. Similarly, it 
may be possible to observe an employee clocking in more than one time card under a 
buddy approach. However, it is ordinarily easier for the client to prevent this type of 
embezzlement by adequate controls than for the auditor to detect it. 


Fraudulent Expense Reports Reimbursements for travel and entertainment ex- 
penses are a part of the acquisition and payment cycle; however, auditors often 
perform additional procedures as part of payroll and personnel testing. Management 
falsification of expense reports can be an indicator of disregard for internal controls 
and the potential for fraud in other areas as well. As a result, auditors should pay 
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particular attention to travel and entertainment expense reports for officers and 
directors and should perform testing by verifying proper approval and the business 
purpose of the travel, examining supporting receipts, and determining whether the 
reimbursements are within company guidelines. 


METHODOLOGY FOR DESIGNING SUBSTANTIVE ANALYTICAL 
PROCEDURES AND TESTS OF DETAILS OF BALANCES 


Design and perform substantive 
analytical procedures and tests 
of details for accounts in the 
payroll and personnel cycle. 


Identify Client Business 
Risks Affecting Payroll 
(Phase 1) 


Set Performance 
Materiality and Assess 
Inherent Risk (Phase I) 


Assess Control Risk and 
Perform Related Tests 
(Phases I and II) 


Perform Substantive 
Analytical Procedures 
(Phase III) 
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During the first two phases of the audit, auditors assess control risk and perform tests 
of controls and substantive tests of transactions. After completing these tests and 
assessing the likelihood of misstatement in financial statement accounts in the payroll 
and personnel cycle, the auditor follows the methodology for designing tests of details 
of balances. 

The methodology for deciding the appropriate tests of details of balances for pay- 
roll liability accounts is the same as that followed in Chapter 16 for accounts receiv- 
able and Chapters 18 and 19 for acquisition and payment balance sheet accounts. 
(See Figure 16-1 on p. 525 for the accounts receivable methodology.) 


Significant client business risks affecting payroll are unlikely for most companies. 
However, client business risk may exist for complex compensation arrangements, 
including bonus and stock option plans and other deferred compensation arrange- 
ments. For example, many technology and other companies provide extensive 
stock options as part of their compensation packages for key employees that sig- 
nificantly impact compensation expense and shareholders’ equity. Examples of 
other risks include events such as renegotiation of union contracts and discrimi- 
nation claims. The auditor should understand the likelihood of these events and 
determine their potential effects on the financial statements, including footnote 
disclosures. 


Most companies have a large number of transactions involving payroll, often with 
large total amounts. However, balance sheet accounts are normally insignificant, 
except for labor charged to inventory. 

Aside from the potential for fraud, inherent risk is typically low for all balance- 
related audit objectives. There is inherent risk of payroll fraud because most transactions 
involve cash. Therefore, auditors often consider the occurrence transaction-related 
objective important. Also, for manufacturing companies with significant labor charged 
to inventory, the potential exists for misclassification between payroll expense 
and inventory, or among categories of inventory. As a part of gaining an under- 
standing of the client, the auditor may identify complex payroll-related issues, such 
as stock-based compensation plans, that may increase inherent risks related to the 
accounting and disclosure of those arrangements. 


Earlier in this chapter, we discussed assessing control risk and the related tests of con- 
trols and substantive tests of transactions. Refer to Table 20-2 (p. 692) for a review of 
these topics. 


The use of substantive analytical procedures is as important in the payroll and per- 
sonnel cycle as it is in every other cycle. Table 20-3 illustrates substantive analyti- 
cal procedures for the balance sheet and income statement accounts in the payroll 
and personnel cycle. Most of the relationships in the first column are predictable 
and are therefore useful for identifying areas in which additional investigation is 
desirable. 
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TABLE 20-3 Substantive Analytical Procedures for the Payroll and Personnel Cycle 


Substantive Analytical Procedure Possible Misstatement 


Compare payroll expense account balance with previous years 
(adjusted for pay rate increases and increases in volume). 


Misstatement of payroll expense accounts 


Compare direct labor as a percentage of sales with previous years. Misstatement of direct labor and inventory 


Compare commission expense as a percentage of sales with 
previous years. 


Misstatement of commission expense and commission liability 


Compare payroll tax expense as a percentage of salaries and 
wages with previous years (adjusted for changes in the tax rates). 


Misstatement of payroll tax expense and payroll tax liability 


Compare accrued payroll tax accounts with previous years. Misstatement of accrued payroll taxes and payroll tax expense 


The verification of the liability accounts associated with payroll, often termed 
accrued payroll expenses, is ordinarily straightforward if internal controls are 
operating effectively. When the auditor is satisfied that payroll transactions are being 
correctly recorded in the payroll journal and the related payroll tax forms are being 
accurately prepared and taxes promptly paid, the tests of details of balances should 
not be time consuming. 

The two major balance-related audit objectives in testing payroll liabilities are: 


Design and Perform 
Tests of Details of 
Balances for Liability 
and Expense Accounts 
(Phase III) 


1. Accruals in the trial balance are stated at the correct amounts (accuracy). 
2. Transactions in the payroll and personnel cycle are recorded in the proper 
period (cutoff). 


The primary concern in both objectives is to make sure that there are no under- 
stated or omitted accruals. Next, we examine the major liability accounts in the payroll 
and personnel cycle. 


Amounts Withheld from Employees’ Pay Payroll taxes withheld but not yet paid to the 
government can be tested by comparing the balance with the payroll journal, the payroll 
tax form prepared in the subsequent period, and the subsequent period cash disburse- 
ments. Other withheld items such as retirement savings, union dues, savings bonds, and 
insurance can be verified in the same manner. If internal controls are operating effec- 
tively, cutoff and accuracy can easily be tested at the same time by these procedures. 


Accrued Salaries and Wages The accrual for salaries and wages arises whenever 
employees are not paid for the last few days or hours of earned wages until the sub- 
sequent period. Salaried personnel usually receive all of their pay except overtime on 
the last day of the month, but often, several days of wages for hourly employees are 
unpaid at the end of the year. 


SEC’s NEW 
PAY RATIO 
DISCLOSURE 
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The Securities and Exchange Commission (SEC) 
issued a new rule in August 2015 that requires a pub- 
lic company to disclose the ratio of the compensation 
of its chief executive officer (CEO) to the median 
compensation of its employees. This new rule is in 
response to mandates in the Dodd-Frank Wall Street 
Reform and Consumer Protection Act. Effective for 
fiscal years beginning on or after January |, 2017, 
public companies will be required to include this dis- 
closure in proxy statements and annual reports that 
require executive compensation disclosure. 

The SEC’s rule provides a company flexibility in 
determining the pay ratio, such as how it selects a 
methodology for identifying its median employee 
and that employee's compensation. For example, 
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that methodology might include statistical sampling 
of the employee population and the rule allows a 
company to make the median employee determina- 
tion once every three years. Companies would be 
required to calculate the annual total compensation 
for its median employee using the same rules that 
apply to calculating CEO compensation, and com- 
panies must include disclosure that describes the 
methodology used and any material assumptions, 
adjustments, or estimates made to identify the me- 
dian employee or to determine total compensation. 


Source: U.S. Securities and Exchange Commission, “Pay Ratio 
Disclosure,” Release Nos. 33-9877; 34-75610; File No. S7-07-13 
(August 5, 2015) (www.sec.gov). 
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The correct cutoff and accuracy of accrued salaries and wages depend on com- 
pany policy, which should be followed consistently from year to year. Some compa- 
nies calculate the exact hours of pay that were earned in the current period and paid 
in the subsequent period, whereas others compute an approximate proportion. For 
example, if the subsequent payroll results from three days of employment during 
the current year and two days of employment during the subsequent year, the use 
of 60 percent of the subsequent period’s gross pay as the accrual is an example of an 
approximation. 

After the auditor has determined the company’s policy for accruing wages and 
knows that it is consistent with that of previous years, the appropriate audit procedure 
to test for cutoff and accuracy is to recalculate the client’s accrual. The most likely mis- 
statement of any significance in the balance is the failure to include the proper num- 
ber of days of earned-but-unpaid wages. 


Accrued Commissions The same concepts used in verifying accrued salaries and 
wages are applicable to accrued commissions, but the accrual is often more difficult 
to verify because companies often have several different types of agreements with 
salespeople and other commission employees. For example, some salespeople might 
be paid a commission every month and earn no salary, whereas others will get a 
monthly salary plus a commission paid quarterly. In verifying accrued commissions, 
it is necessary first to determine the nature of the commission agreement and then 
test the calculations based on the agreement. The auditor should compare the method 
of accruing commissions with that of previous years for purposes of consistency. 


Accrued Bonuses In many companies, the year-end unpaid bonuses to officers and 
employees are such a major item that the failure to record them will result in a mate- 
rial misstatement. The verification of the recorded accrual can usually be accom- 
plished by comparing it with the amount authorized in the board minutes. 


Accrued Vacation Pay, Sick Pay, or Other Benefits The consistent accrual of these 
liabilities relative to those of the preceding year is the most important consideration in 
evaluating the fairness of the amounts. The company policy for recording the liability 
must first be determined, and then the recorded amounts must be recalculated. The 
company policy should be in accordance with accounting standards for compensated 
absences. 


Accrued Payroll Taxes Payroll taxes, such as FICA and state and federal unemploy- 
ment taxes, can be verified by examining tax forms prepared in the subsequent period 
to determine the amount that should have been recorded as a liability at the balance 
sheet date. 


Tests of Details of Balances for Expense Accounts Several accounts on the income 
statement are affected by payroll transactions. The most important are officers’ sala- 
ries and bonuses, office salaries, sales salaries and commissions, and direct manufac- 
turing labor. Often, costs may be broken down further by division, product, or branch. 
Fringe benefits such as medical insurance may also be included in the expenses. 

Auditors should need to do relatively little additional testing of the income 
statement accounts in most audits beyond substantive analytical procedures, tests 
of controls, substantive tests of transactions, and related tests of liability accounts 
already discussed. Extensive additional testing should be necessary only when audi- 
tors uncover significant deficiencies or material weaknesses in internal control, 
significant misstatements in the liability tests, or major unexplained variances in the 
substantive analytical procedures. Nevertheless, some income statement accounts are 
often tested in the payroll and personnel cycle. These include officers’ compensation, 
commissions, payroll tax expense, total payroll, and contract labor. 


Officers’ Compensation It is common to verify whether the total compensation of of- 
ficers is the amount authorized by the board of directors, because their salaries and 


Arens, Alvin, et All Auditing and AssuRaré Spvide3PEBGoKT GDDAIGEtibh PoAtIDI FCP RMA ASSITED ZTEHERCOAC EDK Central, 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-07-30 00:57:56. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, LimfeapterP 20vedt BDEK GFtBHE PAYROLL AND PERSONNEL CYCLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


bonuses must be included in the company’s Form 10-K filed with the SEC and federal 
income tax return. Verification of officers’ compensation is also warranted because 
some individuals may be in a position to pay themselves more than the authorized 
amount. The usual audit test is to obtain the authorized salary of each officer from the 
minutes of the board of directors meetings and compare it with the related earnings 
record. 


Commissions Auditors can verify commission expense with relative ease if the com- 
mission rate is the same for each type of sale and the necessary sales information is 
available in the accounting records. The total commission expense can be verified by 
multiplying the commission rate for each type of sale by the amount of sales in that 
category. If the desired information is not available, it may be necessary to test the an- 
nual or monthly commission payments for selected salespeople and trace those to the 
total commission payments. 


Payroll Tax Expense Payroll tax expense for the year can be tested by first reconcil- 
ing the total payroll on each payroll tax form with the total payroll for the entire year. 
Total payroll taxes can then be recomputed by multiplying the appropriate rate by the 
taxable payroll. The calculation is often time-consuming because the tax is usually 
applicable on only a portion of the payroll and the rate may change partway through 
the year if the taxpayer's financial statements are not on a calendar-year basis. On most 
audits, the calculation is costly and is not necessary unless substantive analytical pro- 
cedures indicate a problem that cannot be resolved through other procedures. When 
necessary, the test is ordinarily done in conjunction with tests of payroll tax accruals. 


Total Payroll A test closely related to the one for payroll taxes is the reconciliation of 
total payroll expense in the general ledger with the payroll tax returns and the W-2 
forms. The objectives of the test are to determine whether payroll transactions were 
charged to anon-payroll account or not recorded in the payroll journal at all. Because 
the payroll tax records and the payroll are both usually prepared directly from the pay- 
roll master file, the misstatements, if any, are likely to be in both records. Tests of con- 
trols and substantive tests of transactions are a better means of uncovering these two 
types of misstatements in most audits. 


Contract Labor To reduce payroll costs, many organizations contract with outside or- 
ganizations to provide staffing. The individuals providing the services are employed 
by the outside organization. For example, companies frequently contract with infor- 
mation technology services firms to handle the company’s IT management and staff- 
ing functions. The fees paid to the outside organization are tested by comparing the 
amounts with the signed contract arrangement between the company and the outside 
services firm. 


Presentation and Disclosure Objectives Required disclosures for payroll and per- 
sonnel cycle transactions and balances are not extensive. However, some complex 
transactions, such as stock options and other executive officer compensation plans, 
may require footnote disclosure. Auditors may combine audit procedures related to 
the four presentation and disclosure objectives with tests of details of balances for li- 
ability and expense accounts. Other procedures related to presentation and disclosure 
objectives are further discussed in Chapter 24. 


CONCEPT CHECK 
|. List five tests of controls that can be performed for the payroll and personnel cycle and 
state the purpose of each control tested. 


2. Explain the circumstances under which an auditor should perform audit tests primarily 
designed to uncover fraud in the payroll and personnel cycle. 
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SUMMARY 


This chapter described the audit of the payroll and personnel cycle. Figure 20-2 illustrates 
the major accounts in the payroll and personnel cycle and the types of audit tests used to 
audit these accounts. Tests of controls and substantive tests of transactions are empha- 
sized because of the significance of transactions and the high quality of internal controls 
in most companies. Tests of details of balances are normally limited to substantive analyti- 
cal procedures and verification of accrued liabilities related to payroll. 


FIGURE 20-2 


Cash in Bank 


Payroll Liabilities 


Types of Audit Tests for the Payroll and Personnel Cycle 
(see Figure 20-1 on p. 688 for accounts) 


Direct Labor and Payroll Expenses 


<> Payments <—_—__>- ——m—> Expenses <—_—_>> 


Audited by 
TOC, STOT, and SAP 


Ending balance 


Audited by 
SAP and TDB 


Audited by 


TOC, STOT, and SAP 


Ending balance 


Audited by 
SAP and TDB 


Tests of controls 
(including procedures 
to obtain an understanding 
of internal control) (TOC) 


Substantive 
tests of 
transactions 


Substantive 
analytical 
procedures 

(STOT) (SAP) 


Tests of 

details of 

balances 
(TDB) 


Sufficient 
appropriate 
evidence 


ESSENTIAL TERMS 
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Accrued payroll expenses—the liabil- 
ity accounts associated with payroll; these 
include accounts for accrued salaries and 
wages, accrued commissions, accrued bo- 
nuses, accrued benefits, and accrued pay- 
roll taxes 


Human resource records—records that 
include such data as the date of employ- 
ment, personnel investigations, rates of 
pay, authorized deductions, performance 
evaluations, and termination of employ- 
ment 


Imprest payroll account—a bank ac- 
count to which the exact amount of payroll 
for the pay period is transferred by check 
or wire transfer from the employer's gen- 
eral cash account 


REVIEW QUESTIONS 


Payroll and personnel cycle—the trans- 
action cycle that begins with the hiring 
of personnel, includes obtaining and ac- 
counting for services from the employees, 
and ends with payment to the employees 
for the services performed and to the gov- 
ernment and other institutions for with- 
held and accrued payroll taxes and benefits 


Payroll master file—a computer file for 
recording each payroll transaction for each 
employee and maintaining total employee 
wages paid and related data for the year to 
date 


Time record—a document indicating the 
time that the employee started and stopped 
working each day and the number of hours 
worked 


20-1 (OBJECTIVE 20-1) The payroll and personnel cycle is extremely important. What is the 
overall objective in the audit of the payroll and personnel cycle? 


20-2 (OBJECTIVES 20-1, 20-3) Explain the relationship between the payroll and personnel 


cycle and inventory valuation. 
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20-3 (OBJECTIVE 20-2) Distinguish among a payroll master file, a W-2 form, and a payroll 
tax return. Explain the purpose of each. 


20-4 (OBJECTIVE 20-2) What are some of the typical human resource records data main- 
tained by the human resources department? 


20-5 (OBJECTIVES 20-2, 20-3) Despite its size and importance, control risk is often assessed as 
low for the payroll and personnel cycle. Give some common reasons why this is the case. 


20-6 (OBJECTIVES 20-2, 20-3) Evaluate the following comment by an auditor: “My job is to 
determine whether the payroll records are fairly stated in accordance with accounting 
standards, not to find out whether they are following proper hiring and termination pro- 
cedures. When I conduct an audit of payroll, I keep out of the human resources depart- 
ment and stick to the time cards, journals, and payroll checks. I don’t care whom they hire 
and whom they fire, as long as they properly pay the employees they have.” 


20-7 (OBJECTIVE 20-3) Distinguish between the following payroll audit procedures and state 
the purpose of each: (1) trace a random sample of prenumbered time cards to the related 
payments in the payroll register and compare the hours worked with the hours paid, and 
(2) trace a random sample of payments from the payroll register to the related time cards 
and compare the hours worked with the hours paid. Which of these two procedures is 
typically more important in the audit of payroll? Why? 


20-8 (OBJECTIVE 20-3) Explain why the percentage of total audit time in the cycle devoted to 
performing tests of controls and substantive tests of transactions is usually far greater for 
the payroll and personnel cycle than for the sales and collection cycle. 


20-9 (OBJECTIVE 20-3) List three common fraudulent payroll activities and explain the audit 
procedures used to detect these fraudulent activities. 


20-10 (OBJECTIVE 20-3) List the payments that firms must typically make related to withhold- 
ings from employees and the audit procedures to determine whether these payments are made. 


20-11 (OBJECTIVE 20-3) List five common tests of controls related to the transaction-related 
audit objective that recorded payroll payments are for work actually performed by existing 
employees (occurrence). 


20-12 (OBJECTIVE 20-3) Explain how audit sampling can be used to test the payroll and per- 
sonnel cycle. 


20-13 (OBJECTIVE 20-4) In auditing payroll withholding and payroll tax expense, explain 
why emphasis should normally be on evaluating the adequacy of the payroll tax return 
preparation procedures rather than the payroll tax liability. If the preparation procedures 
are inadequate, explain the effect this will have on the remainder of the audit. 


20-14 (OBJECTIVE 20-4) List several substantive analytical procedures for the payroll and 
personnel cycle and explain the type of misstatement that might be indicated when there 
is a significant difference in the comparison of the current year with previous years’ 
results for each of the tests. 


20-15 (OBJECTIVE 20-4) List five of the substantive analytical procedures for the payroll and 
personnel cycle. Also list the five types of possible misstatements that these substantive 
analytical procedures are designed to detect. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


20-16 (OBJECTIVE 20-3) The following questions concern internal controls in the payroll 
and personnel cycle. Choose the best response. 


a. Control risk is the risk that a material misstatement in an account will not be pre- 
vented or detected on a timely basis by the client’s internal controls. The best control 
to prevent or detect fictitious payroll transactions is to 
(1) use and account for prenumbered payroll checks. 

(2) restrict authorization for hiring, terminating, or changing pay rate or job status to 
the human resources function. 

(3) verify internally authorized pay rates, computations, and agreement with the 
payroll register. 

(4) conduct periodic independent bank reconciliations of the payroll bank account. 
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b. A factory supervisor at Steblecki Corporation discharged an hourly worker but did 
not notify the human resources department. The supervisor then forged the worker's 
signature on time cards and work tickets and, when giving out the checks, diverted 
the payroll checks drawn from the discharged worker to his own use. The most effec- 
tive procedure for preventing this activity is to 
(1) require written authorization for all employees added to or removed from the 
payroll. 

(2) have a paymaster who has no other payroll responsibility distribute the payroll 
checks. 

(3) have someone other than persons who prepare or distribute the payroll obtain 
custody of unclaimed payroll checks. 

(4) from time to time, rotate persons distributing the payroll. 


c. An auditor found that employee time records in one department are not properly 
approved by the supervisor. Which of the following could result? 
(1) Duplicate paychecks might be issued. 

(2) The wrong hourly rate could be used to calculate gross pay. 

(3) Employees might be paid for hours they did not work. 

(4) Payroll checks might not be distributed to the appropriate employees. 


20-17 (OBJECTIVE 20-3) The following questions concern audit testing of the payroll and 
personnel cycle. Choose the best response. 


a. A common audit procedure in the audit of payroll transactions involves tracing se- 
lected items from the payroll journal to employee time cards that have been approved 
by supervisory personnel. This procedure is designed to provide evidence in support 
of the audit proposition that 
(1) only proper employees worked and their pay was correctly computed. 

(2) jobs on which employees worked were charged with the appropriate labor cost. 

(3) internal controls over payroll disbursements are operating effectively. 

(4) all employees worked the number of hours for which their pay was computed. 


b. In performing tests concerning the granting of stock options, an auditor should 

(1) confirm the transaction with the Secretary of State in the state of incorporation. 
(2) verify the existence of option holders in the entity's payroll records or stock ledgers. 
(3) determine that sufficient treasury stock is available to cover any new stock issued. 
(4) trace the authorization for the transaction to a vote of the board of directors. 


c. An auditor reviews the reconciliation of payroll tax forms that a client is responsible 
for filing to 
(1) verify that payroll taxes are deducted from employees’ gross pay. 

determine whether internal control activities are operating effectively. 

uncover fictitious employees who are receiving payroll checks. 

) identify potential liabilities for unpaid payroll taxes. 


Pees 
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uRare SbWviéeRPEBOAT GDbalGEtibh Poats dl FcRRDGASGIED ZTE RODAC EES Central, 
om/lib/undip-ebooks/detail.action?doclD=5185606. 
1-07-30 00:57:56. 


DISCUSSION QUESTIONS AND PROBLEMS 


20-18 (OBJECTIVES 20-2, 20-3) A number of accounts are related to class of transactions 
within payroll. These include: Payroll cash, payroll related expenses (such as salary 
expense, wage expense, bonuses expense, etc.), payroll withholding accounts, and payroll 
accrual accounts. 

There are also a number of business functions and related documents and records 
related to payroll that the auditor should be aware of. The business functions include: 


¢ Human resources and employment 

* Timekeeping and the preparation of payroll 

* Payment of payroll 

* Preparation of payroll tax returns and payment of taxes to the relevant tax authority 
The documents and records maintained by payroll related to these functions include the 
following (in random order): 


¢ Job time tickets 

¢ W-2 forms 

¢ Human resource records 

* Payroll direct deposit or checks 
* Time records 

* Rate authorization forms 

* Payroll transaction file 

* Payroll tax returns 

* Deduction authorization forms 
* Payroll journal or listing 

* Payroll bank account reconciliation 
* Payroll master file. 


a. Match each type of documents and records with the business function that is in Required 
charge of maintaining the documents. 

b. Provide a brief description of the following documents and records and explain their 
importance in the audit of payroll 
¢ Time records 
* Payroll Transaction File 
* Payroll Master File 


20-19 (OBJECTIVES 20-2, 20-3) A number of audit objectives are common to, or similar for, 
the audit of different classes of accounts and their balances. Similarly, key internal controls 
over different transactions often share similar characteristics. The following is a list of 10 
common key internal controls related to the payroll and personnel cycle. 

1. There is separation of duties among resources, timekeeping, and payroll disbursements. 

2. Bank accounts are independently reconciled. 

3. Wage rate, salary, or commission rate is properly authorized. 

4. Disbursements are authorized before issuance. 
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Required 


Required 


SO oOOonNaW 


. Payroll master file contents are internally verified 

. Account classifications are internally verified. 

. Dates are internally verified. 

. Adequate human resource files are maintained. 

. Payroll checks are prenumbered and accounted for. 

. Payroll master file totals are compared with general ledger totals. 


. For each of the key internal controls listed above, identify the transaction related 


audit objective that is likely to assess the particular control. 


. List a common test of control which is used to determine whether each of the key 


internal controls is sufficient and functioning properly. 


20-20 (OBJECTIVES 20-2, 20-3) The following misstatements are included in the accounting 
records of Lathen Manufacturing Company: 


1s 


a. 


b. 


Joe Block and Frank Demery take turns “punching in” for each other every few days. 
The absent employee comes in at noon and tells his foreman that he had car trouble 
or some other problem. The foreman does not know that the employee is getting 
paid for the time. 


. The foreman submits a fraudulent time card for a former employee each week and 


delivers the related payroll check to the employee’s house on the way home from 
work. They split the amount of the paycheck. 


. Employees often overlook recording their hours worked on job-cost tickets as re- 


quired by the system. Many of the client’s contracts are on a cost-plus basis. 


. Direct labor was unintentionally charged to job 620 instead of job 602 by the pay- 


roll clerk when he key-entered the labor distribution sheets. Job 602 was completed 
and the costs were expensed in the current year, whereas job 620 was included in 
work-in-process. 


. The payroll clerk prepares a check to the same nonexistent person every week 


when he enters payroll transactions in the computer system, which also records the 
amount in the payroll journal. He submits it along with all other payroll checks for 
signature. When the checks are returned to him for distribution, he takes the check 
and deposits it in a special bank account bearing that person’s name. 


. In withholding payroll taxes from employees, the computer operator deducts $0.50 


extra federal income taxes from several employees each week and credits the amount 
to his own employee earnings record. 


. The payroll clerk manually prepares payroll checks but often forgets to record one or 


two checks in the computer-prepared payroll journal. 


For each misstatement, state a control that should have prevented it from occurring 
on a continuing basis. 
For each misstatement, state a substantive audit procedure that could uncover it. 


20-21 (OBJECTIVES 20-3, 20-4) A number of important accounts are related to payroll. 
Generally, these include payroll related liabilities and payroll expenses. Payroll liabilities 
are commonly referred to as accrued payroll expenses. Examples of accrued payroll and a 
brief description include: 


Amounts withheld from employees’ pay include income tax withholdings, retire- 
ment savings and pension contributions, union dues, and insurance premiums. 
These are all liabilities that must be paid to the appropriate parties. 

Accrued salaries and wages are payroll expenses that have been incurred, but not yet 
paid to employees, typically due a lag in when payroll is made. 

Accrued commissions are compensation earned by employees based on sales, but 
not yet paid. 

Accrued bonuses, if any, are bonus amounts determined by management, but not yet 
paid near year end. 

Accrued vacation pay, sick pay, or other benefits are typically earned by employees 
as they work. For example, some companies grant one vacation day and one sick 
day per month that can be accumulated for use later or can be paid out in cash if 
not used. 
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¢ Accrued payroll taxes represent the company’s portion of payroll taxes. These in- 
clude taxes based on the number of employees or the amount of total wages paid to 
employees. 


For each of the liabilities listed above, describe an audit procedure that can be used to test Required 
the detailed balance of the liability. 


20-22 (OBJECTIVE 20-4) Alyssa Ghose is auditing payroll accruals for a manufacturing com- © @.. 
pany. The client has accrued payroll taxes, accrued vacation pay, and accrued bonuses ae 
for salespersons as of the end of the fiscal year. Ghose performed the following audit 
procedures. 
1. Compared all accrual balances in the current year to the prior year and noted no sig- 
nificant fluctuations. 
2. Traced the subsequent payment of payroll taxes to the cash disbursements journal 
and the bank statement. 
3. Reviewed a sample of contracts with salespersons to verify the bonus formula. 
4. Reviewed cancelled checks for a sample of checks disbursed after year end for unused 
vacation pay. 


a. Are the audit procedures performed by Ghose sufficient to test accrued payroll Required 
tax, vacation pay, and bonuses? If not, what additional procedures should she 
perform? 

b. For each additional procedure you recommend in part a., identify the related audit 
objective the procedure would satisfy. 


20-23 (OBJECTIVES 20-3, 20-4) The following are steps in the methodology for designing tests 
of controls, substantive tests of transactions, and tests of details of balances for the payroll 
and personnel cycle: 
1. Design tests of details of balances for the payroll and personnel cycle. 
2. Evaluate whether control risk can be assessed as low for payroll. 
3. Design and perform payroll- and personnel-related substantive analytical procedures. 
4. Identify controls and deficiencies in internal control for the payroll and personnel 
cycle. 
. Obtain an understanding of the payroll and personnel cycle internal controls. 
6. Evaluate tests of controls and substantive tests of transactions results. 
7. Design payroll and personnel cycle tests of controls and substantive tests of 
transactions. 
8. Assess inherent risk for payroll-related accounts. 
9. Evaluate risk and materiality for payroll expense and liability accounts. 


wm 


a. Identify (1) those steps that are tests of controls or substantive tests of transactions Required 
and (2) those that are tests of details of balances. 

b. Put steps that are tests of controls and substantive tests of transactions in the order of 
their performance in most audits. 

c. Put the tests of details of balances in their proper order. 


20-24 (OBJECTIVE 20-3) You are assessing internal control in the audit of the payrolland ®@,, 
personnel cycle for Rogers Products Company, a manufacturing company specializing oe © 
in assembling computer parts. Rogers employs approximately two hundred hourly 
and thirty salaried employees in three locations. Each location has one foreman who 
is responsible for overseeing operations. The owner of the company lives in Naples, 
Florida, and is not actively involved in the business. The two key executives are the vice 
president of sales and the controller, and both have been employed by the company for 
more than fifteen years. 
New hourly employees are hired by the foremen at each location on an as-needed 
basis. Each foreman recommends the wage rate for each new employee as well as wage 
rate increases. The effectiveness of employees varies considerably, and their wages are 
adjusted accordingly. All wage rates are approved by the controller. 
Since each hourly employee works independently, Rogers has a highly flexible work 
schedule policy, as long as they start after 7:00 a.m. and are finished by 6:00 p.m. Each 
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Required 


Required 


foreman has a supply of prenumbered time cards that he or she distributes to employees 
on Monday morning. Because some employees do not start until later in the day, several 
time cards are kept in a box by the time clock for their use. Hourly employees use time 
clocks to record when they start and stop working. Each Friday, after the employees com- 
plete their work for the week, the foremen account for the time cards they distributed, 
approve them, and send them by an overnight courier to the main office in Cincinnati. 

The payroll clerk receives the time cards on Saturday and enters the information using 
payroll software that prepares the checks or direct deposit authorizations and the related 
payroll records. The checks are ready for the controller to sign Monday morning. She 
compares each check to the payroll transactions list sent by the payroll department and re- 
turns the checks using the same courier to each location. The foremen pick up the checks 
and distribute each check to the appropriate employee. If an employee is not present at the 
end of the day, the foreman mails it to the employee’s address. 

Except for the foremen, all salaried employees work in the Cincinnati office. The 
vice president of sales or the controller hires all salaried employees, depending on their 
responsibilities, and determines their salaries and salary adjustments. The owner de- 
termines the salary of the vice president of sales and the controller. The payroll clerk 
also processes the payroll transactions for salaried employees using the same payroll 
software that is used for hourly employees, but all salaried employees use direct deposit 
so no check is prepared. 

The payroll software has access controls that are set by the controller. She is the only 
person who has access to the salary and wage rate module of the software. She updates 
the software for new wage rates and salaries and changes of existing ones. The accounting 
clerk has access to all other payroll modules. The controller’s assistant has been taught to 
reconcile bank accounts and does the reconciliation monthly. 


a. Identify the internal control deficiencies in the Rogers Products Company’s payroll 
system. 

b. For each deficiency, state the type of misstatement that is likely to result. Be as specific 
as possible in describing the nature of the misstatement. If the potential misstatement 
involves fraud, identify who is most likely to perpetuate the fraud. 


20-25 (OBJECTIVE 20-3) The auditor of Middle East Computing Services is concerned with 
a weakness in controls over the payroll and personnel cycle. As a result, she conducts the 
following substantive tests of transactions related to payroll: 

1. First, she examines the time records to collect information on hours worked and re- 
computes the total hours from the original time cards. 

2. Next, she compares the payments indicated on the company’s bank statement with 
the disbursements listed in the company’s payroll journal. 

3. Similarly, she compares the dates of the recorded payments in the payroll journal 
with the date on cancelled checks and direct deposit records and also compare these 
with the bank statements. 

4. Finally, she compares the endorsements on cancelled checks and compares the name, 
amount, and dates with the payroll journal. 


a. For each of the substantive tests of payroll related transactions listed above, indicate 
which transaction related audit objective the auditor seeks to complete with the spe- 
cific procedure used. 

b. The auditor initiated each of the above procedures because she perceived a weak- 
ness in certain internal controls. Identify the key internal control which she is 
likely to have found a deficiency based on the substantive tests of transactions 
that she used. 

c. Indicate the common test of controls that are used to determine if that particular 
control is sufficient or functioning property. 


20-26 (OBJECTIVE 20-4) Phoenix Real Estate Development Limited is a hotel and resort 
developer based in Vietnam. Its current projects mainly involve developing time-share 
vacation property to middle class customers. The business is undergoing rapid expan- 
sion and is testing a change in the compensation structure for its sales and office staff. 
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Previously, sales staff focused mainly on direct market called to a list of potential custom- 
ers purchased from a business consultancy and were compensated based on the hours 
they spend in the office making calls to potential customers. 

Under the new structure, sales employees are encouraged to find and develop rela- 
tionships with potential clients. In return for their effort, each salesperson is reimbursed 
for their sales related expenses and can earn 10% of the total value of the sales they secure. 
The sales contracts cost $10,000 for which customers receive access to any of the resorts 
under Phoenix’s management for 1 week a year for 10 years. While the company does not 
heavily promote this fact, local practice dictates that dissatisfied customers have the right 
to terminate their contract at any time and received a refund for any unused portion of 
their contract (prorated at $1,000 per year or part of a year). 

Under the new agreement, sales staff receive their bonus within 1 month of any new 
customers signing a contract. 


The company’s management is redesigning its internal controls and has asked you to Required 
evaluate the risks involved with implementing the new bonus arrangement for sales em- 
ployees. Comment on the following: 


¢ What is the inherent risk of the new bonus structure relative to the old structure? 

* How does the introduction of the 10% commission increase the difficulty of calculat- 
ing payroll expenses? 

¢ What are some considerations for designing controls over the reimbursement of ex- 
pense accounts for sales staff? 


20-27 (OBJECTIVE 20-4) Chief executive officer compensation can be a material amount and VEN 
is often scrutinized by regulators, analysts, competitors, and investors. For CEOs of pub- » 
licly traded companies, compensation can consist of salary, bonus, stock option grants,or °°” 
other stock awards that can be restricted in terms of how long the officers and directors 

are required to hold the stock. Publicly traded companies are required by the Securities 

and Exchange Commission to provide disclosures about the components of executive 
compensation in the company’s annual proxy statement. 


a. Visit the SEC’s Web site (www.sec.gov) to locate the annual proxy statement (the “DEF Required 
14A” filing) submitted to the SEC on March 20, 2015, for Yum Brands, Inc., which owns 
Kentucky Fried Chicken, Pizza Hut, and Taco Bell restaurants. Locate the Summary 
Compensation Table within the annual proxy statement and identify the components 
of the Chairman and Chief Executive Officer’s total compensation for 2014. 

b. Provide at least one audit procedure the auditor would perform to test the Chairman 
and CEO’s salary. What audit objective is satisfied with this audit procedure? 

c. Provide at least one audit procedure the auditor would perform to test the occurrence 
objective related to the awarding of the Chairman and CEO’s stock awards and stock 
option/stock appreciation rights (SAR). 

d. How would the auditor test the fair value of the stock option/stock appreciation 
rights (SAR)? 

e. Why are the presentation and disclosure-related audit objectives so important for 
stock-based compensation? 


CASE 


20-28 (OBJECTIVE 20-3) Roost and Briley, CPAs, are doing the audit of Leggert Lumber Co., 
an international wholesale lumber broker. Because of the nature of their business, payroll 
and telephone expense are the two largest expenses. 

You are the in-charge auditor on the engagement responsible for developing the au- 
dit program for the payroll and personnel cycle. Leggert Lumber uses a computer service 
company to prepare weekly payroll checks, update earnings records, and prepare the 
weekly payroll journal for its 30 employees. The president maintains all human resource 
files, knows every employee extremely well, and is a full-time participant in the business. 

All employees, except the president, check into the company building daily using a 
time clock. The president’s secretary, Mary Clark, hands out the time cards daily, observes 
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employees clocking in, collects the cards, and immediately returns them to the file. She 
goes through the same process when employees clock out on their way home. 

At the end of each week, employees calculate their own hours. Clark rechecks those 
hours, and the president approves all time cards. Each Tuesday, Clark submits payroll input 
to the computer service center. She files a copy of the input data, which includes the fol- 
lowing information for each employee: 


Information Source 

Employee name Time card 

Social Security number Employee list 

Hourly labor rate* Wage rate list (approved by president) 
Regular hours Time card 

Overtime hours Time card 

Special deductions* Special form (prepared by employee) 
W-4 information* W-4 form 

Termination of employment* President 


*Included on input form only for new employees, terminations, and changes. 


The service center uses the payroll data to update master files and print out payroll 
checks and a payroll register. The payroll register has the following headings: 


Employee name Overtime payroll dollars State taxes withheld 
Social Security number Gross payroll Other deductions 
Regular hours FICA taxes withheld Net pay 

Overtime hours Medicare withheld Check number 
Regular payroll dollars Federal taxes withheld 


A line is prepared for each employee and the journal is totaled. 

Payroll checks and the journal are delivered to Clark, who compares the information 
on the journal with her payroll input and initials the journal. She gives the checks to the 
president, who signs them and personally delivers them to employees. 

Clark re-adds the journal and posts the totals to the ledger. Bank statements with cop- 
ies of cancelled checks are mailed to the president, and he prepares a monthly bank recon- 
ciliation. 


Required a. Is there any loss of documentation because of the computer service center? Explain. 

b. For each transaction-related audit objective for the payroll and personnel cycle, write 
appropriate tests of controls and substantive tests of transactions audit procedures. 
Consider both controls and deficiencies in writing your program. Label each proce- 
dure as either a test of control or a substantive test of transactions. 

c. Rearrange your design format audit program in requirement b. into a performance 
format audit program. 

d. Prepare a sampling data sheet using either nonstatistical or attributes sampling, such 
as the ones shown in Chapter 15, for the audit program in part b. Set ARO and other 
factors required for sampling as you consider appropriate. Do not assume that you 
actually performed any tests. 


uRare SbviéeRPEBOAT GDbalGEtibh Poats dl FdRRDLGASGIE®D ZTE RODAC EES Central, 
om/lib/undip-ebooks/detail.action?doclID=5185606. 
1-08-02 01:36:11. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


AUDIT OF THE 
INVENTORY AND 
WAREHOUSING CYCLE 


Phantom Inventory 


Mickey Monus was the local hero in Youngstown, Ohio. He acquired a local drugstore, and 
within 10 years, added 299 more stores to form the national deep-discount retail chain Phar- 
Mor, Inc. The company was viewed as the rising star by some retail experts and was considered 
to be the next Wal-Mart. Even Sam Walton announced that the only company he feared in the 
expansion of Wal-Mart was Phar-Mor. 


Phar-Mor sold a variety of household products and prescription drugs at substantially lower 
prices than other discount stores. Monus described the company’s strategy as “power buying,” 
whereby Phar-Mor loaded up on products when suppliers were selling at rock-bottom prices 
and passed those savings to cost-conscious customers. 


Actually, Phar-Mor’s prices were so low that the company was selling goods for less than their 
cost, causing the company to lose money. Monus continued to argue internally that through 
Phar-Mor’s power buying, it would get so large that it could sell its way out of trouble. Unwilling 
to allow these shortfalls to damage Phar-Mor’s appearance of success, Monus and his team be- 
gan to engage in creative accounting so that Phar-Mor never reported these losses. 


Management dumped the losses into “bucket accounts,” only to reallocate those amounts to the 
company’s hundreds of stores in the form of phantom increases in inventory costs. Monus’ team 
issued fake invoices for merchandise purchases, made fraudulent journal entries to increase in- 
ventory and decrease cost of goods sold, and overcounted and double-counted inventory items. 


Unfortunately, the auditors never uncovered the fraud. They allegedly observed inventory in 
only four stores out of 300, and they informed Phar-Mor management months in advance about 
the stores they would visit. Phar-Mor executives fully stocked the four selected stores but al- 
located the false inventory increases to the other 296 stores. 


The fraud was ultimately uncovered when a travel agent received a Phar-Mor check signed by 
Monus paying for expenses unrelated to Phar-Mor. The agent showed the check to her land- 
lord, who happened to be a Phar-Mor investor, and he contacted Phar-Mor’s CEO. Subsequent 
investigation led to the discovery of the inventory fraud. Monus was eventually convicted and 
went to jail for 5 years. The audit failure cost the audit firm over $300 million in civil judgments. 


Sources: |. Beasley, Buckless, Glover, and Prawitt, Auditing Cases:An Interactive Learning Approach, 
6th edition, Pearson Education Inc., 2015, pp. 129-141; 2. Joseph T. Wells, “Ghost Goods: How 
to Spot Phantom Inventory,” Journal of Accountancy (June 2001), pp. 33-36. 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


21-1 


21-2 


21-3 


21-4 


21-5 


21-6 


21-7 


Describe the business 
functions and the related 
documents and records 
in the inventory and 
warehousing cycle. 
Explain the five parts of 
the audit of the inventory 
and warehousing cycle. 
Design and perform audit 
tests of cost accounting. 
Apply substantive analytical 
procedures to the accounts 
in the inventory and 
warehousing cycle. 

Design and perform 
physical observation audit 
tests for inventory. 

Design and perform 

audit tests of pricing and 
compilation for inventory. 
Integrate the various parts of 
the audit of the inventory and 
warehousing cycle. 
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The inventory and warehousing cycle is unique because of its close relationships to other transaction cycles. 
For a manufacturing company, raw material enters the inventory and warehousing cycle from the acquisition and 
payment cycle, while direct labor enters it from the payroll and personnel cycle. The inventory and warehousing 
cycle ends with the sale of goods in the sales and collection cycle. 

The audit of inventory, especially tests of the year-end inventory balance, is often the most complex and time- 
consuming part of the audit. As the audit of Phar-Mor demonstrates, finding misstatements in inventory accounts 
can be challenging. Factors affecting the complexity of the audit of inventory include: 


¢ Inventory is often the largest account on the balance sheet. 

¢ Inventory is often in different locations, making physical control and counting difficult. 

Diverse inventory items such as jewels, chemicals, and electronic parts are often difficult for auditors to ob- 
serve and value. 

¢ Inventory valuation is also difficult when estimation of inventory obsolescence is necessary and when manu- 
facturing costs must be allocated to inventory. 

* There are several acceptable inventory valuation methods and some organizations may prefer to use different 
valuation methods for different parts of the inventory, which is acceptable under accounting standards. 


BUSINESS FUNCTIONS IN THE CYCLE 
AND RELATED DOCUMENTS AND RECORDS 


‘OBJECTIVE 21-10 Inventory takes many different forms, depending on the nature of the business. For 


: : ; retail or wholesale businesses, the largest account in the financial statements is often 
Describe the business functions 


and the related documents and 
records in the inventory and 
warehousing cycle. 


FIGURE 21-1 | Flow of 


merchandise inventory available for sale. To study the inventory and warehousing 
cycle, we will use the example of a manufacturing company, whose inventory may 
include raw materials, purchased parts and supplies for use in production, goods in 
the process of being manufactured, and finished goods available for sale. Still, most of 
the principles discussed apply to other types of businesses as well. 

Figure 21-1 shows the physical flow of goods and the flow of costs in the inven- 
tory and warehousing cycle for a typical manufacturing company. Examine the debits 
to the raw materials, direct labor, and manufacturing overhead T accounts to see how the 
inventory and warehousing cycle ties in to the acquisition and payment cycle and 
the payroll and personnel cycle. The direct tie-in to the sales and collection cycle occurs 
at the point where finished goods are relieved (credited) and a charge is made to cost of 
goods sold. 


Inventory and Costs 


Raw materials 


Beginning 
inventory 


Purchases 


Ending 
inventory 


Direct labor 


Actual 
manufacturing 
direct labor 


Manufacturing goods 
overhead 


Actual 
overhead 


Raw materials 
used 


Cost of 


Work-in-process Finished goods goods sold 


Applied 
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The inventory and warehousing cycle can be thought of as comprising two sepa- 
rate but closely related systems, one involving the physical flow of goods and the other 
the related costs. Six functions make up the inventory and warehousing cycle. Each of 
these is discussed next. 


The inventory and warehousing cycle begins with the acquisition of raw materials 
for production. Adequate controls over purchasing must be maintained whether 
inventory purchases are for raw materials for a manufacturer or finished goods for a 
retailer. Purchase requisitions are forms used to request the purchasing department 
to order inventory. These requisitions may be initiated by stockroom personnel as 
raw materials are needed, by automated computer software when raw materials reach 
a predetermined level, by orders placed for the materials required to produce a cus- 
tomer order, or by orders initiated on the basis of a periodic raw materials count. 


Receipt of the ordered materials, which is also part of the acquisition and payment 
cycle, involves the inspection of material received for quantity and quality. The receiv- 
ing department prepares a receiving report that becomes a part of the documentation 
before payment is made. After inspection, the material is sent to the storeroom and 
copies of the receiving documents, or electronic notifications of the receipt of goods, 
are typically sent to purchasing, the storeroom, and accounts payable. Control and 
accountability are necessary for all transfers. 


Once received, materials are normally stored in a stockroom. When another depart- 
ment needs materials for production, personnel submit a properly approved materi- 
als requisition, work order, or similar document or electronic notice that indicates 
the type and quantity of materials needed. This requisition document is used to 
update the perpetual inventory master files and record transfers from raw materials 
to work-in-process accounts. These updates occur automatically in organizations 
with integrated inventory management and accounting software systems. 


Processing inventory varies greatly from company to company. Companies deter- 
mine the finished goods items and quantities they will produce based on specific 
orders from customers, sales forecasts, predetermined finished goods inventory lev- 
els, and economical production runs. A separate production control department is 
often responsible for determining the types and quantities to produce. 

An adequate cost accounting system is an important part of the processing of goods 
function for all manufacturing companies. The system shows the relative profitability of 
the products for management planning and control and values inventories for preparing 
financial statements. Two primary types of cost systems exist: job cost systems and pro- 
cess cost systems, but there are many variations and combinations of these systems. In a 
job cost system, costs are accumulated by individual jobs when material is issued and 
labor costs incurred. In a process cost system, they are accumulated by processes, with 
unit costs for each process assigned to the products passing through the process. 

Cost accounting records consist of master files, spreadsheets, and reports that 
accumulate material, labor, and overhead costs by job or process as those costs are 
incurred. When jobs or products are completed, the related costs are transferred from 
work-in-process to finished goods based on production department reports. 


When finished goods are completed, they are placed in the stockroom to await ship- 
ment. In companies with good internal controls, finished goods are kept under physi- 
cal control in a separate, limited-access area. The control of finished goods is often 
considered part of the sales and collection cycle. 


Shipping completed goods is part of the sales and collection cycle. The actual 
shipment of goods to customers in exchange for cash or other assets, such as 


Process Purchase Orders 


Receive Raw Materials 


Store Raw Materials 


Process the Goods 


Store Finished Goods 


Ship Finished Goods 
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Perpetual Inventory 
Master Files 


CEO AND 

CFO CHARGED 
WITH FALSE 
STATEMENTS 

ON INTERNAL 
CONTROLS OVER 
INVENTORY 
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accounts receivable, creates the exchange of assets necessary for meeting revenue 
recognition criteria. For most sales transactions, the actual shipment satisfies the 
performance obligation and therefore becomes the trigger for recognizing the 
related accounts receivable and sales in the accounting system. Thus, shipments 
of finished goods must be authorized by a properly approved shipping 
document. 


We have not yet discussed one type of record used for inventory: a perpetual inven- 
tory master file. With advancements in technologies, separate perpetual records are 
likely to be kept for raw materials, work-in-process, and finished goods. 

Perpetual inventory master files typically include information about the units of 
inventory acquired, sold, and on hand. In well-designed computerized systems, they 
also include information about unit costs. 

For acquisitions of raw materials, the perpetual inventory master file is updated 
automatically when acquisitions of inventory are processed as part of recording 
acquisitions. For example, when the number of units and unit cost for each raw mate- 
rial acquisition are entered in the computer system, this information is used to update 
perpetual inventory master files along with the acquisitions journal and accounts 
payable master file. 

Transfers of raw material from the storeroom must be separately entered into 
the computer to update the perpetual records. Typically, only the units transferred 
need to be entered because the computer determines the unit costs from the mas- 
ter file. 

Finished goods perpetual inventory master files include the same type of infor- 
mation as raw materials perpetuals but are considerably more complex if costs are 
included along with units. Finished goods costs include raw materials, direct labor, 
and manufacturing overhead, which often requires allocations and detailed record 
keeping. When finished goods perpetuals include unit costs, the cost accounting 
records must be integrated into the computer system. 

Figure 21-2 summarizes the business functions and the physical flow of inven- 
tory from the purchase of raw materials to the shipment of finished goods. It also 
includes the most common documents and records used to support the functions 
and physical flows. 


Quality Services Group, Inc. (QSGI), was a publicly 
traded company and as such, its CEO and CFO were 
responsible for certifying the effectiveness of internal 
controls over financial reporting under the Sarbanes— 
Oxley Act. Sherman, CEO, and Cummings, CFO, 
certified that controls were effective despite being 
aware of several deficiencies in controls related to 
inventory. Sherman also certified that he participated 
in management’s assessment of internal controls 
when in fact he had not. QSGI was a reseller of used 
computer equipment and also provided maintenance 
services. In one of the company’s two warehouses, 
employees removed parts from computers sitting in 
inventory to use in maintenance and repairs of other 
computers without documenting the removal or no- 
tifying accounting. Warehouse personnel received in- 
ventory and shipped inventory without recording the 
transactions. Attempts to strengthen controls were 
not effective. The CEO and CFO were fully aware 
that controls in the company’s warehouse were 
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ignored. Sherman also circumvented internal controls 
and frequently accelerated the recording of inventory 
purchases in order to inflate assets to meet borrow- 
ing requirements on a revolving line of credit. 

One of the interesting aspects of this case is that 
no material misstatements of the financial statements 
were identified when the control deficiencies came 
to light. But even in the absence of material misstate- 
ments, the SEC charged the executives with fraudulent 
internal control certifications and lying to the auditors 
by not disclosing in the management representa- 
tion letter significant deficiencies of which they were 
aware. This case highlights management’s responsibil- 
ity for understanding internal controls and providing 
truthful and complete disclosures to auditors. 


Source: Securities and Exchange Commission Release No. 
2014-152. “SEC Charges Company CEO and Former CFO 
With Hiding Internal Controls Deficiencies and Violating 
Sarbanes-Oxley Requirements,” July 30, 2014 (www.sec.gov). 


PARTS OF THE AUDIT OF INVENTORY 
Now that you are familiar with the business functions and the related documents and OBJECTIVE 21-200 


records in the inventory and warehousing cycle, we turn our attention to the audit of 
h le. Th rall objective in the audit of the inventory and warehousing cycle *P.3" ‘he five parts of the audit 
¢ € cyc Ce € overall objec : : - y § y of the inventory and warehous- 
is to provide assurance that the financial statements fairly account for raw materials, _ ing cycle. 
work-in-process, finished goods inventory, and cost of goods sold. 
The audit of the inventory and warehousing cycle can be divided into five activi- 
ties within the cycle: 


1. Acquire and record raw materials, labor, and overhead 
Internally transfer assets and costs 

Ship goods and record revenue and costs 

Physically observe inventory 

Price and compile inventory 


Vi kWN 


This part of the audit includes the first three functions in Figure 21-2. These include 
processing purchase orders, receiving raw materials, and storing raw materials. 

The auditor obtains an understanding of internal controls over these three functions 
and then performs tests of controls and substantive tests of transactions in both the 
acquisition and payment cycle and the payroll and personnel cycle. These tests should 
satisfy auditors that controls affecting the acquisitions of raw materials and manufactur- 
ing costs are operating effectively and that acquisition transactions are correctly stated. 
When direct labor is a significant part of manufactured inventory, auditors should 
verify the proper accounting for these costs in the payroll and personnel cycle. 


Acquire and Record 
Raw Materials, Labor, 
and Overhead 


Internal transfers of inventory include the fourth and fifth functions in Figure 21-2: 
process the goods and store finished goods. Clients account for these activities in the 
cost accounting records, which are independent of other cycles and are tested as part 
of the audit of the inventory and warehousing cycle. 


Transfer Assets 
and Costs 


FIGURE 21-2. Functions in the Inventory and Warehousing Cycle 
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*Inventory counts are taken and compared with perpetual and book amounts at any stage of the cycle. The auditor compares the documentation related to the receipt, 
movement, and sale of inventory with the physical location of the items to ensure proper cutoff and classification of inventory as raw material, work-in-process, or fin- 
ished goods. A count must ordinarily be taken once a year. If the perpetual inventory system is operating well, this can be done on a cycle basis throughout the year. 

¥ Includes cost information for materials, direct labor, and overhead. 
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Ship Goods and Record 


Revenue and Costs 


Physically Observe 
Inventory 


Price and Compile 
Inventory 
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Recording shipments and related costs is the last function shown in Figure 21-2. 
Because it is part of the sales and collection cycle, auditors obtain an understanding 
and test internal controls over recording shipments as a part of auditing that cycle, 
including procedures to verify the accuracy of the credits to inventory recorded in 
perpetual inventory master files. 


Auditors are required by auditing standards to observe the client taking a physical 
inventory count to determine whether recorded inventory actually exists at the bal- 
ance sheet date and is correctly counted by the client. Physical examination is an 
essential type of evidence used to verify the existence and count of inventory. The 
story at the beginning of this chapter, when auditors failed to uncover Phar-Mor’s 
fraud, demonstrates the importance of physically observing inventories, especially 
when those inventories are material to the financial statements. 


Costs used to value inventory must be tested to determine whether the client has cor- 
rectly followed an inventory method that is both in accordance with accounting stan- 
dards and consistent with previous years. Audit procedures used to verify these costs 
are called price tests. In addition, the auditor must perform inventory compilation 
tests, which are tests to verify whether the physical counts were correctly summa- 
rized, the inventory quantities and prices were correctly extended, and the extended 
inventory correctly footed to equal the general ledger inventory balance. 

Figure 21-3 summarizes the five parts of the audit of the inventory and warehous- 
ing cycle. Because of the interrelationships of the inventory and warehousing cycle 
with other cycles, some parts of the audit of inventory are most efficiently tested with 
the audit tests of other cycles. As noted in Figure 21-3, auditors test the acquisition and 
recording of raw materials, labor, and overhead as part of the audit of the acquisition 
and payment and payroll and personnel cycles. Also, they test shipment of goods and 
recording of revenue and related costs in the audit of the sales and collection cycle. 
Because we have already discussed obtaining an understanding of internal controls 
and tests of controls and substantive tests of transactions for these other cycles in ear- 
lier chapters, they are not repeated here (the first and third boxes in Figure 21-3). 

The physical observation of inventory and the pricing and compilation of the 
inventory are audited using substantive analytical procedures and tests of details of 


FIGURE 21-3 | Audit of Inventory 
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Ship goods and 
record revenue 
and costs 


Physically observe Inventory and 
inventory warehousing 


Price and compile Inventory and 
inventory warehousing 


Sales and 
collection 
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balances (the last two boxes in Figure 21-3). In doing so, the auditor must consider 
business and inherent risks, set performance materiality for inventory, and evaluate 
the results of the tests of controls and substantive tests of transactions for the transac- 
tions and activities in the first three boxes in Figure 21-3. As part of the risk assess- 
ment process, the auditor will consider whether any of the identified risks of material 
misstatement is considered a significant risk. This is the same methodology that we 
discussed in Chapters 14-20 for other cycles. The remainder of the chapter deals with 
the parts of the audit of inventory in Figure 21-3 that are tested as part of the inventory 
and warehousing cycle, including the use of analytical procedures, tests of the physi- 
cal inventory observation, and inventory pricing and compilation tests. 


AUDIT OF COST ACCOUNTING 


Our discussion of the audit of cost accounting begins with the internal transfer of 
assets from raw materials to work-in-process to finished goods inventory. We also 
focus on systems and controls related to the transfer of inventory costs, which are 
accounted for in the cost accounting records. 

Cost accounting systems and controls of different companies vary more than 
most other audit areas because of the wide variety of items of inventory and the level 
of sophistication desired by management. For example, a company that manufactures 
farm machines may have completely different cost records and internal controls 
than a steel fabricating shop that makes and installs custom-made metal cabinets. Of 
course, small companies with owners actively involved in the manufacturing process 
need less sophisticated records than large, multiproduct companies. 


Cost accounting controls are those related to processes affecting physical inventory 
and the tracking of related costs from the time raw materials are requisitioned to the 
completion of the manufactured product and its transfer to storage. It is convenient to 
divide these controls into two broad categories: 


1. Physical controls over raw materials, work-in-process, and finished goods 
inventory 
2. Controls over the related costs 


Almost all companies need physical controls over their assets to prevent loss 
from misuse and theft. To protect assets, most companies physically segregate and 
restrict access to storage areas for raw material, work-in-process, and finished goods 
to control the movement of inventory. In some instances, managers assign custody 
of inventory to specific individuals who are responsible for protecting the inventory. 
Clients may use approved prenumbered documents for authorizing movement of 
inventory to protect the assets from improper use. Electronic or paper copies of these 
documents should be sent directly to accounting by the persons issuing them, bypass- 
ing people with custodial responsibilities. An example of an effective document of 
this type is an approved materials requisition for obtaining raw materials from the 


Design and perform audit tests 
of cost accounting. 


Cost Accounting 
Controls 


Acquire and record 
raw materials, 
labor, and overhead 
I 
Internally transfer 
assets and costs 
I 
Ship goods and 
record revenue 
and costs 
I 


Physically observe 


storeroom. a 
Perpetual inventory master files maintained by persons who do not have cus- Price and compile 
tody of or access to assets are another useful cost accounting control for a number of inventory 
reasons: 
* They provide a record of inventory on hand, which is used to initiate produc- 
tion or acquisition of additional materials or goods. 
* They provide a record of the use of raw materials and the sale of finished goods, 
which can be reviewed for obsolete or slow-moving items. 
* They provide a record to pinpoint responsibility when there are differences 
between physical counts and the amounts shown on the perpetual listings. 
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Also, adequate internal controls that integrate production and accounting records 
to provide accurate costs for all products are important to aid management in pricing 
finished goods, controlling costs, and costing inventory. 


The concepts in auditing inventory cost accounting are no different from those dis- 
cussed for other transaction cycles: understand internal controls in the cost account- 
ing system, assess planned control risk, determine extent of testing controls, and 
design tests of controls and substantive tests of transactions to meet transaction- 
related audit objectives. The auditor is concerned with four aspects of cost accounting: 


1. Physical controls over inventory 

2. Documents and records for transferring inventory 
3. Perpetual inventory master files 

4. Unit cost records 


Physical Controls Auditor tests of physical controls over raw materials, work-in-pro- 
cess, and finished goods are generally limited to observation and inquiry. Auditors can 
examine the raw materials storage area to determine whether the inventory is protected 
from theft and misuse by locks or other security measures, including an inventory custo- 
dian. They can ask inventory custodians to explain their duties related to their oversight 
of inventory monitored by them. If auditors conclude that the physical controls are so 
inadequate that inventory will be difficult to accurately count, they should expand obser- 
vation of physical inventory tests to make sure that an adequate count is carried out. 


Documents and Records for Transferring Inventory The auditor’s primary con- 
cerns in verifying the transfer of inventory from one location to another are that re- 
corded transfers exist, all actual transfers are recorded, and the quantity, description, 
and date of all recorded transfers are accurate. Products labeled with standardized bar 
codes that can be scanned by laser bar-code readers and other technologies make it 
easier for clients to track the movement of goods through production. 

When auditing inventory transfers, auditors first need to understand the client’s 
internal controls for recording transfers before they can perform relevant tests. After 
they understand the internal controls, they can easily perform tests of controls or 
substantive tests of transactions by examining documents and records to test the 
occurrence and accuracy objectives for the transfer of goods from the raw material 
storeroom to manufacturing. For example, auditors may account for a sequence of 
raw material requisitions, examine the requisitions for proper approval, and compare 
the quantity, description, and date with the information recorded in the raw material 
perpetual inventory master files to verify that related controls operated effectively 
and that amounts are correctly recorded. Some of that testing may be done electroni- 
cally when the related controls are automated. Similarly, the auditor may compare 
completed production records with perpetual inventory master files to be sure that all 
manufactured goods were physically delivered to the finished goods storeroom. 


Perpetual Inventory Master Files The reliability of perpetual inventory master files 
affects the timing and extent of the auditor’s physical examination of inventory. When 
perpetual inventory master files are accurate, auditors can test the physical inventory 
before the balance sheet date. An interim physical inventory or use of cycle counts 
throughout the year can result in significant cost savings for both the client and the 
auditor, and it enables the audit to be completed earlier. The auditor may also reduce 
tests of physical inventory counts when the client has reliable perpetual inventory 
records and assessed control risk related to physical observation of inventory is low. 
Auditors test perpetual inventory master files by examining documentation 
that supports additions and reductions of inventory amounts in the master files. For 
example, as part of the tests of the perpetual records, auditors may examine docu- 
ments supporting inventory activities including the addition of acquired raw material 
inventory, the reduction of raw material inventory for use in production, the increase 
in finished goods inventory when goods have been manufactured, and the decrease 
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when finished goods are sold. Usually, it is relatively easy to test the accuracy of the 
perpetual inventory master files after the auditor determines the adequacy of the 
design and implementation of inventory internal controls and the related level of 
assessed control risk. Auditors test the perpetual records for acquisitions of raw mate- 
rials in the acquisition and payment cycle, while reductions in finished goods for sale 
are tested in the sales and collection cycle. 

For many companies, traditional documents exist only in electronic form and the 
perpetual inventory system is integrated with other accounting cycles. As a result, 
the auditor can test computer controls to support a reduction in control risk, which 
reduces substantive testing and can result in audit efficiencies. 


Unit Cost Records Accurate cost data for raw materials, direct labor, and manu- 
facturing overhead is essential for fairly stated raw materials, work-in-process, and 
finished goods inventories. To maintain accurate cost data, clients must integrate their 
cost accounting records with production and other accounting records. 

When testing inventory cost records, the auditor must first obtain an understand- 
ing of internal control in the cost accounting system. This understanding can be time- 
consuming because the flow of costs is integrated with accounting records in three 
other cycles: acquisition and payment, payroll and personnel, and sales and collection. 

After auditors understand internal controls affecting cost accounting records, the 
approach to internal verification of cost accounting records involves the same concepts that 
were discussed in the verification of acquisition, payroll, and sales transactions. Auditors 
usually test cost accounting records as a part of the acquisition, payroll, and sales tests to 
avoid testing the records more than once and to increase audit efficiency. When testing 
acquisition transactions, auditors should trace the units and unit costs of raw materials to 
additions recorded in the perpetual inventory master files and the total cost to cost account- 
ing records. Similarly, when clients maintain payroll cost data for different jobs, auditors 
should trace from the payroll summary directly to job cost records when they audit payroll. 


COST OF COFFEE Keurig Green Mountain, Inc., sells its Keurig single- roasters. The company recognized these royalties 
cup brewers and over 200 varieties of coffee, cocoa, at the time it purchased K-Cup portion packs from 
teas, and other beverages for its K-Cup portion the roasters and classified them as net sales. The 
packs. In November 2010, the company restated royalties should have been recognized as a reduc- 
its 2008 and 2009 annual financial statements and tion to the carrying value of the related inventory. 
its quarterly financial statements for the first three 
quarters of 2010. The restatements were the result 
of errors management discovered when preparing 
its annual report and during the audit of the financial 
statements for 2010, and as a result of an investiga- 
tion initiated by the audit committee and inquiry of 
the Securities and Exchange Commission (SEC). 

The restatements, which were triggered by a 
number of errors, resulted in a cumulative 3 percent 
overstatement of undistributed earnings for the an- 
nual financial statement period and a 6.2 percent 
overstatement of net income for the first three 
quarters of 2010. Some of the restatements were 
linked to the company’s accounting for inventory: 


The company’s challenges did not end with the 
restatement of the financial statements, as the filing 
of a class action lawsuit soon followed. Among allega- 
tions in the suit, several confidential witnesses who 
worked for Keurig Green Mountain alleged that the 
company moved inventory from location to location 
without a document trail to overstate inventory 
counts. Ironically, one of the company’s critics was 
former criminal Sam E. Antar, who helped orches- 
trate the inventory accounting fraud at Crazy Eddie in 
the 1980s. Antar’s efforts focused on the company’s 
buildup of inventory at rates that were much faster 
than growth in revenues, alleging that the patterns 
looked similar to what had happened at Crazy Eddie 
¢ An $8.1 million cumulative overstatement of pre- during its fraud. Management argued that the inven- 

tax net income over the restatement period was tory buildups were in anticipation of the 2012 holiday 

the result of applying incorrect standard costs season. Interestingly, the company began offering 

to intercompany K-Cup portion pack and K-Cup $50 rebates for its brewers in September 2012. 

brewer inventory balances, which overstated con- 

solidated inventory and understated cost of sales. Sources: |. Form 10-K filed by Green Mountain Coffee Roasters, 

An additional $1 million cumulative overstatement Inc., with the Securities and Exchange Commission, November 

of pre-tax net income over the restatement period 26, 2010; 2. Sam E. Antar, “Green Mountain Coffee Roasters’ 

was due to changes in the timing and classifica- Growing Levels — Is It a Fumble or a Fraud?” Seeking Alpha 

tion of royalties received from third-party licensed (seekingalpha.com), September 27, 2012. 
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Determining the reasonableness of manufacturing overhead costs assigned to 
work-in-process is challenging for auditors because management must make assump- 
tions that affect overhead allocations that can significantly affect the unit costs of 
inventory and therefore the fairness of inventory valuation. In evaluating these over- 
head cost allocations, the auditor must consider the reasonableness of the allocation 
method, assuming the method complies with accounting standards, and whether it is 
consistently applied. 

Management typically allocates overhead using total direct labor dollars as the 
basis for allocation. In this case, the overhead rate should approximate total actual 
manufacturing overhead divided by total actual direct labor dollars. Because auditors 
test total manufacturing overhead as part of the tests of the acquisition and payment 
cycle and test direct labor as part of the payroll and personnel cycle, determining the 
reasonableness of the rate is not difficult. However, if for example, manufacturing 
overhead is applied on the basis of machine hours, the auditor must verify the reason- 
ableness of the machine hours by separate tests of the client’s machine records. 

Because internal controls over cost accounting records vary significantly among 
companies, specific tests of controls are not discussed here. Auditors should design 
appropriate tests based on their understanding of the cost accounting records and the 
extent to which they will be relied on to reduce substantive tests. 


CONCEPT CHECK 
I. Give the reasons why inventory is often the most difficult and time-consuming part of 
many audits. 


2. State what is meant by cost accounting records and explain their importance in the con- 
duct of an audit. 


SUBSTANTIVE ANALYTICAL PROCEDURES 


Apply substantive analytical pro- 
cedures to the accounts in the 
inventory and warehousing cycle. 


Substantive analytical procedures are important in auditing inventory and 
warehousing, as they are in all other cycles. Table 21-1 shows several common analyti- 
cal procedures and possible misstatements that may be indicated when fluctuations 
occur. We've discussed several of those analytical procedures, such as gross margin 
percentage, in relation to other cycles. 

In addition to performing substantive analytical procedures that examine the 
relationship of inventory account balances with other financial statement accounts 


Substantive Analytical Procedures for the Inventory 


Ue and Warehousing Cycle 


Substantive Analytical Procedure Possible Misstatement 


Compare gross margin percentage with that of 
previous years. 


Overstatement or understatement of inventory and cost 
of goods sold. 


Compare inventory turnover (cost of goods sold 
divided by average inventory) with that of previous 
years. 


Obsolete inventory, which affects inventory and 
cost of goods sold. 
Overstatement or understatement of inventory. 


Compare unit costs of inventory with those of 
previous years. 


Overstatement or understatement of unit costs, which 
affect inventory and cost of goods sold. 


Compare extended inventory value with that of 
previous years. 


Misstatements in compilation, unit costs, or extensions, 
which affect inventory and cost of goods sold. 


Compare current year manufacturing costs with those 
of previous years (variable costs should be adjusted 
for changes in volume). 


Misstatements of unit costs of inventory, especially 
direct labor and manufacturing overhead, which affect 
inventory and cost of goods sold. 
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(as shown in Figure 21-1 on page 710), auditors often use nonfinancial information 
to assess the reasonableness of inventory-related balances. For example, auditors may 
need knowledge about the size and weight of inventory products, their methods of 
storage (stacks, tanks, etc.), and the capacity of storage facilities (available square foot- 
age) to determine whether recorded inventory is consistent with available inventory 
storage. After performing the appropriate tests of the cost accounting records and 
substantive analytical procedures, auditors have a basis for designing and performing 
tests of details of the ending inventory balance. 


PHYSICAL OBSERVATION OF INVENTORY 
Because inventory varies significantly for different companies, obtaining an under- OBJECTIVE 21-500 


standing of the client’s industry and business is more important for both physical 
inventory observation and inventory pricing and compilation than for most audit areas. 
Examples of key considerations that auditors should consider include the inventory 


Design and perform physi- 
cal observation audit tests for 
inventory. 
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valuation method selected by management, the potential for inventory obsolescence, 
and the risk that consignment inventory might be intermingled with owned inventory. 
Auditors should evaluate whether risks related to inventory qualify as significant risks. 

Auditors often first familiarize themselves with the client’s inventory by conduct- 
ing a tour of the client’s inventory facilities, including receiving, storage, production, 
planning, and record-keeping areas. The tour should be led by a supervisor who can 
answer questions about production, especially about any changes in internal controls 
and other processes since last year. 

While gaining an understanding of the effect of the client’s business and industry 
on inventory, auditors assess client business risk to determine if those risks increase 
the likelihood of material misstatements in inventory. Examples of common sources 
of business risk for inventory include short product cycles, potential obsolescence, 
use of just-in-time inventory, reliance on a few key suppliers, and use of sophisticated 
inventory management technology. 

After assessing client business risk, the auditor determines performance mate- 
riality and assesses inherent risk for inventory, which is typically highly material for 
manufacturing, wholesale, and retail companies. Auditors often assess a high inher- 
ent risk for companies with significant inventory, depending on the circumstances. 
Auditors often have a greater concern for misstatements when inventory is stored in 
multiple locations, the costing method is complex, and the potential for inventory 
obsolescence is great. 

When assessing control risk, the auditor is primarily concerned with internal 
controls over perpetual records, physical controls, inventory counts, and inventory 
compilation and pricing. The nature and extent of these controls vary widely from 
company to company. 


Auditors have been required to perform physical observation tests of inventory since 
a major fraud involving the recording of nonexisting inventory was uncovered in 1938 
at the McKesson & Robbins Company. The fraud was not discovered because the audi- 
tors did not physically observe the inventory, which at the time was not required. 

Auditing standards require auditors to satisfy themselves about the effectiveness 
of the client’s methods of counting inventory and the reliance they can place on the 
client’s representations about the quantities and physical condition of the inventories. 
To meet the requirement, auditors must: 


* Be present at the time the client counts its inventory for determining year-end 
balances 

* Observe the client’s counting procedures 

* Make inquiries of client personnel about their counting procedures 

¢ Make their own independent tests of the physical count 


Acquire and record 
raw materials, 
labor, and overhead 


Internally transfer 
assets and costs 


Ship goods and 
record revenue 
and costs 


Physically observe 
inventory 


Price and compile 
inventory 


Inventory Observation 


Requirements 
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Controls Over 
Physical Count 


Audit Decisions 
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An essential point in the auditing standards is the distinction between who 
observes the physical inventory count and who is responsible for taking the count. 
The client is responsible for setting up the procedures for taking an accurate physical 
inventory and actually making and recording the counts. The auditor is responsible 
for evaluating and observing the client’s procedures, including doing test counts of 
the inventory and drawing conclusions about the adequacy of the physical inventory. 

An auditor’s physical examination of inventory is not required if inventory is 
housed in a public warehouse or overseen by outside custodians. In those situations, 
auditors verify inventory by confirmation with the custodian. However, if inventory 
stored with outside custodians represents a significant portion of current assets or 
total assets, the auditor should apply additional procedures, such as investigating the 
custodian’s inventory procedures, obtaining an independent accountant’s report on 
the custodian’s control procedures over the custody of goods, or observing the physi- 
cal count of the goods held by the custodian, if practical. 


Regardless of the inventory record-keeping method, the client must make a periodic 
physical count of inventory, but not necessarily every year. The physical count may 
be performed at or near the balance sheet date, at an interim date, or on a cycle basis 
throughout the year. The latter two approaches are appropriate only if there are ade- 
quate controls over the perpetual inventory master files. 

Adequate controls over the client’s physical count of inventory include proper cli- 
ent instructions for the physical count, supervision by responsible company person- 
nel, independent internal verification of the counts by other client personnel, inde- 
pendent reconciliations of the physical counts with perpetual inventory master files, 
and adequate client control over count sheets or tags used to record inventory counts. 

Auditors need to understand the client’s physical inventory count controls before 
the count of inventory begins. While this understanding is necessary to evaluate the 
effectiveness of the client’s procedures, it also enables the auditor to make constructive 
suggestions beforehand. Obviously, if the client’s physical inventory count controls are 
inadequate, the auditor must spend more time making sure that the physical count is 
accurate. 


The auditor's decisions in the physical observation of inventory are similar to those made 
for other audit areas. They include selecting audit procedures, deciding the timing of the 
procedures, determining sample size, and selecting items for testing. The last three deci- 
sions are discussed next, followed by a discussion of the appropriate audit procedures. 


Timing The auditor decides whether the physical count can be taken before year-end 
primarily on the basis of the accuracy of the perpetual inventory master files. When 
a client does an interim physical count, which the auditor will agree to only when 
internal controls are effective, the auditor observes the inventory count at that time, 
and also tests transactions recorded in the perpetual inventory records from the date 
of the count to year-end. When the perpetual records are accurate and related controls 
operate effectively, it may be unnecessary for the client to count all the inventory at 
year-end. Instead, the auditor can compare the perpetuals with the actual inventory 
on a sample basis at convenient times throughout the year, as long as controls over 
additions and reductions to the perpetual records are tested and found to operate ef- 
fectively. When there are no perpetuals and the inventory is material, the client must 
take a complete physical inventory near the end of the accounting period. 


Sample Size The number of inventory items auditors should count is difficult to 
specify because auditors concentrate on observing the client’s procedures rather than 
on selecting items for testing. For convenience, sample size in physical observation 
may be considered in terms of the total number of hours spent rather than the num- 
ber of inventory items counted. The key determinants of the amount of time needed 
to test inventory are the adequacy of internal controls over the physical counts, 
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accuracy of the perpetual inventory master files, total dollar amount and type of 
inventory, number of different significant inventory locations, nature and extent of 
misstatements discovered in previous years, and other inherent risks. 

In some situations, inventory is so material that it requires dozens of auditors to 
observe the physical count. In other situations, one auditor can complete the observa- 
tion in a short time. Audit planning for inventory count testing and coordination with 
client personnel is critical. Poor planning may lead to audit difficulties. For example, 
it is impossible to observe client personnel counting inventory after they have com- 
pleted their counts and it is difficult to expand sample sizes or reperform tests after 
the physical inventory has been taken. 


Selection of Items When auditors observe the client counting inventory, they should 
be careful to: 


* Observe the counting of the most significant items and a representative sample 
of typical inventory items 

¢ Inquire about items that are likely to be obsolete or damaged 

* Discuss with management the reasons for excluding any material items 


The same balance-related audit objectives discussed in previous sections for tests of 
details of balances provide a frame of reference for discussing the physical observation 
tests. However, before discussing those objectives, some overall comments about the 
client’s inventory process are important to consider. 

The most important part of the observation of inventory is determining whether 
the physical count is being taken in accordance with the client’s instructions. To do 
this effectively, it is essential that the auditor be present while the physical count is tak- 
ing place. 

When the client’s employees are not following the inventory instructions, the 
auditor must either contact the supervisor to correct the problem or modify the phys- 
ical observation procedures. For example, if the procedures require one team to count 
the inventory and a second team to recount it as a test of accuracy, the auditor should 
inform management if both teams are observed counting together. 

Table 21-2 (p. 722) lists common tests of details of balances audit procedures 
for physical inventory observation. Detail tie-in is the only balance-related audit 
objective not included. That balance-related objective is discussed under compila- 
tion of inventory. In the discussion that follows, we assume that the client counts 
inventory on the balance sheet date and records the inventory counts on prenum- 
bered tags. When clients record inventory counts in a different way, audit proce- 
dures will vary. In addition to the detailed procedures in Table 21-2, the auditor 
should also inspect all physical areas where inventory is warehoused to make sure 
that all inventory has been counted and properly tagged. Boxes or other containers 
holding inventory should also be opened during test counts to be certain inventory 
is physically present. As part of their substantive analytical procedures performed 
after the client has completed the inventory counts, auditors may compare high- 
dollar-value inventory to counts in the previous year and inventory master files as 
a test of reasonableness. 


Physical Observation 
Tests 


AUDIT OF PRICING AND COMPILATION 


Auditors must verify that the physical counts or perpetual record quantities are cor- 
rectly priced and compiled. Inventory price tests include all the tests of the client’s 
unit prices to determine whether they are correct. Inventory compilation tests include 
testing the client’s summarization of the inventory counts, recalculating price times 
quantity, footing the inventory summary, and tracing the totals to the general ledger. 


Design and perform audit tests 
of pricing and compilation for 
inventory. 
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TABLE 21-2 
Balance-Related Audit 
Objective 


Inventory as recorded on tags 
exists (existence). 


Balance-Related Audit Objectives and Tests of Details of Balances 
for Physical Inventory Observation 


Common Inventory Observation Procedures 


Select a random sample of tag numbers and identify the tag with 
that number attached to the actual inventory. 

Observe whether movement of inventory takes place during the 
count. 


Comments 


The purpose is to uncover the inclusion of nonexis- 
tent items as inventory. 


Existing inventory is counted 
and tagged, and tags are 
accounted for to make 
sure none are missing 
(completeness). 


Examine inventory to make sure it is tagged. 

Observe whether movement of inventory takes place during the 
count. 

Inquire as to inventory in other locations. 

Account for all used and unused tags to make sure none are lost 
or intentionally omitted. 

Record the tag numbers for those used and unused for subse- 
quent follow-up. 


Special concern should be directed to omission of 


This test should be done at the completion of the 


This test should be done at the completion of the 


large sections of inventory. 


physical count. 


physical count. 


Inventory is counted accurately 
(accuracy). 


Recount client’s counts to make sure the recorded counts are 
accurate on the tags (also check descriptions and unit of 
count, such as dozen or gross). 

Compare physical counts with perpetual inventory master file. 

Record client’s counts for subsequent testing. 


Recording client counts in the audit files on inven- 


tory count sheets is done for two reasons: to 
obtain documentation that an adequate physical 
examination was made and to test for the pos- 
sibility that the client might change the recorded 
counts after the auditor leaves the premises. 


Inventory is classified correctly 
on the tags (classification). 


Examine inventory descriptions on the tags and compare with 
the actual inventory for raw material, work-in-process, and 
finished goods. 

Evaluate whether the percent of completion recorded on the 
tags for work-in-process is reasonable. 


These tests will be done as a part of the first 


procedure in the accuracy objective. 


Information is obtained to 
make sure sales and inven- 
tory purchases are recorded 


in the proper period (cutoff). 


Record in the audit files for subsequent follow-up the last ship- 
ping document number used at year-end. 

Make sure the inventory for the above item was excluded from 
the physical count. 

Review shipping area for inventory set aside for shipment but 
not counted. 

Record in the audit files for subsequent follow-up the last receiv- 
ing report number used at year-end. 

Make sure the inventory for the above item was included in the 
physical count. 

Review receiving area for inventory that should be included in 
the physical count. 


Obtaining proper cutoff information for sales and 


acquisitions is an essential part of inventory 
observation. The appropriate tests were dis- 
cussed for sales in Chapter |6 and for acquisi- 
tions in Chapter 18. 


Obsolete and unusable inven- 
tory items are excluded or 
noted (realizable value). 


Test for obsolete inventory by inquiry of factory employees and 
management and alertness for items that are damaged, rust- 
or dust-covered, or located in inappropriate places. 


The client has rights to inven- 


tory recorded on tags (rights). 


Inquire about consignment or customer inventory included on 
client’s premises. 

Be alert for inventory that is set aside or specifically marked as 
indications of non-ownership. 


Pricing and Compilation 


Controls 


Adequate internal controls surrounding the tracking of unit costs that are integrated 
with production and other accounting records provide assurance that clients use rea- 
sonable costs for valuing ending inventory. Standard cost records that indicate vari- 
ances in material, labor, and overhead costs are helpful to evaluate the reasonableness 
of production records if management has procedures in place to keep the standards 
updated for changes in production processes and costs. Management should also have 
someone independent of the department responsible for determining the costs review 


them for reasonableness. 


To prevent including or overstating the value of obsolete inventory, clients 
should have a formal review and reporting of obsolete, slow-moving, damaged, and 


Arens, Alvin, et A3@diting and AssuRare Spwvide8PEBGAT EDDA GAD PeatIDIFCR RDG ASGITED ZDTRERCUAC EDK Central, 


Created from undip-ebooks on 2021-08-02 01:36:11. 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


overstated inventory items. The review should be done by a knowledgeable employee 
who reviews perpetual inventory master files for inventory turnover and holds dis- 
cussions with engineering or production personnel. 

Clients need inventory compilation internal controls to ensure that the physical 
counts are correctly summarized, priced at the same amount as the unit records, cor- 
rectly extended and totaled, and included in the perpetual inventory master file and 
related general ledger inventory accounts at the proper amount. The most important 
internal control for accurate unit costs, extensions, and footings is internal verifica- 
tion by a competent, independent person who relies on adequate documents and 
records that were used for taking the physical count. If the physical inventory counts 
are recorded by the client on prenumbered tags and carefully reviewed before the 
personnel who counted the inventory are released from the physical examination 
of inventory, there should be little risk of misstatement in summarizing inventory 
count tags. 


Table 21-3 (p. 724) lists the audit objectives and related tests for inventory pricing 
and compilation, except for the cutoff objective. As we've already discussed, physical 
observation is a major source of cutoff information for sales and purchases. Tests of 
the accounting records for cutoff are done as a part of sales (sales and collection cycle) 
and acquisitions (acquisition and payment cycle). 

Auditors can apply the objectives using information obtained from the client as a 
frame of reference, including each inventory item’s description, quantity, unit price, and 
extended value. We assume the information reflected in the inventory perpetual listing 
is recorded in inventory item description order, with raw material, work-in-process, and 
finished goods listed separately. The listing totals should equal the general ledger balance. 


In performing inventory valuation tests (often called price tests), the auditor has three 
concerns. First, the method must be in accordance with accounting standards. Second, 
the application of the method must be consistent from year to year. Third, inventory 
cost versus market value (replacement cost or net realizable value) must be considered. 
Because the method of verifying the pricing of inventory depends on whether inventory 
items are acquired or manufactured, these two categories are discussed separately. 


Pricing Purchased Inventory The primary types of inventory included in this cat- 
egory are raw materials, purchased parts, and supplies. As a first step in verifying the 
valuation of purchased inventory, the auditor must determine whether the client uses 
LIFO, FIFO, weighted average, or some other valuation method. Auditors must also 
determine which costs should be included in the valuation of an item of inventory. 
For example, the auditor must find out whether freight, storage, discounts, and other 
costs are included and the auditor must compare the findings with the preceding year 
to make sure that the costs are determined consistently. 

In selecting specific inventory items for pricing, auditors should focus on larger 
dollar amounts and on products that are known to have wide fluctuations in price. 
They should also test a representative sample of all types of inventory and departments. 
Stratified variables or monetary unit sampling is commonly used for these tests. 

The auditor should list the inventory items to be verified for pricing and request 
the client to locate the appropriate vendors’ invoices. The auditor must examine suffi- 
cient invoices to account for the entire quantity of inventory for the item being tested, 
especially for the FIFO valuation method. Assume that the client values an inventory 
item at $12.00 per unit for 1,000 units, using FIFO. When the auditor examines the 
most recent invoices for acquisitions of that inventory item, she finds that the most 
recent acquisition of the inventory item in the year being audited was for 700 units 
at $12.00 per unit, and the immediately preceding acquisition was for 600 units at 
$11.30 per unit. Using correct FIFO valuation techniques, the inventory items should 
be included at $11,790 (700 units at $12 and 300 at $11.30). The client’s calculations 


Acquire and record 
raw materials, 
labor, and overhead 


Internally transfer 
assets and costs 


Ship goods and 
record revenue 
and costs 


Physically observe 
inventory 


Price and compile 
inventory 


Pricing and Compilation 


Procedures 
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TABLE 21-3 


Balance-Related Audit Common Inventory Pricing and 


Inventory in the inventory list- 
ing schedule agrees with the 
physical inventory counts, the 
extensions are correct, and 


Objective Compilation Procedures Comments 
Perform compilation tests (see existence, completeness, and Unless controls are deficient, limit extending and 
accuracy objectives). footing tests (which are often done using audit 
Foot the inventory listing schedules for raw materials, work-in- software). 


and agrees with the general 
ledger (detail tie-in). 


Balance-Related Audit Objectives and Tests of Details of Balances 
for Inventory Pricing and Compilation 


the total is correctly added Trace the totals to the general ledger. 
Extend the quantity times the price on selected items. 


process, and finished goods. 


Inventory items in the inven- Trace inventory listed in the schedule to inventory tags and The next five objectives are affected by the results 
tory listing schedule exist auditor’s recorded counts for existence and description. of the physical inventory observation. The tag 
(existence). Account for unused tag numbers shown in the auditor's numbers and counts verified as a part of physical 

documentation to make sure no tags have been added. inventory observation are traced to the inven- 


tory listing schedule as a part of these tests. 


Existing inventory items are Trace from inventory tags to the inventory listing schedules and 
included in the inventory list- make sure inventory on tags is included. 
ing schedule (completeness). Account for tag numbers to make sure none have been 
deleted. 


listing schedule are accurate 
(accuracy). 


Inventory items in the inventory Trace inventory listed in the schedule to inventory tags and 


Perform price tests of inventory. For a discussion of price tests, 


auditor’s recorded counts for quantity and description. 


see the text material throughout this “Audit of Pricing and 
Compilation” section on pages 721-725. 


listing schedule are correctly 
classified (classification). 


Inventory items inthe inventory _ Verify the classification into raw materials, work-in-process, and 


finished goods by comparing the descriptions on inventory 
tags and auditor’s recorded test counts with the inventory 
listing schedule. 


Inventory items in the inventory 
listing are stated at realizable 
value (realizable value). 


Perform tests of lower of cost or market, selling price, and 


obsolescence. 


tory items in the inventory 
listing schedule (rights). 


The client has rights to inven- Trace inventory tags identified as non-owned during the physical 


Review contracts with suppliers and customers and inquire of 


observation to the inventory listing schedule to make sure 
these have not been included. 


management for the possibility of the inclusion of consigned 
or other non-owned inventory, or the exclusion of owned 
inventory. 
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overstate inventory by $210.00 ($12,000 — $11,790). Assuming the client makes this 
same error on many inventory items, the misstatement amount can be material. 

When the client has perpetual inventory master files that include unit costs of 
acquisitions, it is usually much faster to test the pricing by tracing the unit costs to 
the perpetuals rather than to vendors’ invoices. Naturally, when perpetual inventory 
records are used to verify unit costs, auditors must test the unit costs recorded in the 
perpetual records to vendors’ invoices as a part of the tests of the acquisition and pay- 
ment cycle transactions. 


Pricing Manufactured Inventory In pricing work-in-process and finished goods, 
the auditor must consider the cost of raw materials, direct labor, and manufactur- 
ing overhead. The need to verify each of these makes the audit of work-in-process 
and finished goods inventory more complex than the audit of purchased inventory. 
Nevertheless, several considerations that apply to the audit of purchased inventory 
still apply, such as selecting the items to be tested, testing for whether cost or market 
value is lower, and evaluating the possibility of obsolescence. 
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In pricing raw materials in manufactured products, auditors must consider both the 
unit cost of the raw materials and the number of units required to manufacture a unit 
of output. The unit cost can be verified in the same manner as that used for other pur- 
chased inventory, by examining vendors’ invoices or perpetual inventory master files. 
Auditors must examine engineering specifications, inspect the finished product, or find 
a similar method to determine the number of units it takes to manufacture a product. 

Similarly, while testing direct labor, auditors must verify the hourly costs of direct 
labor and the number of hours it takes to manufacture a unit of output. Hourly labor 
costs can be verified by examining labor payroll or union contracts. Auditors can 
determine the number of hours needed to manufacture the product from engineering 
specifications or similar sources. 

The proper manufacturing overhead in work-in-process and finished goods 
depends on the approach the client uses to allocate manufacturing overhead. Auditors 
must evaluate for consistency and reasonableness the method being used and recom- 
pute the costs to determine whether the overhead is correct. For example, if the rate is 
based on direct labor dollars, the auditor can divide the total manufacturing overhead 
by the total direct labor dollars to determine the actual overhead rate. This rate can 
then be compared with the overhead rate used by the client to determine unit costs. 
Testing of pricing for work-in-process and finished goods is often done in conjunc- 
tion with tests of standard costs. When auditors have tested standard costs with sat- 
isfactory results, they can limit testing of the unit costs of ending inventory to tracing 
the price used to value ending inventory to the standard cost records. 

When the client has standard cost records, an efficient and useful method of 
determining valuation is to review and analyze variances. Small variances in material, 
labor, and manufacturing overhead are evidence of reliable cost records. 


Cost or Market In pricing inventory, auditors must consider whether market value 
is lower than historical cost. The determination of market value (replacement cost 
or net realizable value) depends on the costing method used. For purchased finished 
goods and raw materials, auditors can test for replacement cost by examining vendor 
invoices of the subsequent period or recent invoices if no purchases of an inventory 
item were made after year-end. All manufacturing costs must be considered in evalu- 
ating realizable value for work-in-process and finished goods for manufactured inven- 
tory. Auditors must consider the sales value of inventory items and the possible effect 
of rapid fluctuation of prices to determine net realizable value. 


CONCEPT CHECK 


1. Explain why a proper cutoff of purchases and sales is heavily dependent on the physical 
inventory observation. What information should be obtained during the physical count 
to ensure that cutoff is accurate? 


2. Explain the importance of documenting used, unused, and voided tags at the end of the 
physical inventory observation. How will the auditor use this information in follow-up in- 
ventory testing? 

3. A client applies manufacturing overhead to inventory on the basis of $3.47 per direct 
labor hour. Explain how the auditor will evaluate the reasonableness of total direct labor 
hours and manufacturing overhead in the ending inventory of finished goods. 


INTEGRATION OF THE TESTS 


Figure 21-4 (p. 726) and the discussions that follow summarize and illustrate the audit 
of the inventory and warehousing cycle as a series of integrated tests. 


Tests of the Acquisition and Payment Cycle When auditors verify inventory ac- 
quisitions as part of the tests of the acquisition and payment cycle, they are also ob- 
taining evidence about the accuracy of raw materials acquired and all manufacturing 


Integrate the various parts of the 
audit of the inventory and ware- 
housing cycle. 
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FIGURE 21 


-4—‘Interrelationship of Various Audit Tests 


Tests of 
acquisition and 
payment cycle 


Raw materials 


Beginning 
inventory 
+ 
Acquisitions 
of 
raw materials 


Ending inventory 


Raw material 
used 


Work-in-process 


Beginning 
inventory 
+ 
Direct labor 
+ 
Raw material 
used 


Tests of payroll 
and personnel cycle 
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+ 
Indirect labor 
and other 
manufacturing 
overhead 


Ending Finished goods 


inventory 


Cost of goods 
manufactured 


Inventory tests 
Beginning inventory 
+ 
Cost of goods 


° Tests of cost accounting records manufactured 


° Tests of physical inventory observation =. 
Ending 


° Tests of pricing and compilation : : 
inventory 


Cost of 
goods sold 


Tests of 
sales and 
collection cycle 


overhead costs incurred except labor. These acquisition costs either flow directly into 
cost of goods sold or become the largest part of the ending inventory of raw material, 
work-in-process, and finished goods. In audits where clients have perpetual inventory 
master files, auditors commonly test these as a part of tests of controls and substan- 
tive tests of transactions procedures performed in the acquisition and payment cycle. 
Similarly, if manufacturing costs are assigned to individual jobs or processes, they are 
usually tested as a part of the same cycle. 


Tests of the Payroll and Personnel Cycle When auditors verify labor costs, the 
same conditions apply as for acquisitions. In most cases, the cost accounting records 
for direct and indirect labor costs can be tested as part of the audit of the payroll and 
personnel cycle. 


Tests of the Sales and Collection Cycle The relationship between the sales and collec- 
tion cycle and the inventory and warehousing cycle is not as interwoven as the two cycles 
we just discussed. Nonetheless, most of the audit testing in the storage of finished goods, 
as well as the shipment and recording of sales, takes place when the sales and collection 
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cycle is tested. When the client uses standard cost records, auditors may be able to test the 
standard cost of goods sold at the same time that sales tests are performed. 


Tests of Cost Accounting Tests of cost accounting records are meant to verify the 
controls affecting inventory that auditors did not verify as part of testing in the pre- 
ceding three cycles. Auditors test the physical controls, transfers of raw material costs 
to work-in-process, transfers of costs of completed goods to finished goods, perpetual 
inventory master files, and unit cost records. 


Physical Inventory, Pricing, and Compilation Physical inventory, pricing, and com- 
pilation are each equally important in the audit of inventory because a misstatement 
in any one activity results in misstated inventory and cost of goods sold. In most 
audits, cost of goods sold is a residual of beginning inventory plus acquisitions of 
raw materials, direct labor, and other manufacturing costs minus ending inventory. 
Because cost of goods sold is a residual and often one of the largest accounts on the 
income statement, the importance of auditing ending inventory becomes obvious. 

In testing physical inventory, auditors may rely heavily on the perpetual inven- 
tory master files if they have been tested as a part of one or more of the cycles we’ve 
discussed and are considered reliable. When that is the case, auditors can observe and 
test the physical count at a time other than year-end and rely on the perpetuals to keep 
adequate records of the quantities. 

When testing the unit costs, auditors may also rely, to some degree, on the tests 
of the cost records made during the substantive tests of transactions. Standard cost 
records are also useful for comparison with the actual unit costs. When standard costs 
are used to represent historical cost, they must be tested for reliability. 

Finally, as auditors test controls and perform substantive tests related to inventory 
transactions and balances, they also integrate tests related to balance-related audit objec- 
tives with tests performed to satisfy the four presentation and disclosure objectives. 
Accounting standards require disclosure of inventory valuation methods and other 
relevant inventory information, such as LIFO reserve information, in the footnotes. The 
auditor should obtain an understanding of client controls related to inventory disclo- 
sures and perform tests of those controls and other substantive tests to obtain sufficient 
appropriate evidence for each of the four presentation and disclosure objectives. 


SUMMARY 


In this chapter, we discussed the audit of the inventory and warehousing cycle. Because of 
the difficulties associated with establishing the existence and valuation of inventories, the 
cycle is often the most time-consuming and complex part of the audit. This cycle is also 
unique because many of the tests of the inputs to the cycle are tested as part of the audit of 
other cycles. Tests performed as part of the inventory and warehousing cycle focus on cost 
accounting records, physical observation, and tests of the pricing and compilation of the 
ending inventory balance. 


ESSENTIAL TERMS 


Cost accounting controls—controls turing and processing of the goods and 
over physical inventory and the related __ storing of finished goods 


costs from the point at which raw materi- Inventory and warehousing cycle—the 
als are requisitioned to the point at which transaction cycle that involves the physical 
the manufactured product is completed flow of goods through the organization, as 
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and transferred to storage qrellaecebted Gasts 
Cost accounting records—the account- _Ipventory compilation tests—audit pro- 
ing records concerned with the manufac- cedures used to verify whether physical 
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counts of inventory are correctly summa- 
rized, inventory quantities and prices are 
correctly extended, and extended inven- 
tory is correctly footed 


Inventory price tests—audit procedures 
used to verify the costs used to value physi- 
cal inventory 


Job cost system—system of cost account- 
ing in which costs are accumulated by indi- 
vidual jobs when material is used and labor 
costs are incurred 


inventory items purchased, used, sold, and 
on hand for merchandise, raw materials, 
and finished goods 


Process cost system—system of cost 
accounting in which costs are accumu- 
lated for a process, with unit costs for each 
process assigned to the products passing 
through the process 


Standard cost records—trecords that in- 
dicate variances between projected mate- 
rial, labor, and overhead costs and the ac- 


Perpetual inventory master file—a con- tual costs 


tinuously updated computerized record of 


REVIEW QUESTIONS 


21-1 (OBJECTIVES 21-1, 21-2, 21-7) Explain the relationship between the acquisition and payment 
cycle and the inventory and warehousing cycle in the audit of a manufacturing company. List 
several audit procedures in the acquisition and payment cycle that support your explanation. 


21-2 (OBJECTIVE 21-3) Many auditors assert that certain audit tests can be significantly 
reduced for clients with adequate perpetual records that include both unit and cost data. 
What are the most important tests of the perpetual records that the auditor must make 
before reducing assessed control risk? Assuming the perpetuals are determined to be 
accurate, which tests can be reduced? 


21-3 (OBJECTIVE 21-4) List the major substantive analytical procedures for testing the over- 
all reasonableness of inventory. For each test, explain the type of misstatement that could 
be identified. 


21-4 (OBJECTIVES 21-4, 21-5, 21-6) In the verification of the amount of inventory, one of the 
auditor’s concerns is that slow-moving and obsolete items be identified. List the auditing 
procedures that can be used to determine whether slow-moving or obsolete items have 
been included in inventory. 


21-5 (OBJECTIVE 21-5) Before the physical examination, the auditor obtains a copy of the 
client’s inventory instructions and reviews them with the controller. In obtaining an 
understanding of inventory procedures for a small manufacturing company, these defi- 
ciencies are identified: Shipping operations will not be completely halted during the phys- 
ical examination, and there will be no independent verification of the original inventory 
count by a second counting team. Evaluate the importance of each of these deficiencies 
and state its effect on the auditor’s observation of inventory. 


21-6 (OBJECTIVE 21-5) During the taking of physical inventory, the controller intentionally 
withheld several inventory tags from the employees responsible for the physical count. 
After the auditor left the client’s premises at the completion of the inventory observation, 
the controller recorded nonexistent inventory on the tags and thereby significantly over- 
stated earnings. How could the auditor have uncovered the misstatement, assuming that 
there are no perpetual records? 


21-7 (OBJECTIVE 21-5) At the completion of an inventory observation, the controller 
requested the auditor to give him a copy of all recorded test counts to facilitate the correc- 
tion of all discrepancies between the client’s and the auditor’s counts. Should the auditor 
comply with the request? Why? 

21-8 (OBJECTIVE 21-5) What major audit procedures are involved in testing for the owner- 
ship of inventory during the observation of the physical counts and as a part of subse- 
quent valuation tests? 


21-9 (OBJECTIVE 21-5) Assuming that the auditor properly documents receiving report 
numbers as a part of the physical inventory observation procedures, explain how the 
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proper cutoff of purchases, including tests for the possibility of raw materials in transit, 
should be verified later in the audit. 


21-10 (OBJECTIVE 21-6) Define what is meant by compilation tests. List several examples of 
audit procedures to verify compilation. 


21-11 (OBJECTIVE 21-6) Included in the December 31, 2016, inventory of the Wholeridge 
Supply Company are 2,600 deluxe ring binders in the amount of $5,902. An examination 
of the most recent acquisitions of binders showed the following costs: January 26, 2017, 
2,300 at $2.42 each; December 6, 2016, 1,900 at $2.28 each; November 26, 2016, 2,400 at 
$2.07 each. What is the misstatement in valuation of the December 31, 2016, inventory for 
deluxe ring binders, assuming FIFO inventory valuation? What would your answer be if 
the January 26, 2017, acquisition was for 2,300 binders at $2.12 each? 


21-12 (OBJECTIVE 21-7) Each employee of the Gedding Manufacturing Co., a firm using a job- 
cost inventory costing method, must reconcile his or her total hours worked with the hours 
worked on individual jobs using a job time sheet at the time weekly payroll time cards are 
prepared. The job time sheet is then stapled to the time card. Explain how you could test the 
direct labor dollars included in inventory as a part of the payroll and personnel tests. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


21-13 (OBJECTIVES 21-1,21-3) The following questions concern internal controls, and the test- 
ing of internal controls, in the inventory and warehousing cycle. Choose the best response. 


a. For control purposes, the quantities of materials ordered may be omitted from the 
copy of the purchase order that is 
(1) returned to the requisitioner. 
(2) forwarded to the receiving department. 
(3) forwarded to the accounting department. 
(4) retained in the purchasing department's files. 


b. Which of the following internal control procedures most likely would be used to 

maintain accurate inventory records? 

(1) Perpetual inventory records are periodically compared with the current cost of 
individual inventory items. 

(2) Ajust-in-time inventory ordering system keeps inventory levels toa desired minimum. 

(3) Requisitions, receiving reports, and purchase orders are independently matched 
before payment is approved. 

(4) Periodic inventory counts are used to adjust the perpetual inventory records. 


c. Which of the following sets of duties related to inventory and warehousing causes the 
greatest concern about inadequate segregation of duties? 
(1) Individuals in charge of approving disbursements related to inventory purchases have 
“read-only” ability to view the list of vendors in the preapproved vendor master file. 
(2) Purchasing agents who arrange for shipment of raw materials from vendors are re- 
sponsible for verifying actual receipt of the inventory items at the receiving dock. 
(3) The receiving department has access to copies of the purchase orders that ex- 
clude information about quantities ordered. 
(4) Accounts payable personnel have access to receiving reports and purchase orders 
in addition to vendor invoices for inventory purchases. 
21-14 (OBJECTIVES 21-1, 21-4, 21-5, 21-6) The following questions deal with tests of details of 
balances and substantive analytical procedures for inventory. Choose the best response. 


a. An auditor selected items for test counts while observing a client’s physical inven- 
tory. The auditor traced the test counts to the client’s inventory listing. This procedure 
likely obtained evidence about which balance-related audit objective for inventory? 
(1) Existence 

(2) Rights and obligations 

( 

( 
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) 
3) Completeness 
4) Realizable value 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Educdiidma pitéted240/ (AR DOTe@ FOBPKECHNIE NTORY AND WAREHOUSING CYCLE 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-08-02 01:36:11. 


b. Which of the following procedures is the auditor least likely to perform on the actual 

date the physical inventory count is observed? 

(1) Examine inventory to make sure that it is tagged by client count teams. 

(2) Watch for inventory items that are rust- or dust-covered or otherwise damaged. 

(3) Observe client count teams to determine if they are conducting the physical in- 
ventory count in accordance with client policies and procedures. 

(4) Examine documentation supporting the acquisition of highly material inven- 
tory items on hand at the count date. 


c. An inventory turnover analysis is useful to the auditor because it may detect 
(1) inadequacies in inventory pricing. 

2) methods of avoiding cyclical holding costs. 

3) the existence of obsolete merchandise. 

4) the optimum automatic reorder points. 


DISCUSSION QUESTIONS AND PROBLEMS 


21-15 (OBJECTIVES 21-1, 21-3, 21-5, 21-6, 21-7) Items 1 through 8 are selected questions typi- 
cally found in questionnaires used by auditors to obtain an understanding of internal 
control in the inventory and warehousing cycle. In using the questionnaire for a client, a 
“yes” response to a question indicates a possible internal control, whereas a “no” indicates 
a potential deficiency. 


1. Are all shipments to customers authorized by prenumbered shipping documents? 

2. Are standard cost records used for raw materials, direct labor, and manufacturing 
overhead? 

3. Is there a stated policy with specific criteria for writing off obsolete or slow-moving 
goods? 

4. Is a detailed perpetual inventory master file maintained for raw materials inventory? 

5. Are physical inventory counts made by someone other than storekeepers and those 
responsible for maintaining the perpetual inventory master file? 

6. Is the clerical accuracy of the final inventory compilation checked by a person inde- 
pendent of those responsible for preparing it? 

7. Does the receiving department prepare prenumbered receiving reports and account 
for the numbers periodically for all inventory received, showing the description and 
quantity of materials? 

8. Is all inventory stored under the control of an inventory custodian in areas where 
access is limited? 


Required . For each of the preceding questions, state the purpose of the internal control. 

. For each internal control, list a test of control to test its effectiveness. 

c. For each of the preceding questions, identify the nature of the potential financial 
misstatement(s) if the control is not in effect. 

d. For each of the potential misstatements in part c., list a substantive audit procedure to 


determine whether a material misstatement exists. 


oan) 


21-16 (OBJECTIVES 21-1, 21-3, 21-5, 21-6, 21-7) Recently, there were reports of films that have 
not been released to video warehouses were ripped and posted on line or sold illegally at 
flea markets. Labrador Pictures Home Entertainment releases straight-to-video movies. 
They have the following internal controls related to their BluRay Disc inventory: 


1. All authorized warehouse personnel must scan their door pass card before being 
allowed in the BluRay Disc storage areas. 

2. All BluRay Discs are kept separate from promotional items such as samples, ware- 
house display sets and posters in the warehouse. 

3. Labrador Pictures might prepare exclusive special editions of their films for online 
retailers like Brazil. These are consignment goods and are warehoused in one spe- 
cial warehouse. 
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4. Duplication of discs can only be made by pre-approved contractors. 

5. It is the norm in the industry to drop 50% off their original retailing price one 
month after the initial release of a title. Labrador tracks the inventory in the ware- 
house using an Enterprise Resources Planning (ERP) system to make sure the titles 
do not sit too long in the warehouse. 

6. DVD anti theft tags are inserted into every BluRay casing. 

7. Every Tuesday, personnel from the accounts department will pick from the inven- 
tory listing a few titles to be verified. Ten titles will be counted and compared to the 
balances in the ERP system. 

8. Three days before the month end close, the general accounting team will compare 
the unit prices in the ERP system with the costing calculated by the management 
accounting team. 

9. Transactions from inventory system will be posted daily at 12 midnight to the 
general ledger. The general costing staff will reconcile the postings from inventory 
system with the general ledger every Friday. 

10. Adjustments to the inventory system can only be entered by the general accounting 
clerk after the inventory adjustment report has been certified by the accounts manager. 


For each of measure mentioned above: 


a. Identify the related transaction-related audit objective(s) affected by the control. Required 
b. Describe the risks the control is designed to mitigate. 
c. Design a test of control to determine if the control is operating effectively. 


21-17 (OBJECTIVE 21-3) The external auditors and tax auditors today would ask for the cost @ @ | 
accounting records when conducting their audit. a 0 
a. Why is it necessary for the external auditors to study the cost accounting records Required 
when certifying the reporting of inventory? 
b. Why do tax auditors take an interest in perusing cost accounting records that 
deal with the costing certain products? 
c. How does the perusal of cost accounting records help justify the accuracy of the re- 
porting of revenue in the income statement? 
21-18 (OBJECTIVES 21-1, 21-3, 21-5, 21-6) Following are audit procedures commonly per- 
formed in the inventory and warehousing cycle for a manufacturing company: 
1. Read the client’s physical inventory instructions and observe whether they are being 
followed by those responsible for counting the inventory. 
2. Use audit software to compute inventory turnover by major product line and com- 
pare it to turnover in the prior year. 
3. Account for a sequence of inventory tags and trace each tag to the physical inventory 
to make sure it actually exists. 
4. Compare the client’s count of physical inventory at an interim date with the per- 
petual inventory master file. 
5. Trace the auditor’s test counts recorded in the audit files to the final inventory com- 
pilation and compare the tag number, description, and quantity. 
6. Compare the unit price on the final inventory summary with vendors’ invoices. 
7. Account for a sequence of raw material requisitions and examine each requisition for 
an authorized approval. 
8. Trace the recorded additions on the finished goods perpetual inventory master file to 
the records for completed production. 


a. Identify whether each of the procedures is primarily a test of control or a substantive test. Required 
b. State the purpose(s) of each of the procedures. 
21-19 (OBJECTIVES 21-1, 21-5, 21-6) You are the audit senior in charge of the audit of House of 
Herbs Pte. Ltd, a Chinese medicinal house. 
The inventory records are tracked manually and also in the computer. There are more 
items tracked in the manually system as compared to the items tracked in the computer 
system. Each prescription to a customer would require a combination of a few kinds of 
herb. The dispenser would record on a manual stock card every time her issues a certain 
herb to the customer. The company does not use a standard form stock card. The stock 
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Required 


cards used in the company varied. Some cards are preprinted while other cards were 
cutouts from carton boxes. A book-keeper would come in once a month to key the stock 
movement into the computer system. 

The herbs in respective of value are kept in open shelves. Earlier in the year, two 
kilogrammes of high value Canadian Ginseng were found missing from the shelves. Your 
audit junior investigated the cases and found that there is no specific person in charge of 
receiving goods and recording of entries in the company. The herbs are sent by courier to the 
store. Any dispenser who was on duty could receive the package from the courier. The same 
person would record the receipt on the manual stock card. 

Your audit junior noted that nobody reviews the stock cards to see whether any stock 
has expired. The management did one review of the inventory after a customer complained 
that he was given a can of expired medicated balm. 


Identify an internal control and a substantive audit procedure for each misstatement that 
you have identified from the case above. 

21-20 (OBJECTIVES 21-5, 21-6) Auditors are required to understand the client’s industry and busi- 
ness but may not be experts in identifying the quantity and value of certain inventory items. 
For example, consider observing a physical inventory and testing inventory valuation for a 
client who mines rare gems. In such cases, auditors may use a specialist to assist in testing the 
existence and valuation of inventory. Auditing standards provide guidance on whether and 
how an auditor can rely on a specialist. Search the PCAOB Web site (pcaobus.org) for PCAOB 
AU Section 336 guidance on “Using the Work of a Specialist” to answer the following questions. 


a. List three examples of inventory items for which an auditor may need to use a spe- 
cialist for testing existence or valuation, or both. How would the auditor use the spe- 
cialist in each example? 

b. What characteristics should the auditor consider to ensure the specialist is qualified? 

c. What level of understanding does the auditor need to have regarding the nature of 
work performed by the specialist? 

d. Does the specialist need to be independent of the client and the auditor? 


21-21 (OBJECTIVES 21-3, 21-5) You are the audit senior responsible for the group audit of 
YourSale Ltd, an online clothes retailer operating around South East Asia. Your team is 
concentrating on the audit of inventory which constitutes about 35% of net assets in the 
company. The company deals in designer prét-a-porter (which retails from USD900 per 
outfit) and low end clothing (which retails for USD5 to USD50 per outfit). 

YourSales operates a central distribution center in Subang Jaya, Malaysia and coun- 
try based distribution centers in Jakarta, Hanoi, Manila and Yangon. Orders are made on 
line at the YourSales website. Customers would pay in their local currencies to the bank 
account in Malaysia. The distribution center would dispatch to the country based distri- 
bution centers every Monday the orders for the week. The distribution centers would dis- 
patch the orders by courier to the customers. All accounting (Including accounts of the 
country based distribution centers) are prepared in Malaysia. 

Before the Subang Jaya center dispatches the orders to their country based distribution 
centers, the store keeper would count the items dispatched and key it into the ERP system. 
The staff at Subang Jaya would pack in smaller packets the orders are required by the cus- 
tomers. The packets would be kept in large courier boxes and the dispatch would be sealed. 
All relevant customs documentation would be generated. DeeEdge Courier would pick up 
the dispatch. 

When the dispatch arrives at the distribution centers, the clerks would open the cou- 
rier boxes, count the number of orders in the box and arrange for delivery of the orders. 
The clerks would not open and count the individual orders as the packages are sealed. Cus- 
tomer may return the designer prét-a-porter within 14 days to the country distribution 
centers. The returns would be sent to Subang Jaya. Upon receipt of the returns the finance 
department would process the refunds. Low end clothing cannot be returned. 

Every quarter the central distribution center would be shut for a physical stocktake. 
No stock take is performed at the country distribution centers as the centers are not sup- 
pose to keep any stock. All dispatches received must be delivered to the customer within 
24 hours of receipt from Subang Jaya. 
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Identify the internal controls in YourSales inventory and warehousing cycle. For each 
control identified, list a corresponding test of controls that can be used to test the effec- 
tiveness of internal controls over inventory. 


21-22 (OBJECTIVE 21-4) Your client, Ridgewood Heating and Cooling, specializes in residen- 
tial air conditioning and heating installations. The company maintains an inventory of air 
conditioning units, furnaces, and air handling ductwork. The client has provided the fol- 
lowing selected financial statement information for the year ending December 31, 2016: 


12/31/2016 12/31/2015 12/31/2014 
Total Sales $55,443,900 $52,700,440 $50,384,300 
Cost of Goods Sold 47,771,880 46,810,900 44,670,400 
Ending Inventory 9,582,960 8,100,220 7,730,660 


Following is a breakdown of the ending inventory account as of December 31, 2016: 


Inventory Description Quantity Ending Balance 
AC Unit — Model 635 1,240 Units $ 806,000 
AC Unit — Model 770 1,733 Units 1,940,960 
Furnace — Model 223 1,992 Furnaces 2,589,600 
Furnace — Model 225 2,008 Furnaces 2,761,000 
Air Handling Ducts 11,883 Boxes 1,485,400 
Total $9,582,960 


Ridgewood stores inventory in a 100,000 square foot warehouse facility at a location differ- 
ent from its corporate office. A single AC unit is stored on a 4 foot by 4 foot pallet. Warehouse 
storage shelves allow the company to store 1 pallet on the floor while 2 additional pallets are 
placed on shelves above the first pallet. Furnaces are also stored on similar-sized pallets. Due 
to the height of the furnaces, only one unit can be stored on a shelf above another pallet that 
rests on the floor. Air handling ducts are stored in boxes that are 5 foot by 5 foot at the base 
and 7 feet tall. Three boxes can be stacked on top of the box that sits on the floor. 
a. Design substantive analytical procedures to evaluate the reasonableness of the end- 
ing inventory account. 
b. What concerns, if any, do you have about the ending inventory at Ridgewood 
Heating and Cooling? 


21-23 (OBJECTIVE 21-5) You are the audit senior in charge of the audit of inventory at 
Dakeda Co.Ltd. a smartphone retailer chain in Southern Taiwan. To ensure that smart- 
phones are quickly delivered to their shops, the company operates 2 warehouses in Tainan 
and Kaohsiung. Today you are observing the inventory count at Tainan. 

a. There has been a flu outbreak in Tainan and half of the warehouse staff called in sick. 
The manager of the warehouse has requested that you ask your staff to help out in the 
stock taking process. Should your staff help out? 

b. In most parts of the audit you found that the inventory is properly accounted for and 
that the warehouse personnel are diligently following the inventory instructions. 
You notice most mistakes come from the Storeroom 2. During the inventory count, 
the staff received a call from the Anping store that they need 20 units of Sony Mobile 
Phones urgently by noon. The store manager requested that you allow the inventory 
to be shipped to Anping. What should you do? 

c. You found two obsolete smartphones during the count. What should you do? 

d. You noticed that as soon as the inventory audit has been completed, the pre- 
numbered tags are discarded. Is this practice fine? What should you do? 


21-24 (OBJECTIVE 21-5) You are the audit senior at Zhang Zi Zi Associates. Below are issues 

faced by your audit teams: 
1. Valentine Creativity is a bespoke designer label located throughout China. 40% of 
the inventory can be found in warehouses in Wuxi and Guangzhou. The rest of the 
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inventory is found in all their 300 stores across China, Hongkong and Macau. The 
high value consists of designer pearls can only be found in Beijing, Hongkong and 
Shanghai. Special strong vaults are built in those stores to keep the pearls. 

2. Delia Computers practices the vendor managed inventory system with their vendors. 
Digital East, your client, is one of their hard disc suppliers for their Shenzhen plant. 
Your client will assemble the hard discs in Wuxi and ship the hard discs to Delia’s 
warehouse in Shenzhen. Delia will pull from the inventory in the Shenzhen ware- 
house if they need to use the discs and will pay for the pull. 

3. Elektroniks is a contract manufacturer in Xiamen manufacturing one behalf of few 
Korean smartphone companies. Elektroniks makes smartphone touch screens. The 
screens are made exclusively for each customer and cannot be used interchangeable. 
Due to patent issues any excess stock and scrap material must be destroyed. 

4. Bisco is an international hypermarket chain. They have just opened shop in China 
by taking over two local groceries chains, Laimaicai and Jiama. Bisco have yet to 
integrate the inventory systems used by Laimaicai and Jiama to a common platform. 


Required a. For each issues mentioned above, describe issues the auditor should consider when 
determining which locations to visit to physically observe the client’s inventory count. 
b. How would you determine which locations your teams should visit? 
c. How does the type of inventory held by your client pose potential risks of material 
misstatements in the inventory balances? 
d. How might your teams address the risks noted in part c. 


21-25 (OBJECTIVE 21-5) You are performing the analytical procedures for the audit of the 


inventory and warehousing cycle for the Abdullah Printers Company, a wholesale dis- 
tributor of computer printers and other peripheral hardware. Your data is shown in the 
following chart: 


2008 2007 2006 

Revenue 76,476 68,222 56,741 

Cost of Goods Sold 36,686 33,125 27,804 

Beginning inventory 5,977 5,252 4,173 

Ending inventory 7,125 5,977 5,252 

The gross margin and inventory turnover industry averages are as follows: 

2008 2007 2006 

Gross Margin % 49% 49% 48% 

Inventory Turnover 5.7 5.8 5.9 

Required a. Calculate the following ratios, using an electronic spreadsheet program (instructor’s 


option): 
(1) Gross margin as a percentage of sales 
(2) Inventory turnover 

b. What does the gross margin tell the auditor as an analytical tool? List several possible 
reasons for the changes in this ratio. 

c. What does the inventory turnover tell the auditor as an analytical tool? List several pos- 
sible reasons for the changes in this ratio. 

d. What should the auditor do to determine the actual cause of the changes? 

e. Assume you had already set a certain amount of planning materiality based on ac- 
ceptable findings in the preliminary analytical procedures. Based on the results 
calculated in part a compared to the industry averages would you increase substan- 
tive testing, decrease substantive testing, or leave substantive testing as originally 
planned? 

21-26 (OBJECTIVE 21-5) In an annual audit at December 31, 2016, you find the following 
transactions near the closing date: 


1. Merchandise costing $625 was received on December 28, 2016, and the invoice was not re- 
corded. You located it in the hands of the purchasing agent; it was marked “on consignment.” 
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2. A packing case containing products costing $816 was standing in the shipping room 
when the physical inventory was taken. It was not included in the inventory because 
it was marked “Hold for shipping instructions.” Your investigation revealed that the 
customer’s order was dated December 18, 2016, but that the case was shipped and 
the customer billed on January 10, 2017. The product was a stock item of your client. 

3. Merchandise received on January 3, 2017, costing $720 was entered in the acquisi- 
tions journal on January 4, 2017. The invoice showed shipment was made FOB sup- 
plier’s warehouse on December 31, 2016. Because it was not on hand December 31, it 
was not included in inventory. 

4. Merchandise costing $1,822 was received on January 3, 2017, and the related acqui- 
sition invoice recorded January 5. The invoice showed the shipment was made on 
December 29, 2016, FOB destination. 

5. A special machine, fabricated to order for a customer, was finished and in the ship- 
ping room on December 31, 2016. The customer was billed on that date and the ma- 
chine excluded from inventory, although it was shipped on January 4, 2017. 


Assume that each of the amounts is material. Required 
a. State whether the merchandise should be included in the client’s inventory. 
b. Give your reason for your decision on each item.* 

21-27 (OBJECTIVE 21-6) Asa part of your clerical tests of inventory for Martin Manufacturing, 

you have tested about 20% of the dollar items and have found the following exceptions: 


1. Extension errors: 


Description Quantity Price Extension as Recorded 
Wood 920 board feet $0.12/board foot $11.04 
Metal-cutting tools 49 units 30.00 each 1,740.00 
Cutting fluid 26 barrels 40.00/barrel 240.00 
Sandpaper 600 sheets 0.95/hundred 579.00 


2. Differences located in comparing last year’s costs with the current year’s costs on the 
client’s inventory lists: 


Description Quantity This Year’s Cost Preceding Year’s Cost 

TA-114 precision-cutting 12 units $800.00 each Unable to locate 
torches 

Aluminum scrap 4,500 pounds 8.00/ton $95.00/ton 

Lubricating oil 400 gallons 55.00/gallon 95.00/barrel 


3. Test counts that you were unable to find when tracing from the test counts to the 
final inventory compilation: 


Tag No. Quantity Current Year Cost Description 

2958 20 tons $75.00/ton Cold-rolled bars 

0026 3,000 feet 2.25/foot 4-inch aluminum stripping 
4. Page total, footing errors: 

Page No. Client Total Correct Total 

14 $2,375.36 $2,375.30 

82 $6,721.18 $6,421.18 


a. State the amount of the actual misstatement in each of the four tests. For any item for Required 
which the amount of the misstatement cannot be determined from the information 
given, state the considerations that will affect your estimate of the misstatement. 

b. As a result of your findings, what will you do about clerical accuracy tests of the in- 
ventory in the current year? 
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c. What changes, if any, would you suggest in internal controls and procedures for 
Martin Manufacturing during the compilation of next year’s inventory to prevent 
each type of misstatement? 


@@.. 21-28 (oBjective 21-5) You have been engaged for the audit of the Y Company for the year 

00008 ended December 31, 2016. The Y Company is in the wholesale chemical business and 
makes all sales at 25% over cost. 

Following are portions of the client’s sales and purchases accounts for the calendar 


year 2016. 
SALES 
Balance Forward 
Date Reference Amount Date Reference Amount 
12-31 Closing entry $699,860 $658,320 
12-27 "ST#965 5,195 
12-28 SI#966 19,270 
12-28 SI#967 1,302 
12-31 SI#969 5,841 
12-31 SI#970 7,922 
12-31 SI#971 2,010 
$699,860 $699,860 
'ST = Sales invoice. 
PURCHASES 
Balance Forward 
Date Reference Amount Date Reference Amount 
$360,300 12-31 Closing entry $385,346 
12-28 *RR#1059 3,100 
12-30 RR#1061 8,965 
12-31 RR#1062 4,861 
12-31 RR#1063 8,120 
$385,346 $385,346 


*RR = Receiving report. 


You observed the physical inventory of goods in the warehouse on December 31, 
2016, and were satisfied that it was properly taken. 

When performing a sales and purchases cutoff test, you found that at December 31, 
2016, the last receiving report that had been used was no. 1063 and that no shipments have 
been made on any sales invoices with numbers larger than no. 968. You also obtained the 
following additional information: 


1. Included in the warehouse physical inventory at December 31, 2016, were chemicals 
that had been acquired and received on receiving report no. 1060 but for which an 
invoice was not received until the year 2017. Cost was $2,183. 
2. In the warehouse at December 31, 2016, were goods that had been sold and paid for 
by the customer but that were not shipped out until the year 2017. They were all sold 
on sales invoice no. 965 and were not inventoried. 
3. On the evening of December 31, 2016, there were two cars on the Y Company siding: 
a. Car AR38162 was unloaded on January 2, 2017, and received on receiving report 
no. 1063. The freight was paid by the vendor. 

b. Car BAE74123 was loaded and sealed on December 31, 2016, and was switched 
off the company’s siding on January 2, 2017. The sales price was $12,700 and the 
freight was paid by the customer. This order was sold on sales invoice no. 968. 
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4. Temporarily stranded at December 31, 2016, on a railroad siding were two cars of 
chemicals en route to the Z Pulp and Paper Co. They were sold on sales invoice no. 
966, and the terms were FOB destination. 

. En route to the Y Company on December 31, 2016, was a truckload of material that 
was received on receiving report no. 1064. The material was shipped FOB destina- 
tion, and freight of $75 was paid by the Y Company. However, the freight was de- 
ducted from the purchase price of $975. 

. Included in the physical inventory were chemicals exposed to rain during transit and 
deemed unsalable. Their invoice cost was $1,250, and freight charges of $350 had 
been paid on the chemicals. 

a. Compute the adjustments that should be made to the client’s physical inventory at 

December 31, 2016. 
b. Prepare a worksheet of adjusting entries that are required as of December 31, 2016.* 


wm 


a 


21-29 (OBJECTIVE 21-6) You are assigned to the December 31, 2016, audit of Sea Gull 
Airframes, Inc. The company designs and manufactures aircraft superstructures and 
airframe components. You observed the physical inventory at December 31 and are sat- 
isfied that it was properly taken. The inventory at December 31, 2016, has been priced, 
extended, and totaled by the client and is made up of about 5,000 inventory items with 
a total valuation of $8,275,000. In performing inventory price tests, you have decided to 
stratify your tests and conclude that you should have two strata: items with a value over 
$5,000 and those with a value of less than $5,000. The book values are as follows: 


No. of Items Total Value 

More than $5,000 500 $4,150,000 
Less than $5,000 4,500 4,125,000 
5,000 $8,275,000 


In performing pricing and extension tests, you have decided to test about 50 inventory 
items in detail. You selected 40 of the over $5,000 items and 10 of those under $5,000 at 
random from the population. You find all items to be correct except for items A through 
G below, which you believe may be misstated. You have tested the following items, to this 
point, exclusive of A through G: 


No. of Items Total Value 
More than $5,000 36 $360,000 
Less than $5,000 7 2,600 


Sea Gull Airframes uses a periodic inventory system and values its inventory at the lower 
of FIFO cost or market. You were able to locate all invoices needed for your examination. 
The seven inventory items in the sample you believe may be misstated, along with the rel- 
evant data for determining the proper valuation, are shown next. 


INVENTORY ITEMS POSSIBLY MISSTATED 


Description Quantity Price Total! 

A. L37 spars 3,000 meters $ 8.00/meter $24,000 
B. B68 metal formers 10,000 inches 1.20/foot 12,000 
C. RO1 metal ribs 1,500 yards 10.00/yard 15,000 
D. St26 struts 1,000 feet 8.00/foot 8,000 
E. Industrial hand drills 45 units 20.00 each 900 
F. L803 steel leaf springs 40 pairs 69.00 each spring 276 
G. V16 fasteners 5.50 dozen 10.00/dozen 55 


1 Amounts are as stated on client’s inventory. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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INFORMATION FOR PRICING FROM INVOICES (SEA GULL AIRFRAMES) 


Voucher Voucher Receiving 
Number Date Date Paid Terms Report Date Invoice Description 
7-68 8-01-12 8-21-12. Net FOB 8-01-12 77 V16 fasteners at $10 per dozen 
destination 
11-81 10-16-16 11-15-16 NetFOB 10-18-16 1,100 yards ROI metal ribs at $9.50 
destination per yard; 2,000 feet St26 struts at 
$8.20 per foot 
12-06 12-08-16 12-30-16 2/10,n/30FOB 12-10-16 180 L803 steel leaf springs at $69 
SP. each 
12-09 12-10-16 12-18-16 NetFOB 12-11-16 45 industrial hand drills at $20 each; 
destination guaranteed for 4 years 
12-18 12-27-16 12-27-16 2/10,n/30FOB 12-21-16 4,200 meters L37 spars at $8 per 
S.P. meter 
12-23 12-24-16 1-03-17 2/10, n/30FOB 12-26-16 12,800 inches B68 metal formers at 
dest. $1.20 per foot 
12-61 12-29-16 1-08-17. Net FOB 12-29-16 1,000 yards RO1 metal ribs at $10 per 
destination yard; 800 feet St26 struts at $8 per 
foot 
12-81 12-31-16 1-20-17. Net FOB 1-06-17 2,000 meters L37 spars at $7.50 per 
destination meter; 2,000 yards RO1 metal ribs 
at $10 per yard 


In addition, you noted a freight bill for voucher 12-23 in the amount of $200. This bill was 
entered in the freight-in account. Virtually all freight was for the metal formers. 


Required This is the first time Sea Gull Airframes has been audited by your firm. 

a. Review all information and determine the inventory misstatements of the seven items 
in question. State any assumptions you consider necessary to determine the amount 
of the misstatements. 

b. Prepare an audit schedule to summarize your findings. Use the computer to prepare 
the schedule (instructor’s option). 
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AUDIT OF THE CAPITAL 
ACQUISITION AND 
REPAYMENT CYCLE 


A Dishonest Client Will Get the Best of the Auditor 
Almost Every Time 


Able Construction Company entered into long-term construction contracts, recognizing in- 
come using the percentage of completion method of accounting. To finance its operations, 
Able borrowed funds from the bank and agreed to comply with restrictive loan covenants 
dependent on reported income from the long-term contracts. The percentage of completion 
method of accounting requires, among other things, an agreement with well-defined, enforceable 
terms; a reliable method of es- 
timating costs to complete the 
contracts; and recognition of 
losses at the time they become 
known. As part of the audit of 
Able, its auditors read the con- 
tracts for all projects in prog- 
ress, tested costs incurred to 
date, and assessed the ultimate 
profitability of the contracts, 
including discussing them with 
management. A significant part 
of verifying income under per- 
centage of completion is audit- 
ing costs incurred. 


In the current year, management’s records and schedules of projects indicate that all projects 
will result in a profit. For each project, there is a separate schedule showing estimated total rev- 
enue from the project, costs incurred in the current period, costs incurred to date, estimated 
total costs, percentage of completion, and profit recognized in the current period. The auditor 
discussed each project with management, performed audit tests to support the schedule, and 
concluded that the revenue, expenses, and profit were reasonably stated. Reported income 
allowed Able to meet several of the restrictive covenants in its loan agreement with the bank. 


In fact, Able had incurred a significant loss on one of its major projects. Able had engaged a 
subcontractor to do reconstructive work not anticipated in the original contract bid. In award- 
ing the subcontract, Able had entered into an agreement with the subcontractor that the work 
would not be paid for until after its audit was completed, in an effort to defer recording losses 
associated with the additional work. Management hid the subcontractor’s invoices from the au- 
ditors as the invoices were received. During the next year, management recognized this loss but 
doctored the invoices so that it appeared the “unexpected” additional cost was incurred during 
that year, and that the previous year’s statements were correct and that all loan covenants with 
the bank were satisfied. 


The fraudulent misstatement was discovered several years later when Able went bankrupt and 
the CPA firm was sued by the bank for performing inadequate audits. The firm was ultimately 
found not responsible, but only after spending extensive time and large amounts of money 
defending its audit. 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


22-1 


22-2 


22-3 


22-4 


Identify the accounts and the 
unique characteristics of the 
capital acquisition and repay- 
ment cycle. 

Design and perform audit tests 
of notes payable and related 
accounts and transactions. 
Identify the primary con- 
cerns in the audit of own- 
ers’ equity transactions. 
Design and perform tests of 
controls, substantive tests 
of transactions, and tests of 
details of balances for capital 
stock and retained earnings. 
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‘The final transaction cycle we discuss is the capital acquisition and repayment cycle, which concerns the acqui- 
sition of capital resources through interest-bearing debt and owners’ equity and the repayment of capital. This cycle 
also includes the payment of interest and dividends. 

Four characteristics of the capital acquisition and repayment cycle influence the audit of these accounts: 


a 


Relatively few transactions affect the account balances, but each transaction is often highly material. For example, bonds 
are infrequently issued by companies, but the amount of a bond issue is normally large. Their size makes 
it common for auditors, as a part of verifying the balance sheet accounts, to verify each transaction taking 
place in the cycle for the entire year. Audit schedules for most accounts in the cycle include the beginning 
balance of every account, every transaction that occurred during the year, and the ending balance. 

The exclusion or misstatement of a single transaction can be material. As a result, the auditor’s primary emphasis in 
auditing these accounts is often on the completeness and accuracy balance-related audit objectives. 

A legal relationship exists between the client entity and the holder of the stock, bond, or similar ownership document. As the 
chapter-opening case of Able Construction Company demonstrates, the auditor must determine whether the 
client has met the requirements of debt or equity agreements. In the audit of the transactions and amounts 
in the cycle, the auditor must take great care to make sure the significant legal requirements affecting the 
financial statements have been met and adequately presented and disclosed in the statements. As a result, 
the four presentation and disclosure-related audit objectives are also emphasized for the capital acquisition 
and repayment cycle. 

A direct relationship exists between the interest and dividends accounts and debt and equity. In the audit of interest- 
bearing debt, auditors should simultaneously verify the related interest expense and interest payable. This is 
also true for owners’ equity, dividends declared, and dividends payable. 


Auditors often learn about capital acquisition transactions while gaining an understanding of the client’s busi- 
ness and industry, performed as part of the auditor’s risk assessment procedures. Also, when public companies 
issue additional debt and equity securities during the year, SEC rules require auditor consideration of financial 
information included in the client’s new securities offering prospectus. In doing so, auditors frequently identify 
business risk issues for capital acquisition activities that should be considered in the design of audit procedures for 
transactions, account balances, and disclosures in the capital acquisition and repayment cycle. 


ACCOUNTS IN THE CYCLE 
‘OBJECTIVE 22-1 The accounts in a company’s capital acquisition and repayment cycle depend on the 


Identify the accounts and the 


type of business the company operates and how its operations are financed. All cor- 


enter seater ne porations have capital stock and retained earnings, but some may also have preferred 
capital acquisition and repayment Stock, additional paid-in capital, and treasury stock. As with other cycles, cash is an 


cycle. 


important account in the cycle because both the acquisition and repayment of capi- 
tal affect the cash account. The unique characteristics of the capital acquisition and 
repayment cycle affect how auditors verify the accounts in the cycle. This cycle often 
includes these accounts: 


* Notes payable * Cash in the bank 

* Contracts payable * Capital stock—common 

* Mortgages payable * Capital stock—preferred 

* Bonds payable ¢ Paid-in capital in excess of par 

* Interest expense * Donated capital 

* Accrued interest * Retained earnings 

¢ Appropriations of retained earnings * Dividends payable 

¢ Treasury stock * Proprietorship—capital account 
* Dividends declared ¢ Partnership—capital account 


The methodology for designing tests of details of balances for accounts in the cap- 
ital acquisition and repayment cycle is the same as that followed for other accounts. 
(See Figure 16-1 on page 525.) The only difference is the name of the account being 
audited. For example, in determining the tests of details of balances for notes payable, 
the auditor considers business risk, performance materiality, inherent risk, control 
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risk, the results of tests of controls and substantive tests of transactions, and the 
results of substantive analytical procedures. 

Auditors often set performance materiality at a low level because it is usually 
possible to completely audit the account balance and transactions affecting the notes 
payable account balance. Typically, they also set inherent risk at a low level because 
the correct account value is usually easy to determine. Auditors are normally most 
concerned about the completeness objective for notes payable account balances and 
the completeness objective for notes payable disclosures, such as collateral and cov- 
enant restrictions for notes payable. Because the cycle usually contains few transac- 
tions, control risk and the results of substantive tests of transactions are normally less 
important for designing tests of details of balances for accounts such as notes payable. 

To best understand the audit procedures for many of the accounts in the capital 
acquisition and repayment cycle, representative accounts that are significant parts 
of the cycle for a typical business are included in this chapter. The following sections 
discuss (1) the audit of notes payable and related interest expense to illustrate interest- 
bearing capital and (2) the audit of common stock, paid-in capital in excess of par, 
dividends, and retained earnings to illustrate equity accounts. 


NOTES PAYABLE 
A note payable is a legal obligation to a creditor, which may be unsecured or secured ‘OBJECTIVE 22-200 


by assets, and bears interest. Typically, a note is issued for a period somewhere aa eee 
between one month and one year, but longer-term notes exist. Notes are issued for of notes payable and related 
different purposes, and the property pledged as collateral includes a wide variety of accounts and transactions. 
assets, such as securities, accounts receivable, inventory, and fixed assets. The princi- 
pal and interest payments on the notes must be made in accordance with the terms of 
the loan agreement. For short-term loans, a principal and interest payment is usually 
required only when the loan becomes due. For loans over 90 days, the note usually 
calls for monthly or quarterly interest payments. 
Figure 22-1 shows the accounts used for notes payable and related interest. 
Auditors commonly include tests of principal and interest payments as a part of the 
audit of the acquisition and payment cycle, because the payments are recorded in the 
cash disbursements journal. But in many cases, because of their relative infrequency, 
no capital transactions are included in the auditor’s sample for tests of controls and 


FIGURE 22-1 Notes Payable and the Related Interest Accounts 


Notes payable 


Interest expense 
Payments Beginning P 
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Issue of EAPENSS 
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Ending 
balance 


Interest payable 
Cash in bank 
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Internal Controls 


Tests of Controls and 
Substantive Tests of 
Transactions 


Substantive Analytical 
Procedures 
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substantive tests of transactions. Therefore, it is also normal to test these transactions 
as a part of the capital acquisition and repayment cycle. 
The objectives of the audit of notes payable are to determine whether: 


* Internal controls over notes payable are adequate. 

¢ Transactions for principal and interest involving notes payable are properly 
authorized and recorded in accordance with the six transaction-related audit 
objectives. 

* The liability for notes payable and the related interest expense and accrued li- 
ability are properly stated as defined by seven of the eight balance-related audit 
objectives. (Realizable value is not applicable to liability accounts.) 

* Disclosures related to notes payable and the related interest expense satisfy the 
four presentation and disclosure audit objectives. 


There are four important controls over notes payable: 


1. Proper authorization for the issue of new notes. Responsibility for the issuance of 
new notes should be vested in the board of directors or high-level management 
personnel. Generally, signatures of multiple properly authorized officials are 
required for all loan agreements, which usually stipulate the amount of the loan, 
the interest rate, the repayment terms, and the assets pledged. When notes are 
renewed, they need to be subject to the same authorization procedures as those 
for the issuance of new notes. 

2. Adequate controls over the repayment of principal and interest. The periodic payments 
of interest and principal should be subject to the controls in the acquisition and 
payment cycle. At the time the note was issued, the accounting department 
should have received a copy of the note, much like it receives vendors’ invoices 
and receiving reports. The accounts payable department should automatically 
issue checks or electronic fund transfers for the notes when they become due, 
in the same manner in which it prepares payments for acquisitions of goods and 
services. A copy of the note provides the supporting documentation for payment. 

3. Proper documents and records. These include subsidiary records and control over 
blank and paid notes by an authorized person. Paid notes should be cancelled and 
retained under the custody of an authorized official. 

4. Periodic independent verification. Periodically, the detailed note records should be 
reconciled with the general ledger and compared with the note holders’ records 
by an employee who is not responsible for maintaining the detailed records. At 
the same time, an independent person should recompute the interest expense on 
notes to test the accuracy of the record keeping. 


Tests of notes payable transactions involve the issue of notes and the repayment of 
principal and interest. These audit tests are a part of tests of controls and substantive 
tests of transactions for cash receipts (see page 465 in Chapter 14) and cash disburse- 
ments (see page 615 in Chapter 18). Additional tests of controls and substantive tests 
of transactions are often done as a part of tests of details of balances because of the 
materiality of individual transactions. 

Tests of controls for notes payable and related interest should emphasize testing the 
four internal controls we just discussed. In addition, auditors should verify the accurate 
recording of receipts from note proceeds and payments of principal and interest. 


Substantive analytical procedures are essential for notes payable because tests of 
details for interest expense and accrued interest can often be eliminated when results 
are favorable. Table 22-1 illustrates typical analytical procedures for notes payable and 
related interest accounts. 

The auditor’s independent prediction of interest expense, using average notes 
payable outstanding and average interest rates, helps the auditor evaluate the 


Arens, Alvin, et A5A@iditing and AssuRareé Spidd3PEBGOKT GDbAI OEP PoAtIDI FAR RMA ASSITED ZTEHERCOAC EDK Central, 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-08-02 01:36:11. 


i/:\:jt 995 Substantive Analytical Procedures for Notes Payable 


Substantive Analytical Procedure Possible Misstatement 


Recalculate approximate interest expense on the basis of 
average interest rates and overall monthly notes payable. 


Misstatement of interest expense and accrued inter- 
est or omission of an outstanding note payable 


Compare individual notes outstanding with those of the 
prior year. 


Omission or misstatement of a note payable 


Compare total balance in notes payable, interest expense, 
and accrued interest with prior-year balances. 


Misstatement of interest expense and accrued inter- 
est or notes payable 


reasonableness of interest expense and also tests for omitted notes payable. Turn to 
page 197 in Chapter 7 and review Figure 7-2 for an illustration of an auditor’s schedule 
where such a substantive analytical procedure has been performed. If actual interest 
expense is materially larger than the auditor’s estimate, one possible cause is recorded 
interest payments on unrecorded notes payable. 


The normal starting point for the audit of notes payable is a schedule of notes pay- 
able and accrued interest, which the auditor obtains from the client. Figure 22-2 
(pp. 744-745) illustrates a typical schedule, including detailed information of all trans- 
actions that took place during the entire year for principal and interest, the beginning 
and ending balances for notes and interest payable, and descriptive information about 
the notes, such as the due date, the interest rate, and the assets pledged as collateral. 

When there are numerous transactions involving notes during the year, it may 
be impractical for auditors to obtain such a schedule. In those situations, auditors are 
likely to request the client to prepare a schedule of only those notes with unpaid bal- 
ances at the end of the year, showing a description of each note, its ending balance, 
and the interest payable at the end of the year, including the collateral and interest rate. 

Table 22-2 (p. 746) summarizes the applicable balance-related audit objectives and 
common audit procedures as they apply to the schedule of notes payable. Again, the 
amount of testing depends heavily on the materiality of notes payable and the effec- 
tiveness of internal controls. 

The two most important balance-related audit objectives in notes payable are: 


Tests of Details 
of Balances 


1. Existing notes payable are included (completeness). 
2. Notes payable in the schedule are accurately recorded (accuracy). 


DELL GOES 
PRIVATE 
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When PC manufacturing giant Dell, Inc., closed its 
$25 billion leveraged buyout in October 2013, it 
represented the largest company in terms of revenue 
to move from being a public company to one that is 
now privately held. Facing unmet expectations of in- 
vestors and fending off a number of hostile takeover 
attempts, Michael Dell, CEO, orchestrated a buyout 
that allowed him to assume a 75 percent stake in the 
company he founded in his dorm room. 

The decision to take the company private 
means the company is no longer subject to the 
regulations required for public companies, allow- 
ing Michael Dell and his management team the 
freedom to make management decisions faster— 
and with less public scrutiny and oversight. The 
benefit of speed in decision making and the ability 
to focus more on long-term versus short-term 
performance are believed to be key ingredients 
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needed to enable Dell to transform the company 
from a PC hardware manufacturer to one that is 
an end-to-end technology solutions provider. 
Pursuing the leveraged buyout was a huge, risk- 
taking venture for Dell, given the company had 
to take on $17.5 billion in new debt to close the 
deal. While it no longer has to focus on investor 
demands, it now has to think about expectations of 
its debtholders. Attention is now focused on met- 
rics related to cash flow management rather than 
earnings per share. To address those challenges, the 
company is already paying down debt as part of its 
efforts to deleverage its balance sheet over time. 


Sources: |. David McCann, “A Year Later, A New Dell 
Emerges,” CFO.com (November 4, 2014) (www.cfo.com); 

2. Connie Guglielmo, “Dell Officially Goes Private: Inside 
the Nastiest Tech Buyout Ever,” Forbes (November 18, 2013) 
(www.forbes.com). 
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FIGURE 22-2. Schedule of Notes Payable and Accrued Interest 
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Second National Bank 
Third National Bank 


XYZ Company, Inc. Schedule AA-4 Date 
Notes Payable Prepared by Client/DB 1/12/17 
12/31/16 Approved by JL 1/16/17 


SECURITY 


Balance at 
Date Face Amount Beginning 
Made Due of Note Description Valuation of Period 
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(continued on the following page) 


These objectives are vital because a misstatement can be material if even one note 
is omitted or incorrect. Table 22-2 on page 746 shows common procedures to test for 
the completeness objective for notes payable. When internal controls over notes pay- 
able are deficient, auditors may need to perform extended procedures to test for omit- 
ted notes payable. For example, the auditor might send confirmations to creditors that 
have held notes from the client in the past but are not currently included in the notes 
payable schedule. The auditor might also analyze interest expense for payments to 
creditors that are not included in the notes payable schedule and review the minutes of 
the board of directors meetings for authorized but unrecorded notes. 

In addition to balance-related objectives, the four presentation and disclosure- 
related objectives are important for notes payable because accounting standards 
require that the footnotes adequately describe the terms of notes payable outstand- 
ing and the assets pledged as collateral for the loans. If the loans require significant 
restrictions on the activities of the company, such as compensating balance provi- 
sions or restrictions on the payment of dividends, these must also be disclosed in the 
footnotes. As auditors perform tests of details of balances for balance-related audit 
objectives, the evidence obtained helps satisfy the notes payable presentation and 
disclosure objectives. 


CONCEPT CHECK 
1. Why are liability accounts included in the capital acquisition and repayment cycle audited 
differently from accounts payable? 


2. Which internal controls should the auditor be most concerned about in the audit of 
notes payable? Explain the importance of each. 
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FIGURE 22-2 Schedule of Notes Payable and Accrued Interest (Cont.) 
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OWNERS’ EQUITY 


There is an important difference in the audit of owners’ equity between a publicly OBJECTIVE 22-300 
held corporation and a closely held corporation. In most closely held corpora- \gon4; 
lentify the primary concerns 


tions, which typically have few shareholders, occasional, if any, transactions occur _ in the audit of owners’ equity 
during the year for capital stock accounts. The only transactions entered in the own- transactions. 
ers’ equity section are likely to be the change in owners’ equity for the annual earnings 
or loss and the declaration of dividends, if any. Closely held corporations rarely pay 
dividends, and auditors spend little time verifying owners’ equity, even though they 
must test the corporate records. 
For publicly held corporations, however, the verification of owners’ equity is 
more complex because of the larger numbers of shareholders and frequent changes in 
the individuals holding the stock. The rest of this chapter deals with tests for verifying 
the major owners’ equity accounts in a publicly held corporation, including: 


* Capital and common stock 
¢ Paid-in capital in excess of par 
* Retained earnings and related dividends 


Figure 22-3 (p. 747) provides an overview of the specific owners’ equity accounts 
discussed. The objective for each is to determine whether: 


¢ Internal controls over capital stock and related dividends are adequate 

* Owners’ equity transactions are correctly recorded, as defined by the six trans- 
action-related audit objectives 

* Owners’ equity balances are properly recorded, as defined by the eight balance- 
related audit objectives, and properly presented and disclosed, as defined by 
the four presentation and disclosure-related audit objectives for owners’ equity 
accounts 


Other accounts in owners’ equity are verified in much the same way as these. 
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TABLE 22-2 


Balance-Related Audit Objective 


Notes payable in the notes payable schedule 
agree with the client’s notes payable register or 
master file, and the total is correctly added and 
agrees with the general ledger (detail tie-in). 


Common Tests of Details 
of Balances Procedures 


Foot the notes payable list for notes payable and 
accrued interest. 

Trace the totals to the general ledger. 

Trace the individual notes payable to the master file. 


Balance-Related Audit Objectives and Tests of Details of Balances 
for Notes Payable and Interest 


Comments 


These are often done on a 100 percent basis 
because of the small population size or done 
by using audit software when there is a large 
volume of notes. 


Notes payable in the schedule exist (existence). 


Confirm notes payable. 
Examine duplicate copies of notes for authorization. 
Examine corporate minutes for loan approval. 


The existence objective is not as important as 
completeness or accuracy. 


Existing notes payable are included in the notes 
payable schedule (completeness). 


Examine notes paid after year-end to determine whether 
they were liabilities at the balance sheet date. 
Obtain a standard bank confirmation that includes 


This objective is important for uncovering both 
errors and fraud. These three procedures 
are done on most audits. Additional proce- 


specific reference to the existence of notes pay- 
able from all banks with which the client does 
business. (Bank confirmations are discussed more 
fully in Chapter 23.) 

Review the bank reconciliation for new notes cred- 
ited directly to the bank account by the bank. 
(Bank reconciliations are also discussed more 
fully in Chapter 23.) 


dures to search for omitted liabilities may be 
necessary if internal controls are deficient. 


Notes payable and accrued interest on the 
schedule are accurate (accuracy). 


Examine duplicate copies of notes for principal and 
interest rates. 

Confirm notes payable, interest rates, and last date for 
which interest has been paid with holders of notes. 

Recalculate accrued interest. 


In some cases, it may be necessary to cal- 
culate, using present-value techniques, 
the imputed interest rate or the principal 
amount of the note. An example is when 
equipment is acquired for a note. 


Notes payable in the schedule are correctly 
classified (classification). 


Examine due dates on duplicate copies of notes to 
determine whether all or part of the notes are a 
noncurrent liability. 

Review notes to determine whether any are related 
party notes or accounts payable. 


Notes payable are included in the proper period 
(cutoff). 


Examine duplicate copies of notes to determine 
whether notes were dated on or before the 
balance sheet date. 


Notes should be included as current period 
liabilities when dated on or before the bal- 
ance sheet date. 


The company has an obligation to pay the notes 
payable (obligations). 


Examine notes to determine whether the company 
has obligations for payment. 


Several internal controls are important for owners’ equity activities. We discuss sev- 


Internal Controls : ‘ ; 
eral of these in the following sections. 


Proper Authorization of Transactions Because each owners’ equity transaction is 
typically material, many of these transactions must be approved by the board of di- 
rectors. The following types of owners’ equity transactions usually require specific 
authorization: 


° Issuance of Capital Stock. The authorization includes the type of equity to issue (such 
as preferred or common stock), number of shares to issue, par value of the stock, 
privileged condition for any stock other than common, and date of the issue. 

¢ Repurchase of Capital Stock. The repurchase of common or preferred shares, the 
timing of the repurchase, and the amount to pay for the shares should all be 
approved by the board of directors. 

* Declaration of Dividends. The board of directors must authorize the form of the 
dividends (such as cash or stock), the amount of the dividend per share, and the 
record and payment dates of the dividends. 
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FIGURE 22-3 Owners’ Equity and Dividend Accounts 
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Proper Record Keeping and Segregation of Duties When a company maintains its 
own records of stock transactions and outstanding stock, the internal controls must 
be adequate to ensure that: 


¢ Actual owners of the stock are recognized in the corporate records 

¢ The correct amount of dividends is paid to the stockholders owning the stock as 
of the dividend record date 

* The potential for misappropriation of assets is minimized 


The proper assignment of personnel, adequate record-keeping procedures, and 
independent internal verification of information in the records are useful controls for 
these purposes. The client should also have well-defined policies for preparing stock 
certificates and for recording capital stock transactions. 

When issuing and recording capital stock, the client must comply with both the 
state laws governing corporations and the requirements in the corporate charter. The 
par value of the stock, the number of shares the company is authorized to issue, and 
state taxes on the issue of capital stock all affect issuance and recording. 

As a control over capital stock, most companies maintain stock certificate books 
and a shareholders’ capital stock master file. A capital stock certificate record 
records the issuance and repurchase of capital stock for the life of the corporation. 
The record for a capital stock transaction includes the certificate number, the number 
of shares issued, the name of the person to whom it was issued, and the issue date. 
When shares are repurchased, the capital stock certificate book should include the 
cancelled certificates and the date of their cancellation. 

A shareholders’ capital stock master file is the record of the outstanding 
shares at any given time. The master file acts as a check on the accuracy of the capital 
stock certificate record and the common stock balance in the general ledger. It is also 
used as the basis for the payment of dividends. 

The disbursement of cash for the payment of dividends should be controlled 
in much the same manner as the preparation and payment of payroll, which we 
described in Chapter 20. Internal controls affecting dividend payments may include: 


* Dividend checks are prepared from the capital stock certificate record by some- 
one who is not responsible for maintaining the capital stock records. 
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Audit of Capital Stock 
and Paid-In Capital 


Design and perform tests of 
controls, substantive tests of 
transactions, and tests of details 
of balances for capital stock and 
retained earnings. 
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« After the checks are prepared, there is independent verification of the stockhold- 
ers’ names and the amounts of the checks and a reconciliation of the total amount 
of the dividend checks with the total dividends authorized in the minutes. 

* A separate imprest dividend account is used to prevent the payment of a larger 
amount of dividends than was authorized. 


Independent Registrar and Stock Transfer Agent Any company with stock listed 
on a securities exchange is required to engage an independent registrar as a control 
to prevent the improper issue of stock certificates. The responsibility of an indepen- 
dent registrar is to make sure that stock is issued by a corporation in accordance with 
the capital stock provisions in the corporate charter and the authorization of the 
board of directors. When there is a change in the ownership of the stock, the registrar 
is responsible for signing all newly issued stock certificates and making sure that old 
certificates are received and cancelled before a replacement certificate is issued. 

Most large corporations also employ the services of a stock transfer agent to main- 
tain the stockholder records, including those documenting transfers of stock ownership. 
The employment of a transfer agent helps strengthen control over the stock records by 
putting the records in the hands of an independent organization and helps reduce the 
cost of record keeping by using a specialist. Many companies also have the transfer agent 
disburse cash dividends to shareholders, further improving internal control. 


Auditors have four main concerns in auditing capital stock and paid-in capital in 
excess of par: 


1. Existing capital stock transactions are recorded (completeness transaction-related 
objective). 

2. Recorded capital stock transactions occurred and are accurately recorded (occur- 

rence and accuracy transaction-related objectives). 

Capital stock is accurately recorded (accuracy balance-related objective). 

4. Capital stock is properly presented and disclosed (all four presentation and disclo- 
sure objectives). 


» 


The first two concerns involve tests of controls and substantive tests of transac- 
tions, and the last two involve tests of details of balances and related disclosures. 


Existing Capital Stock Transactions Are Recorded This objective is easily satis- 
fied when a registrar or transfer agent is used. The auditor can confirm with that 
person whether any capital stock transactions occurred and the accuracy of existing 
transactions, and then determine if all of those transactions have been recorded. To 
uncover issuances and repurchases of capital stock, auditors also review the minutes 
of the board of directors meetings, especially near the balance sheet date, and examine 
client-held stock record books. 


Recorded Capital Stock Transactions Occurred and Are Accurately Recorded 
Extensive auditing is required for transactions involving issuance of capital stock 
such as the issuance of new capital stock for cash, the merger with another company 
through an exchange of stock, donated shares, and the purchase of treasury shares. 
Regardless of the controls, it is normal practice for auditors to verify all capital stock 
transactions because of their materiality and permanence in the records. The occur- 
rence transaction-related objective can ordinarily be tested by examining the minutes 
of the board of directors meetings for proper authorization. 

Auditors can readily verify accurate recording of capital stock transactions for 
cash by confirming the amount with the transfer agent and tracing the amount of the 
recorded capital stock transactions to cash receipts. (In the case of treasury stock, the 
amounts are traced to the cash disbursements journal.) In addition, the auditor must 
verify whether the correct amounts were credited to capital stock and paid-in capital 
in excess of par by referring to the corporate charter to determine the par or stated 
value of the capital stock. 
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JUMPSTA RT Critics have long alleged that the Sarbanes-Oxley with a market capitalization of less than $75 million are 
OUR BUSINESS Act and other regulatory requirements make it dif- already exempt from the internal control attestation 
ficult for U.S. companies to issue public stock. The requirement under the Dodd-Frank Act of 2010. The 
STARTUPS Jumpstart Our Business Startups (JOBS) Act of Act also raises the number of allowable shareholders 
(JO BS) yX@a i @) = 2012 includes many provisions to make it easier for before a company is required to register with the SEC 
2012 SUPPORTS companies to issue public equity. The Act defines an from 500 shareholders to 2,000 total shareholders. 
emerging growth company as a stock issuer that has The Act includes a crowdfunding provision that 
CROWDFUNDING total annual gross revenue of less than $1 billion. allows startups and small businesses to raise up 
AND LOWERS Companies filing to go public normally must present to $1 million from small-dollar investments via 
BARRIERS TO three years of financial statements in their registra- Web-based platforms that are monitored by the 
tion statement; emerging growth companies need only Securities and Exchange Commission. The yearly 
NEW STOCK present two years of financial statements. The Act also amount that an individual can invest in such of- 
ISSUES exempts emerging growth companies for a period of ferings depends on his or her net worth and an- 
five years from complying with the requirement for audi- nual income, up to an annual limit of $10,000. 
tor attestation on the effectiveness of internal control 
over financial reporting under Section 404(b) of the Source: Based on Amy Wilkinson, “JOBS Act a Win for 
Sarbanes-Oxley Act. Note that smaller public companies Startups and Economy,” www.cnn.com (April 9, 2012). 


Auditing capital stock transactions such as stock dividends, acquisition of prop- 
erty for stock, mergers, or similar noncash transfers is challenging because consider- 
able technical expertise is required and there is often judgment involved to determine 
proper valuations. For example, in the audit of a major merger transaction, the audi- 
tor must often do considerable research to determine the appropriate accounting 
treatment and proper valuation of the transaction, after considering all the facts in 
the merger. 


Capital Stock Is Accurately Recorded Auditors verify the ending balance in the 
capital stock account by first determining the number of shares outstanding at the 
balance sheet date. A confirmation from the transfer agent is the simplest way to ob- 
tain this information. When no transfer agent exists, the auditor must rely on examin- 
ing the stock records and accounting for all shares outstanding in the stock certificate 
records, examining all cancelled certificates, and accounting for blank certificates. 

After the auditor is satisfied that the number of shares outstanding is correct, the 
recorded par value in the capital account can be verified by multiplying the number of 
shares by the par value of the stock. The ending balance in the capital in excess of par 
account is a residual amount. It is audited by verifying the amount of recorded trans- 
actions during the year and adding them to or subtracting them from the beginning 
balance in the account. 

A major consideration when auditing the accuracy balance-related objective for 
capital stock is verifying whether the number of shares used in the calculation of earn- 
ings per share is accurate. It is easy to determine the correct number of shares to use 
in the calculation when there is only one class of stock and a small number of capital 
stock transactions. The problem becomes much more complex when there are con- 
vertible securities, stock options, or stock warrants outstanding. Auditors must have 
a thorough understanding of requirements of relevant accounting standards before 
verifying the number of shares for determining basic and diluted earnings per share. 


Capital Stock Is Properly Presented and Disclosed The most important sources of 
information for determining whether all four presentation and disclosure-related ob- 
jectives for capital stock activities are satisfied are the corporate charter, the minutes 
of board of directors meetings, and the auditor’s analysis of capital stock transac- 
tions. The auditor should determine that each class of stock has a proper description, 
including the number of shares issued and outstanding and any special rights of an 
individual class. Auditors should also verify the proper presentation and disclosure 
of stock options, stock warrants, and convertible securities by examining legal docu- 
ments or other evidence of the provisions of these agreements. 
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Audit of Dividends 


Audit of Retained 
Earnings 
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The emphasis in the audit of dividends is on dividend transactions rather than on the 
ending balance. The exception is when there are dividends payable. 

All six transaction-related audit objectives for transactions are relevant for divi- 
dends. But typically, transactions related to dividends are audited on a 100 percent basis. 
The most important objectives, including those concerning dividends payable, are: 


1. Recorded dividends occurred (occurrence). 

Existing dividends are recorded (completeness). 
Dividends are accurately recorded (accuracy). 

Dividends are paid to stockholders that exist (occurrence). 
Dividends payable are recorded (completeness). 
Dividends payable are accurately recorded (accuracy). 


AMAR Wh 


Auditors can verify the occurrence of recorded dividends by examining the min- 
utes of board of directors meetings for authorization of the amount of the dividend 
per share and the dividend date. When doing so, the auditor should be alert to the 
possibility of unrecorded dividends declared, particularly shortly before the balance 
sheet date. A closely related audit procedure is to review the audit permanent file to 
determine whether restrictions exist on the payment of dividends in bond indenture 
agreements or preferred stock provisions. 

The accuracy of a dividend declaration can be audited by recalculating the amount 
on the basis of the dividend per share times the number of shares outstanding. If the 
client uses a transfer agent to disburse dividends, the total can be traced to a cash dis- 
bursement entry to the agent and also confirmed. 

When a client keeps its own dividend records and pays the dividends itself, the 
auditor can verify the total amount of the dividend by recalculation and reference to 
cash disbursed. In addition, auditors must verify whether the payment was made to 
the stockholders who owned the stock as of the dividend record date. They can test 
this by selecting a sample of recorded dividend payments and tracing payee informa- 
tion to the records produced by the stock transfer agent or by tracing payee informa- 
tion on the cancelled check to the dividend records. At the same time, auditors can 
verify the amount and the authenticity of the dividend check. 

Tests of dividends payable should be done in conjunction with declared dividends. 
Any unpaid dividend should be included as a liability. 


For most companies, the only transactions involving retained earnings are net earn- 
ings for the year and dividends declared. Other changes in retained earnings may 
include corrections of prior-period earnings, prior-period adjustments charged or 
credited directly to retained earnings, and the setting up or elimination of appropria- 
tions of retained earnings. 

To begin the audit of retained earnings, auditors first analyze retained earnings 
for the entire year. The audit schedule showing the analysis, which is usually a part of 
the permanent file, includes a description of every transaction affecting the account. 

To accomplish the audit of the credit to retained earnings for net income for the year 
(or the debit for a loss), auditors simply trace the entry in retained earnings to the net earn- 
ings figure on the income statement. This procedure must, of course, take place fairly late 
in the audit after all adjusting entries affecting net earnings have been completed. 

In auditing debits and credits to retained earnings, other than net earnings and 
dividends, auditors must determine whether the transactions should have been 
included. For example, prior-period adjustments can be included in retained earnings 
only if they satisfy the requirements of accounting standards. 

After the auditor is satisfied that the recorded transactions were correctly classified 
as retained earnings transactions, the next step is to decide whether they were accurately 
recorded. The audit evidence necessary to determine accuracy depends on the nature of 
the transactions. For example, if an appropriation of retained earnings is required for a 
bond sinking fund, auditors can determine the correct amount of the appropriation by 
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examining the bond indenture agreement. If there is a major loss charged to retained 
earnings because of a material nonrecurring abandonment of a plant, the evidence 
needed to determine the amount of the loss can be complex and include examining a 
large number of documents and records, as well as discussions with management. 

Auditors must also evaluate whether any transactions should have been included 
but were not. For example, if the client declared a stock dividend, the market value 
of the securities issued should be capitalized by a debit to retained earnings and a 
credit to capital stock. Similarly, if the financial statements include appropriations of 
retained earnings, the auditor should evaluate whether it is still necessary to have the 
appropriation as of the balance sheet date. 

Accounting standards require presentation and disclosure of information related to 
retained earnings. The auditor’s primary concern in determining whether presentation 
and disclosure objectives for retained earnings are satisfied primarily relates to disclosure 
of any restrictions on the payment of dividends. Often, agreements with bankers, stock- 
holders, and other creditors prohibit or limit the amount of dividends the client can pay. 
These restrictions must be disclosed in the footnotes to the financial statements. 


CONCEPT CHECK 


I. What are the primary objectives in the audit of owners’ equity accounts? 
2. Describe the duties of a stock registrar and a transfer agent. How does the use of their 
services affect the client’s internal controls? 


SUMMARY 


This chapter discussed the audit of the capital acquisition and repayment cycle, which in- 
cludes the primary sources of financing for most businesses. The cycle generally involves 
few transactions, but the individual transactions are often material, which influences the 
design and performance of tests in the cycle. The approach to auditing this cycle was illus- 
trated for notes payable, for related interest expense and accrued interest, and for owners’ 
equity and related accounts. 


ESSENTIAL TERMS 


Capital acquisition and repayment charter and authorizations by the board of 
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cycle—the transaction cycle that involves 
the acquisition of capital resources in the 
form of interest-bearing debt and owners’ 
equity, and the repayment of capital 


Capital stock certificate record—a rec- 
ord of the issuance and repurchase of capi- 
tal stock for the life of the corporation 


Closely held corporation—corporation 
with stock that is not publicly traded; typi- 
cally, there are only a few shareholders and 
few, if any, capital stock account transac- 
tions during the year 


Independent registrar—outside entity 
engaged by a corporation to make sure 
that its stock is issued in accordance with 
capital stock provisions in the corporate 
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directors; required by the SEC for publicly 
held corporations 


Note payable—a legal obligation to a 
creditor, which may be unsecured or se- 
cured by assets 


Publicly held corporation—corporation 
with stock that is publicly traded; typically, 
there are many shareholders and frequent 
changes in the ownership of the stock 


Shareholders’ capital stock master file— 
a record of the issuance and repurchase of 
capital stock for the life of a corporation 


Stock transfer agent—outside entity 
engaged by a corporation to maintain the 
stockholder records and often to disburse 
cash dividends 


REVIEW QUESTIONS 


22-1 (OBJECTIVE 22-1) List four examples of interest-bearing liability accounts commonly 
found in balance sheets. What characteristics do these liabilities have in common? How 
do they differ? 


22-2 (OBJECTIVE 22-2) It is common practice to audit the balance in notes payable in con- 
junction with the audit of interest expense and interest payable. Explain the advantages of 
this approach. 


22-3 (OBJECTIVE 22-2) Which analytical procedures are most important in verifying notes 
payable? Which types of misstatements can the auditor uncover by the use of these tests? 


22-4 (OBJECTIVE 22-2) Why is it more important to search for unrecorded notes payable 
than for unrecorded notes receivable? Suggest audit procedures that the auditor can use to 
uncover unrecorded notes payable. 


22-5 (OBJECTIVE 22-2) What is the primary purpose of analyzing interest expense? Given 
this purpose, what primary considerations should the auditor keep in mind when doing 
the analysis? 


22-6 (OBJECTIVE 22-2) Distinguish between (a) tests of controls and substantive tests of 
transactions and (b) tests of details of balances for liability accounts in the capital acquisi- 
tion and repayment cycle. 

22-7 (OBJECTIVE 22-2) List two types of restrictions long-term creditors often put on com- 
panies when granting them a loan. How can the auditor find out about these restrictions? 


22-8 (OBJECTIVES 22-3, 22-4) Evaluate the following statement: “The corporate charter and 
the bylaws of a company are legal documents; therefore, they should not be examined by 
the auditors. If the auditor wants information about these documents, an attorney should 
be consulted.” 


22-9 (OBJECTIVE 22-3) What are the major internal controls over owners’ equity? 


22-10 (OBJECTIVE 22-3) How does the audit of owners’ equity for a closely held corporation 
differ from that for a publicly held corporation? In what respects are there no significant 
differences? 


22-11 (OBJECTIVE 22-4) What kinds of information can be confirmed with a transfer agent? 


22-12 (OBJECTIVE 22-4) Evaluate the following statement: “The most important audit pro- 
cedure to verify dividends for the year is a comparison of a random sample of cancelled 
dividend checks and electronic payments with a dividend list that has been prepared by 
management as of the dividend record date.” 


22-13 (OBJECTIVE 22-4) If a transfer agent disburses dividends for a client, explain how the 
audit of dividends declared and paid is affected. What audit procedures are necessary to 
verify dividends paid when a transfer agent is used? 

22-14 (OBJECTIVE 22-4) What should be the major emphasis in auditing the retained earn- 
ings account? Explain your answer. 


22-15 (OBJECTIVES 22-3, 22-4) Explain the relationship between the audit of owners’ equity 
and the calculations of earnings per share. What are the main auditing considerations in 
verifying the earnings per share figure? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


22-16 (OBJECTIVE 22-2) The following multiple choice questions concern interest-bearing 
liabilities. Choose the best response. 


a. Which of the following controls will most likely justify a reduced assessed level of 
control risk for the completeness assertion for notes payable? 
(1) The accounting staff reviews board of director minutes for any indication of any 
transactions involving outstanding debt to make sure all borrowings are included 
in the general ledger. 
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(2) All borrowings that exceed $500,000 require approval from the board of direc- 
tors before loan contracts can be finalized. 

(3) Before approving disbursement of principal payments on notes payable, the trea- 
surer reviews terms in the note. 

(4) Accounting maintains a detailed schedule of outstanding notes payable that is 
reconciled monthly to the general ledger. 


b. When an auditor observes that the recorded interest expense seems to be excessive in 
relation to the balance in the bonds payable account, the auditor might suspect that 
(1) discount on bonds payable is understated. 

(2) bonds payable are understated. 

(3) bonds payable are overstated. 

(4) premium on bonds payable is overstated. 


c. In the audit of notes payable, which balance-related audit objective is generally one of 
the most important for the auditor to verify? 
(1) Notes payable reflected on the balance sheet at the end of the year exist. 
(2) Notes payable due to related parties are properly reflected on the balance sheet. 
(3) Existing notes payable are included on the balance sheet as of year end. 
(4) Notes payable are reflected at net realizable value as of the balance sheet date. 


22-17 (OBJECTIVES 22-2, 22-3, 22-4) The following questions concern the audit of accounts in 
the capital acquisition and repayment cycle. Choose the best response. 


a. During an audit of a publicly held company, the auditor should obtain written confir- 
mation regarding debenture transactions from the 
(1) debenture holders. 
(2) client’s attorney. 
(3) internal auditors. 
(4) trustee. 


b. Which of the following internal controls is least likely to reduce risks related to the 
occurrence transaction-related audit objective for issuances of stock? 
(1) The board of directors must approve the distribution of cash dividends. 
2) The issuance of any shares of stock must be preapproved by the board of directors. 
3) The company engages an independent registrar to issue stock certificates. 
4) The company maintains a capital stock certificate record that includes certificate 
number, number of shares issued, issue date, and name of person to whom cer- 
tificates are issued. 


Ss 


c. Which of the following audit procedures would be most relevant when examining the 
completeness transaction-related audit objective for capital stock? 
(1) The auditor examines minutes of the board of directors’ meetings to identify any 
actions involving the issuance of capital stock. 
(2) The auditor vouches entries in the client’s capital stock records to board minutes. 
(3) Confirmations of new stock issuances are sent to the client’s stock transfer agent. 
(4) The auditor traces entries of new stock issuances to the cash receipts journal. 
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DISCUSSION QUESTIONS AND PROBLEMS 


22-18 (OBJECTIVE 22-2) Items 1 through 6 are questions typically found in a standard inter- 
nal control questionnaire used by auditors to obtain an understanding of internal control 
for notes payable. In using the questionnaire for a client, a “yes” response indicates a pos- 
sible internal control, whereas a “no” indicates a potential deficiency. 


1. Are liabilities for notes payable incurred only after written authorization by a proper 
company official? 

2. Are paid notes cancelled and retained in the company files? 

3. Is a notes payable master file maintained? 

4. Is a periodic reconciliation made of the notes payable master file with the actual 
notes outstanding by an individual who does not maintain the master file? 

5. Is the individual who maintains the notes payable master file someone other than the 
person who approves the issue of new notes or handles cash? 

6. Are interest expense and accrued interest recomputed periodically by an individual 
who does not record interest transactions? 


Required . For each of the preceding questions, state the purpose of the control. 

. For each of the preceding questions, identify the type of financial statement misstate- 
ment that can occur if the control were not in effect. 

c. For each of the potential misstatements in part b., list an audit procedure that can be 


used to determine whether a material misstatement exists. 


oan) 


22-19 (OBJECTIVE 22-2) You are now performing an audit on the payment of dividends at 
a Rime plc, apublic listed company. Rime plc encourages their members to reinvest their 
earnings in new shares in the company. 
You were asked by the senior to verify that: 
1. Only members whose names are listed on the registrar of members at entitlement 
date are the only persons who are entitled to the dividend. 

2. Members who bought the shares after ex-div are excluded from the dividend payment. 

3. The amounts of dividend remitted to the members are correct. 

4. The dividends are sourced from accumulated earnings rather than from capital gains. 

5. The amounts reinvested by the members are correct. 
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Describe how you would perform those procedures. 


22-20 (OBJECTIVE 22-2) You are auditing Underwood Ltd. The following audit procedures 
were performed to address presentation and disclosure- related audit objectives related to 
Other payables and accruals, and Amount Owing to Director. In this case, other payables 
and accruals comprises of “other payables” i.e. amounts owing to companies in which the 
directors have financial interest, “Accrual” and “Deposits received” 


1. The schedule of “Other payables and accruals” in the footnotes includes amounts ow- 
ing to companies in which the directors have financial interest, accrual and deposits 
received. 

2. The total of “Other payables and accruals” in the footnotes agrees with the total of 
Other payables and accruals on the balance sheet. 

3. “The amount owing to director” represents advances from and payments made on 
behalf of the Group and the Company by a director which was unsecured, interest 
free and payable upon demand in cash and cash equivalents. 

4. “The amount owing to director” in the footnotes agrees with the total of amount ow- 
ing to director on the balance sheet. 


Identify the presentation and disclosure-related audit objective(s) for each audit procedure. 
(Hint: See Table 6-6 onpage 167). 


22-21 (OBJECTIVE 22-2) Your client, Red Horse, Inc., prepared the following schedule for 
long-term debt for the audit of financial statements for the year ended December 31, 2016: 


V/1/16 12/31/16 
Notes Payable Interest Due Beginning Ending 
Description Rate Date Balance Additions Payments Balance 


Required 


Required 


Mortgage 


Payable 6.25% 2022. = $ 1,125,000 = $200,000 $ 925,000 


Unsecured 


Notes Payable 6.00% 2024 7,500,000 = 475,000 7,025,000 
Secured Bonds 5.75% 2020 2,700,000 $1,250,000 300,000 3,650,000 


Convertible 


Debentures 5.25% 2027 — 10,000,000 — 10,000,000 


Total $11,325,000 $11,250,000 $975,000 $21,600,000 


a. What type of evidence would you examine to support the beginning balances in the 
accounts? 

b. What types of evidence would you use to support the additions to each account? 

c. What types of evidence would you examine to support payments? 

d. What procedures would you perform related to the ending balances in the accounts? 

e. What evidence would you use to verify interest rates and due dates? 

f. How might you use the information presented above to audit interest expense and 
interest payable accounts? 


22-22 (OBJECTIVE 22-2) The ending general ledger balance of $186,000 in notes payable 
for the Sterling Manufacturing Company is made up of 20 notes to eight different pay- 
ees. The notes vary in duration anywhere from 30 days to two years, and in amounts 
from $1,000 to $10,000. In some cases, the notes were issued for cash loans; in other 
cases, the notes were issued directly to vendors for the acquisition of inventory or 
equipment. The use of relatively short-term financing is necessary because all exist- 
ing properties are pledged for mortgages. Nevertheless, there is still a serious cash 
shortage. 

Record-keeping procedures for notes payable are not good, considering the large 
number of loan transactions. There is no notes payable master file or independent verifica- 
tion of ending balances; however, the notes payable records are maintained by a secretary 
who does not have access to cash. 
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Required 


Required 


Required 


The audit has been done by the same CPA firm for several years. In the current year, the 
following procedures were performed to verify notes payable: 

1. Obtain a list of notes payable from the client, foot the notes payable balances on the 
list, and trace the total to the general ledger. 

2. Examine duplicate copies of notes for all outstanding notes included on the listing. 
Compare the name of the lender, amount, and due date on the duplicate copy with 
the list. 

3. Obtain a confirmation from lenders for all listed notes payable. The confirmation 
should include the due date of the loan, the amount, and interest payable at the bal- 
ance sheet date. 

4, Recompute accrued interest on the list for all notes. The information for determin- 
ing the correct accrued interest is to be obtained from the duplicate copy of the note. 
Foot the accrued interest amounts and trace the balance to the general ledger. 


a. What should be the emphasis in the verification of notes payable in this situation? 
Explain. 

b. State the purpose of each of the four audit procedures listed. 

c. Evaluate whether each of the four audit procedures was necessary. Evaluate the 
sample size for each procedure. 

d. List other audit procedures that should be performed in the audit of notes payable in 
these circumstances. 


22-23 (OBJECTIVE 22-2) The following covenants are extracted from the indenture of a bond 
issue. The indenture provides that failure to comply with its terms in any respect automat- 
ically makes the loan immediately due (the regular date is 20 years hence). List any audit 
steps or reporting requirements you think should be taken or recognized in connection 
with each one of the following: 


a. The debtor company shall endeavor to maintain a working capital ratio of 2-to-1 at 
all times, and in any fiscal year following a failure to maintain said ratio, the company 
shall restrict compensation of officers to $100,000 per individual. Officers for this 
purpose shall include chairman of the board of directors, president, all vice presi- 
dents, secretary, and treasurer. 


b. The debtor company shall keep all property that is security for this debt insured 
against loss by fire to the extent of 100% of its actual value. Policies of insurance com- 
prising this protection shall be filed with the trustee. 


c. The debtor company shall pay all taxes legally assessed against property that is secu- 
rity for this debt within the time provided by law for payment without penalty and 
shall deposit receipted tax bills or equally acceptable evidence of payment of same 
with the trustee. 


d. A sinking fund shall be deposited with the trustee by semiannual payments of 
$300,000, from which the trustee shall, in his discretion, purchase bonds of this issue.* 


22-24 (OBJECTIVE 22-2) Soon HuatSdnBhd took out a 20-year mortgageon 1 april, 2017, 
for RM8,888,000 from Bank Maklumatand pledged the land and building on which the 
office stands as collateral. A monthly installment of RM50,000 was paid to the bank since 
May 2017. You are in charge of the current year audit for Soon Huat, for the year ended 
December 31, 2017. Soon Huat has been your client for tax and audit since 1998 but this is 
the first time they took a mortgage from a bank. 


a. Explain an audit schedule is kept in the permanent audit file for the mortgage. 
Provide the documents and information kept in the permanent audit pertaining to 
mortgages. 

b. Explain why the audit of mortgage payable, interest expense, deferred taxation and 
interest payable should all be done together. 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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c. Provide the audit procedures that are performed to verify the mortgage, the balance 
owed to Bank Maklumat pertaining to the mortgage and interest payable accounts 
and the interest suspense accounts. 

d. Identify the types of information that should be disclosed in the footnotes for this 
long-term note payable to help the auditor determine whether the completeness pre- 
sentation and disclosure audit objective is 


22-25 (OBJECTIVES 22-3, 22-4) Items 1 through 6 are common questions found in internal 
control questionnaires used by auditors to obtain an understanding of internal control for 
owners’ equity. In using the questionnaire for a client, a “yes” response indicates a possible 
internal control, whereas a “no” indicates a potential deficiency. 


1. Are all entries in the owners’ equity accounts authorized at the proper level in the 
organization? 

2. Are issues and retirements of stock authorized by the board of directors? 

3. Does the company use the services of an independent registrar or transfer agent? 

4. If an independent registrar and transfer agent are not used: 
a. Are unissued certificates properly controlled? 
b. Are cancelled certificates mutilated to prevent their reuse? 

5. Are common stock master files and stock certificate books periodically reconciled 
with the general ledger by an independent person? 

6. Is an independent transfer agent used for disbursing dividends? If not, is an imprest 
dividend account maintained? 


. For each of the preceding questions, state the purpose of the control. Required 

. For each of the preceding questions, identify the type of potential financial statement 
misstatements if the control is not in effect. 

c. For each of the potential misstatements in part b., list an audit procedure that the 

auditor can use to determine whether a material misstatement exists. 


ome) 


22-26 (OBJECTIVES 22-3, 22-4) The table below is an excerpt from Apple Inc.’s Statement of @@ | 
Shareholders’ Equity for its fiscal year ended September 27, 2014: oa © 


CONSOLIDATED STATEMENTS OF SHAREHOLDERS’ EQUITY 
(In millions, except number of shares, which are reflected in thousands) 


Common Stock and 


Ae ; Accumulated Other 
Additional Paid-In Capital 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Retained Comprehensive Total Shareholders’ 
Shares Amount Earnings Income/(Loss) Equity 
Balance as of September 28, 
2013 6,294,494 $19,764 $104,256 $(471) $123,549 
Net income 39,510 39,510 
Other comprehensive income/ 1,553 1,553 
(loss) 
Dividends and dividend (11,215) (11,215) 
equivalents declared 
Repurchase of common stock (488,677) (45,000) (45,000) 
Share-based compensation 2,863 2,863 
Common stock issued, net of 60,344 (49) (399) (448) 
shares held for employee taxes 
Tax benefit from equity 735 135 
awards, including transfer 
price adjustments 
Balance as of September 27, 5,866,161 $23,313 $87,152 $1,082 $111,547 
2014 
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Required 


Required 


Required 


a. How would the auditor verify the balances as of September 28, 2013? 

b. What would the auditor do to evaluate the amount shown as Net Income? 

c. What sources of evidence might the auditor use to satisfy the occurrence objective 
for each of the following? 
(1) Repurchase of common stock 
(2) Share-based compensation 
(3) Common shares issued 

d. How should the amounts shown as of September 27, 2014, relate to the amounts 
shown in Apple’s balance sheet as of the same date? 


22-27 (OBJECTIVES 22-3, 22-4) The following audit procedures are commonly performed by 
auditors in the verification of owners’ equity: 


1. Review the articles of incorporation and bylaws for provisions about owners’ equity. 

2. Analyze all owners’ equity accounts for the year and document the nature of any re- 
corded change in each account. 

3. Account for all certificate numbers in the capital stock book for all shares outstanding. 

4. Examine the stock certificate book for any stock that was cancelled. 

5. Review the minutes of the board of directors’ meetings for the year for approvals re- 
lated to owners’ equity. 

6. Recompute earnings per share. 

7. Review debt provisions and senior securities with respect to liquidation preferences, 
dividends in arrears, and restrictions on the payment of dividends or the issue of stock. 


a. State the purpose of each of these seven audit procedures. 
b. List the type of misstatements the auditors can uncover by the use of each audit procedure. 


22-28 (OBJECTIVE 22-4) You are a CPA engaged in the audit of the financial statements of 
Rakin Corporation for the year ended December 31, 2011. A CPA firm has not audited 
Rakin before. 

The stockholders’ equity section of Rakin Corporation’s balance sheet at December 
31, 2011, follows: 


Stockholders’ Equity 


Capital stock 25,000 shares of $10 par value authorized; $150,000 
15,000 shares issued and outstanding 


Capital contributed in excess of par value of capital stock 85,258 
Retained earnings 40,152 
Total stockholders’ equity $275,410 


Rakin Corporation was founded in 2000. The corporation has 10 stockholders and serves 
as its own registrar and transfer agent. There are no capital stock subscription contracts in 
effect. 


a. Prepare the detailed audit program for the audit of the three accounts comprising the 
stockholder’s equity section of Rakin Corporation’s balance sheet. (Do not include 
in the audit program the verification of the results of the current year’s operations.) 

b. After every other figure on the balance sheet has been audited, it might appear that 
the retained earnings figure is a balancing figure and requires no further verification. 
Why does the CPA verify retained earnings as is done with the other figures on the 
balance sheet? Discuss.* 


22-29 (OBJECTIVE 22-3) E-Antiques, Inc., is an Internet-based market for buyers and sell- 
ers of antique furniture and jewelry. The company allows sellers of antique items to list 
descriptions of those items on the E-Antiques Web site. Interested buyers review the Web 
site for antique items and then enter into negotiations directly with the seller for purchase. 
E-Antiques receives a commission on each transaction. 


*AICPA adapted. 
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The company, founded in 2012, initially obtained capital through equity funding pro- 
vided by the founders and through loan proceeds from financial institutions. In early 2015, 
E-Antiques became a publicly held company when it began selling shares on a national 
stock exchange. Although the company had never generated profits, the stock offering 
generated large proceeds based on favorable expectations for the company, and the stock 
quickly increased to above $100 per share. 

Management used the proceeds to pay off loans to financial institutions and to reac- 
quire shares issued to the company founders. Proceeds were also used to fund purchases of 
hardware and software used to support the online market. The balance of unused proceeds 
is currently held in the company’s bank accounts. 


a. Before performing analytical procedures related to the capital acquisition and repay- 
ment cycle accounts, consider how the process of becoming publicly held will affect 
accounts at E-Antiques, Inc. Describe whether each of the following balances would 
have increased, decreased, or experienced no change between 2014 and 2015 be- 
cause of the public offering: 


(1) Cash (7) Additional paid-in capital 
(2) Accounts receivable (8) Retained earnings 

(3) Property, plant, and equipment (9) Treasury stock 

(4) Accounts payable (10) Dividends 

(5) Long-term debt (11) Revenues 

(6) Common stock 


b. During 2016, the stock price for E-Antiques plummeted to around $19 per share. No 
new shares were issued during 2016. Describe the impact of this drop in stock price 
on the following accounts for the year ended December 31, 2016: 

(1) Common stock (3) Retained earnings 
(2) Additional paid-in capital 

c. How does the decline in stock price affect your assessment of client business risk and 

acceptable audit risk? 


22-30 (OBJECTIVE 22-4) You are a CPA engaged in the audit of the financial statements of 
Rakin Corporation for the year ended December 31, 2008. A CPA firm has not audited 
Rakin before. 

The stockholders’ equity section of Rakin Corporation’s balance sheet at December 31, 
2008, follows: 


Stockholders’ Equity 


Capital stock 25,000 shares of $10 par value authorized; $150,000 
15,000 shares issued and outstanding 


Capital contributed in excess of par value of capital stock 85,258 
Retained earnings 40,152 
Total stockholders’ equity $275,410 


Rakin Corporation was founded in 2000. The corporation has 10 stockholders and serves 
as its own registrar and transfer agent. There are no capital stock subscription contracts in 
effect. 


a. Prepare the detailed audit program for the audit of the three accounts compromis- 
ing the stockholder’s equity section of Rakin Corporation’s balance sheet. (Do not 
include in the audit program the verification of the results of the current year’s 
operations.) 

b. After every other figure on the balance sheet has been audited, it might appear that 
the retained earnings figure is a balancing figure and requires no further verification. 
Why does the CPA verify retained earnings as is done with the other figures on the 
balance sheet? Discuss.* 


*AICPA adapted. 
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Required 


Required 


CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


23-1 Identify the major types of 
cash and financial instru- 
ments accounts maintained 
by business entities. 

23-2 Show the relationship of 
cash in the bank to the 
various transaction cycles. 

23-3 Design and perform audit tests 
of the general cash account. 

23-4 Recognize when to extend 
audit tests of the general 
cash account to test further 
for material fraud. 

23-5 Design and perform audit 
tests of financial instruments 
accounts. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


AUDIT OF CASH AND 
FINANCIAL INSTRUMENTS 


Fake Bank Confirmation Hides Massive Fraud 


Calisto Tanzi formed Parmalat in 1961 at the age of 22 after inheriting a small family-run pas- 
teurization plant in the Italian town of Parma. In 1990, the company went public on the Milan 
stock exchange. By the end of that decade, Parmalat employed more than 30,000 people in 30 
countries, was Italy’s eighth largest company, and was a global consumer brand that sought to 
be the “Coca-Cola of milk.” 


= Parmalat began engaging in 


fraudulent transactions involv- 

ing fictitious sales as early as 

- 1993, and investigators indi- 

r cate that without the fraud, 

Sy Parmalat would have reported 

losses every year from 1990 

i until the fraud was revealed 

in 2003. During the period, 

the company took on increas- 

ing levels of debt to finance 

j international acquisitions. To 

raise money and increase sales, 

Parmalat established three 

Caribbean shell companies. The shell companies pretended to sell Parmalat products, and 
Parmalat used credit notes from the shell companies to raise money from banks. 


In 1999 the activities of the shell companies were transferred to the Cayman Islands. Two 
outside auditors allegedly came up with the audacious creation of a bogus milk producer in 
Singapore that provided 300,000 tons of milk powder to a Cuban importer through the compa- 
ny’s Cayman Islands subsidiary. Parmalat claimed that the Cayman Islands subsidiary held €3.95 
billion in cash in a New York bank, but the account did not exist. A forged bank confirmation 
was sent to the subsidiary’s auditors to support the fraudulent cash balance. 


Parmalat’s losses totaled €12 billion, and in 2008, Tanzi was sentenced to 10 years in prison for 
his role in the fraud. The company restructured and in 2005 was relisted on the Milan stock 
exchange. 


Source: Peter Gumbel, “How It All Went So Sour,” Time (November 21, 2004) (www.time.com/ 
time/magazine). 
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Cash is the only account included in every cycle except inventory and warehousing. It makes sense to study this 
audit area last because the evidence accumulated for cash balances depends heavily on the results of the tests in 
other cycles. For example, if auditors’ understanding of internal control and tests of controls and substantive tests 
of transactions in the acquisition and payment cycle cause them to believe that it is appropriate to reduce assessed 
control risk to low, they can reduce detailed tests of the ending balance in cash. If, however, auditors conclude that 
assessed control risk should be higher, extensive year-end testing may be necessary. 

Cash is important because of its susceptibility to theft, and cash can also be significantly misstated, as illus- 
trated in the case of Parmalat. This chapter highlights the linkage of cash in the bank to transaction cycles and de- 
scribes substantive tests of the cash balance. 

Financial instruments, which include investments in debt and equity securities as well as derivative instru- 
ments, vary in significance across clients, from a small percentage of assets for a manufacturing firm to a large 
percentage of assets for a financial institution. Valuation of financial instruments can be complex due to accounting 
standards and may require the use of specialists. This chapter discusses categories of investments, relevant controls, 
and audit procedures designed to test the balance of financial instruments. 


TYPES OF CASH AND FINANCIAL INSTRUMENTS ACCOUNTS 
We begin by discussing the types of cash and financial instruments accounts com- OBJECTIVE 23-1 


monly used by most companies, because the auditing approach to each varies. 

; : i i ee Identify the major types of cash 
Auditors are likely to learn about the various types of cash and financial instruments and financial instruments ac- 
balances when they obtain an understanding of the client’s business. The following _ counts maintained by business 
are the major types of accounts. entities. 


The general cash account is the focal point of cash for most organizations because 
virtually all cash receipts and disbursements flow through this account. For example, 
the disbursements for the acquisition and payment cycle are normally paid from this 
account, while the receipts of cash in the sales and collection cycle are deposited in the 
account. 


General Cash Account 


As discussed in Chapter 20 (p. 666), many companies establish a separate imprest 
payroll account to improve internal control over payroll disbursements. A fixed bal- 
ance, such as $25,000, is maintained in the imprest payroll bank account. Immediately 
before each pay period, one check or electronic transfer is drawn on the general cash 
account to deposit the total amount of the net payroll into the payroll account. After 
all payroll payments have cleared the imprest payroll account, the bank account 
should have a $25,000 balance. The only deposits into the account are for the weekly 
and semimonthly payroll, and the only disbursements are payments to employees. 

A somewhat different type of imprest account consists of one bank account for 
receipts and a separate one for disbursements. There may be several of these in a com- 
pany for different divisions. All receipts are deposited in the imprest account, and the 
total is transferred to the general account periodically. The disbursement account is 
set up on an imprest basis, but in a different manner than an imprest payroll account. A 
fixed balance is maintained in the imprest account, and the authorized personnel use 
these funds for disbursements at their own discretion as long as the payments are con- 
sistent with company policy. When the cash balance has been depleted, a reimburse- 
ment is made to the imprest disbursement account from the general account after the 
expenditures have been approved, usually through an online transfer. The use of such 
an imprest bank account improves controls over receipts and disbursements. 


Imprest Accounts 


For a company operating in multiple locations, it is often desirable to have a separate 
bank balance at each location. Branch bank accounts are useful for building banking 
relations in local communities and permitting the centralization of operations at the 
branch level. 


Branch Bank Account 
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Imprest Petty Cash Fund 


Cash Equivalents 


Financial Instruments 
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In some companies, the deposits and disbursements for each branch are made to 
a separate bank account, and the excess cash is periodically transferred electronically 
to the main office general bank account. The branch account in this instance is much 
like a general account, but at the branch level. 


An imprest petty cash fund is not a bank account, but it is sufficiently similar to 
cash in the bank to merit inclusion. A petty cash account is often something as simple 
as a preset amount of cash set aside in a locked cash drawer or safe for incidental 
expenses. The use of an imprest petty cash fund is more likely in smaller organiza- 
tions than larger ones to provide immediate funds for small cash acquisitions that can 
be paid more conveniently and quickly by cash than by check, or for the convenience 
of employees in cashing personal or payroll checks. An imprest cash account is set 
up on the same basis as an imprest branch bank account, but the expenditures are 
normally for much smaller amounts. Typical expenses include minor office supplies, 
stamps, and employee meals. A petty cash account usually does not exceed a few hun- 
dred dollars and is often reimbursed only once or twice each month. As a result of the 
immaterial balance, we do not discuss tests of details of balances on petty cash in this 
chapter. For the organization, the focus is on internal controls. 

A growing number of organizations, especially larger organizations, use pre- 
approved purchase cards (known as P-cards) to make miscellaneous purchases instead 
of maintaining a petty cash fund. These purchase cards function much like a credit 
card, but contain numerous restrictions on the nature and amount of purchases that 
can be made. 


Companies often invest excess cash accumulated during certain parts of the oper- 
ating cycle that will be needed in the reasonably near future in short-term, highly 
liquid cash equivalents. These may include time deposits, certificates of deposit, and 
money market funds. Cash equivalents, which can be highly material, are included 
in the financial statements as a part of the cash account only if they are short-term 
investments that are readily convertible to known amounts of cash, and there is insig- 
nificant risk of a change of value from interest rate changes. 

Figure 23-1 shows the relationship of general cash to the other cash accounts. All 
cash either originates from or is deposited in general cash. Throughout the chapter, 
we focus on auditing three types of accounts: the general cash account, imprest pay- 
roll bank account, and imprest petty cash. The other accounts are similar enough to 
these that we need not discuss them separately. 


Financial instruments accounts include investments in marketable securities such as 
debt and equity securities, derivative instruments, and hedging activities. Investments 


FIGURE 23-| Relationship of General Cash to Other Cash Accounts 


Branch Imprest 
bank account payroll account 


General = 
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in financial instruments can be classified as trading securities, available-for-sale secu- 
rities, or held-to-maturity securities, while derivatives can be classified as assets or 
liabilities, consistent with financial accounting standards. Companies may purchase 
marketable securities as a way to temporarily invest excess cash or may also invest 
in derivative financial instruments as a way of hedging. For example, an airline com- 
pany will invest in fuel hedges as a way to offset increases in operating fuel costs. We 
discuss internal control and auditing considerations related to financial instruments 
following our discussion of the cash accounts. 


CASH IN THE BANK AND TRANSACTION CYCLES 
A brief discussion of the relationship between cash in the bank and the other transac- OBJECTIVE 23-200 


tion cycles serves a dual function: Siow then cacouhe ofan 


1. It shows the importance of audit tests of various transaction cycles on the audit _ in the bank to the various 
of cash. transaction cycles. 
2. It aids in further understanding the integration of the different transaction cycles. 


Figure 23-2 illustrates the relationships of the various transaction cycles, the focal 
point being the general cash account (“Cash in bank”). By examining Figure 23-2, it is 
apparent why the general cash account is considered significant in almost all audits, 
even when the ending balance is immaterial. The amount of cash flowing into and out 
of the cash account is often larger than that for any other account in the financial 


FIGURE 23-2. Relationships of Cash in the Bank and Transaction Cycles 


Capital Acquisition and Repayment Cycle* Acquisition 
and Payment Cycle 
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of stock 
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(1) Decrease cash 
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— tax expense 
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balance 
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*For simplicity, only owners’ equity accounts are shown in this figure. For notes payable accounts, see Figure 22-1 on page 717. 
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Design and perform audit tests 
of the general cash account. 
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statements. Furthermore, the susceptibility of cash to embezzlement is greater than 
that for other types of assets because most other assets must be converted to cash to 
make them usable. 

In the audit of cash, auditors must distinguish between verifying the client’s rec- 
onciliation of the balance on the bank statement to the balance in the general ledger, 
and verifying whether recorded cash in the general ledger correctly reflects all cash 
transactions that took place during the year. It is relatively easy to verify the client’s 
reconciliation of the balance in the bank account to the general ledger, but a signifi- 
cant part of the total audit of a company involves verifying whether cash transactions 
are correctly recorded. For example, each of the following misstatements ultimately 
results in the improper payment of or the failure to receive cash, but none will nor- 
mally be discovered as a part of the audit of the bank reconciliation: 


¢ Failure to bill a customer 

¢ An embezzlement of cash by intercepting cash receipts from customers before 
they are recorded, with the account charged off as a bad debt 

¢ Duplicate payment of a vendor’s invoice 

* Improper payments of officers’ personal expenditures 

¢ Payment for raw materials that were not received 

¢ Payment to an employee for more hours than he or she worked 

¢ Payment of interest to a related party for an amount in excess of the going rate 


If these misstatements are to be uncovered in the audit, their discovery must occur 
through tests of controls and substantive tests of transactions, which we discussed 
in preceding chapters. The first two misstatements can be discovered as part of the 
audit of the sales and collection cycle (Chapter 14), the next three in the audit of the 
acquisition and payment cycle (Chapter 18), and the last two in the tests of the payroll 
and personnel cycle (Chapter 20) and the capital acquisition and repayment cycle 
(Chapter 22), respectively. 

Entirely different types of misstatements are normally discovered as a part of the 
tests of the bank reconciliation. These include: 


¢ Failure to include a check that has not cleared the bank on the outstanding 
check list, even though it has been recorded in the cash disbursements journal 

* Cash received by the client subsequent to the balance sheet date but recorded as 
cash receipts in the current year 

* Deposits recorded as cash receipts near the end of the year, deposited in the 
bank in the same month, and included in the bank reconciliation as a deposit in 
transit 

¢ Payments on notes payable debited directly to the bank balance by the bank but 
not entered in the client’s records 


AUDIT OF THE GENERAL CASH ACCOUNT 


The trial balance of Hillsburg Hardware Co. in Figure 6-5 on page 154 includes only 
one cash account. Notice, however, that all cycles, except inventory and warehousing, 
affect cash in the bank. 

In testing the year-end balance in the general cash account, the auditor must 
accumulate sufficient appropriate evidence to evaluate whether cash, as stated on the 
balance sheet, is fairly stated and properly disclosed in accordance with five of the 
eight balance-related audit objectives used for all tests of details of balances (existence, 
completeness, accuracy, cutoff, and detail tie-in). Rights to general cash and its clas- 
sification on the balance sheet are generally not of concern, and the realizable value of 
cash is not applicable. 

The methodology for auditing year-end cash is essentially the same as that for all 
other balance sheet accounts and is discussed in detail. 
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Most companies are unlikely to have significant client business risks affecting cash 
balances. However, client business risk may arise from inappropriate cash manage- 
ment policies or handling of funds held in trust for others. 

Client business risk is more likely to arise from cash equivalents and other types 
of investments. We discuss business risks related to investments in greater detail in the 
section on auditing financial instruments accounts. The auditor should understand 
the risks from the client’s investment policies and strategies, as well as management 
controls that mitigate these risks. 


The cash balance is not material on many audits, but cash transactions affecting the 
balance are almost always extremely material. Therefore, the potential often exists for 
material misstatement of cash. 

Because cash is more susceptible to theft than other assets, there is high inherent 
risk for the existence, completeness, and accuracy objectives. These objectives are 
usually the focus in auditing cash balances and the auditor may conclude that risks 
to these objectives are significant risks. Typically, inherent risk is low for all other 
objectives. 


Internal controls over year-end cash balances in the general account can be divided 
into two categories: 


1. Controls over the transaction cycles affecting the recording of cash receipts and 
disbursements 
2. Independent bank reconciliations 


In preceding chapters, we discussed controls affecting the recording of cash 
transactions, which are essential in assessing control risk for cash. For example, in 
the acquisition and payment cycle (Chapter 18), major controls include adequate 
segregation of duties between the check signing and accounts payable functions, 
signing of checks only by a properly authorized person, use of prenumbered checks 
printed on special paper, careful review of supporting documentation by the check 
signer before checks are signed, and adequate internal verification. Similar controls 
apply to electronic payments. If controls affecting cash-related transactions are oper- 
ating effectively, control risk is reduced, as are the audit tests for the year-end bank 
reconciliation. 

A monthly bank reconciliation of the general bank account on a timely basis by 
someone independent of the handling or recording of cash receipts and disbursements 
is an essential control over the ending cash balance. Companies with significant cash 
balances and large volumes of cash transactions may reconcile cash on a daily basis 
to online banking records. If a business defers preparing bank reconciliations for long 
periods, the value of the control is reduced and may affect the auditor’s assessment of 
control risk for cash. The reconciliation ensures that the accounting records reflect 
the same cash balance as the actual amount of cash in the bank after considering 
reconciling items. More important, the independent reconciliation provides an oppor- 
tunity for an internal verification of cash receipts and disbursements transactions. 


Identify Client Business 


Risks Affecting Cash 
(Phase 1) 


Set Performance 
Materiality and Assess 
Inherent Risk 

(Phase I) 


Assess Control Risk 
(Phase 1) 


POSITIVE PAY Positive pay is an automated fraud detection tool the company. All three components of the check 
offered by most banks. A company using positive must match exactly for the check to be paid. 
REDUCES CHECK pay sends a file of issued checks to the bank each When a check is presented that does not match, 
FRAUD day that checks are written. The file sent to the it is reported as an exception and an image of the 


bank includes the check number, account number, check is sent to the company. The company reviews 
issue date, and dollar amount. The positive pay the image and instructs the bank to pay or return 


service matches the account number, check num- the check. 
ber, and dollar amount of each check presented 


for payment against the list of checks provided by Source: Based on “All About Positive Pay” (positivepay.net). 
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Design and Perform 
Tests of Controls and 
Substantive Tests of 
Transactions (Phase II) 


Design and Perform 
Substantive Analytical 
Procedures (Phase III) 


Cash Balance (Phase III) 
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Design Tests of Details of 


The person performing the bank reconciliation may have read-only access to online 
bank account information to complete the reconciliation. Alternatively, the individual 
performing the bank reconciliation may only have access to bank statements mailed 
by the bank. If bank statements are received unopened by the reconciler, and physi- 
cal control is maintained over the statements until the reconciliations are complete, 
copies of cancelled checks, duplicate deposit slips, and other documents included 
in the statement can be examined without concern for the possibility of alterations, 
deletions, or additions. A careful bank reconciliation by competent client personnel 
includes the following actions: 


* Compare cancelled checks or electronic bank records of payment with the cash 
disbursements records for date, payee, and amount 

¢ Examine cancelled checks or electronic bank records of payment for signature, 
endorsement, and cancellation 

¢ Compare deposits in the bank with recorded cash receipts for date, customer, 
and amount 

¢ Account for the numerical sequence of checks, and investigate missing ones 

* Reconcile all items causing a difference between the book and bank balance and 
verify their appropriateness for the client’s business 

* Reconcile total debits on the bank statement with the totals in the cash dis- 
bursements records 

* Reconcile total credits on the bank statement with the totals in the cash receipts 
records 

* Review month-end interbank transfers for appropriateness and proper 
recording 

¢ Follow up on outstanding checks and stop-payment notices 


Most accounting software packages incorporate bank reconciliation as a part of 
end-of-month procedures. Even though the software reduces the clerical efforts in 
performing the bank reconciliation, the preparer still needs to do most of the pro- 
cedures listed above. The bank reconciliation control is enhanced when a qualified 
employee reviews the monthly reconciliation as soon as possible after its completion. 


Because the cash balance is affected by all other cycles except inventory and ware- 
housing, an extremely large number of transactions affect cash. In several earlier 
chapters, we discussed in detail the appropriate tests of controls and substantive tests 
of transactions for the audit of each cycle. For example, controls over cash receipts 
were studied in Chapter 14, and controls over cash disbursements were studied in 
Chapter 18. Cash transactions are audited through these transaction cycle tests. 


In many audits, the year-end bank reconciliation is extensively audited. Using substan- 
tive analytical procedures to test the reasonableness of the cash balance is therefore 
less important than it is for most other audit areas. 

Auditors commonly compare the ending balance on the bank reconciliation, 
deposits in transit, outstanding checks, and other reconciling items with the prior- 
year reconciliation. Similarly, auditors normally compare the ending balance in 
cash with previous months’ balances. These substantive analytical procedures may 
uncover misstatements in cash. 


The starting point for the verification of the balance in the general bank account is to 
obtain a bank reconciliation from the client for inclusion in the auditor’s documenta- 
tion. Figure 23-3 shows a bank reconciliation after the client has made adjustments 
to the account balance. Notice that the bottom figure in the audit schedule is the 
adjusted balance in the general ledger, which is the balance that should appear on 
the financial statements. The auditor must determine that the client has made adjust- 
ments such as those at the bottom of Figure 23-3, if they are material. 
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FIGURE 23-3 Audit Schedule for a Bank Reconciliation 
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Clawson Industries 
Bank Reconciliation 
12/31/16 


Acct. 101 — General account, First National Bank 
Balance per Bank 


Add: 
Deposits in transit 
12/30 
12/31 


Deduct 
Outstanding checks 
#7993 
8007 
8012 
8013 
8029 
8038 


12/16 
12/16 
12/23 
12/23 
12/28 
12/30 


Other reconciling items: Bank error 
Deposit for another bank customer credited 
to General account by bank, in error 


Balance per bank, adjusted 


Balance per books before adjustments 


Adjustments: 


Schedule _A-2 


Prepared by Client / DED 


Date 
1/10/17 


Approved by SW 


$109,713 XA-2/1 


10.017 ¥ 
11,100 ¥ 


3,068 X 
9,763 XK 
11,916 X 
14,717 X 
37,998 X 


10,000 X <87,462> 


<15,200> 
$ 28,168 


$ 32,584 


A-3 


L/A8/17 


Unrecorded bank service charge 
Nonsufficient funds check returned by bank, 
not collectible from customer 


<4,416> C-3/1 


Balance per books, adjusted $ 28,168 A-! 


W 


X Traced and agreed to bank confirmation. 
¥ Traced deposit to the December 2016 cash receipts records and to the January 2017 
bank cutoff statement, noting its proper classification as a deposit in transit at 12/31/16 
X% Traced check to December 2016 cash disbursements records and to the January 2017 
bank cutoff statement, noting its proper classification as an outstanding check at 12/31/16 
T/B Traced to 12/31/16 adjusted trial balance 


\\ Footed 


To audit cash in the bank, the auditor verifies whether the bank reconciliation 
received from the client is correct. The balance-related audit objectives and common 
tests of details of balances in the audit of the cash account are shown in Table 23-1. 
The most important objectives are existence, completeness, and accuracy. Therefore, 
they receive the greatest attention. In addition to these balance-related objectives, the 
auditor also performs tests related to the four presentation and disclosure objectives, 
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TABLE 23-1 


Balance-Related Audit Objective 


ledger (detail tie-in). 


Cash in the bank as stated on the reconciliation 
foots correctly and agrees with the general 


Common Tests of 
Details of Balances Procedures 


Foot the outstanding check and electronic 
payment list and deposits in transit. 

Prove the bank reconciliation as to additions 
and subtractions, including all reconciling 
items. 

Trace the book balance on the reconciliation 
to the general ledger. 


Balance-Related Audit Objectives and Tests of Details of Balances 
for General Cash in the Bank 


Comments 


These tests are done entirely on the bank 
reconciliation, with no reference to documents 
or other records except the general ledger. 


(completeness). 


Cash in the bank as stated on the 
reconciliation exists (existence). 
Existing cash in the bank is recorded 


Cash in the bank as stated on the 
reconciliation is accurate (accuracy). 


(See extended discussion for each of these.) 
Receipt and tests of a bank confirmation. 
Receipt and tests of a cutoff bank statement. 
Tests of the bank reconciliation. 

Extended tests of the bank reconciliation. 
Proof of cash. 

Tests for kiting. 


These are the three most important objectives 
for cash in the bank. The procedures are 
combined because of their close interdepen- 
dence. The last three procedures should be 
done only when there are internal control 
deficiencies. 


period (cutoff). 


Cash receipts and cash disbursements 
transactions are recorded in the proper 


Cash receipts: 

Count the cash on hand on the last day of the 
year and subsequently trace to deposits in 
transit and the cash receipts journal. Trace 
deposits in transit to subsequent period 
bank statement (cutoff bank statement). 


When cash receipts received after year-end 
are included in the journal, a better 
cash position than actually exists is 
shown. It is called “holding open” the 
cash receipts journal. Holding open the 
cash disbursements journal reduces ac- 


Cash disbursements: counts payable and usually overstates the 
Record the last check number used on the current ratio. 
last day of the year and subsequently trace __ The first procedure listed for receipts and 
to the outstanding checks and the cash disbursements cutoff tests requires the 
disbursements journal. auditor’s presence on the client’s premises 
Trace outstanding checks to subsequent at the end of the last day of the year. 
period bank statement. 
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such as review of minutes and loan agreements to determine if there are restrictions 
on cash that must be disclosed. As in all other audit areas, the actual audit procedures 
depend on materiality and the risks in cash that the auditor has identified in other 
parts of the audit. 

The following three procedures merit additional discussion because of their 
importance and complexity: receipt of a bank confirmation, receipt of a cutoff bank 
statement, and tests of the bank reconciliation. 


Receipt of a Bank Confirmation Although bank confirmations are not required 
under auditing standards, auditors usually obtain a direct receipt of a confirmation 
from every bank or other financial institution with which the client does business, 
except when there is an unusually large number of inactive accounts. If the bank does 
not respond to a confirmation request, the auditor should send a second request or 
ask the client to communicate with the bank to ask it to complete and return the 
confirmation to the auditor. As a convenience to auditors as well as to bankers who 
are requested to fill out bank confirmations, the AICPA has approved the use of a 
standard bank confirmation form. Figure 23-4 illustrates a completed standard 
confirmation, called a “standard form to confirm account balance information 
with financial institutions.” This standard form has been agreed upon by the AICPA 
and the American Bankers Association. As discussed in the vignette on page 771, 
bank confirmations are often sent electronically, and some banks will only re- 
spond to confirmation requests sent electronically through a designated third-party 
intermediary. 

The importance of bank confirmations in the audit extends beyond the verifica- 
tion of the actual cash balance. Typically, the bank confirms loan information and 
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bank balances on the same form, such as the three outstanding loans in Figure 23-4. 
Information on liabilities to the bank for notes, mortgages, or other debt typically 
includes the amount and date of the loan, the loan due date, the interest rate, and the 
existence of collateral. 

Banks are not responsible for searching their records for bank balances or loans 
beyond those included on the form by the CPA firm’s client. A statement near the 


Standard Confirmation of Financial Institution Account 


FIGURE 23-4 | Bajance Information 


Clawson Industries re oT —— 


Bank Confirmation Prepared by DED I/1O/17 
12/31/16 Approved by SW _I/I8/I7 


STANDARD FORM TO CONFIRM ACCOUNT 
BALANCE INFORMATION WITH FINANCIAL INSTITUTIONS 


Clawson Industries 
CUSTOMER NAME 


We have provided to our accountants the following information as of 
the close of business on December 31, 2016, regarding our deposit 
Financial and loan balances. Please confirm the accuracy of the information, 
noting any exceptions to the information provided. If the balances 
Institution’s First National Bank have been left blank, please complete this form by furnishing the 
balance in the appropriate space below.* Although we do not request 
Name and 200 Oak Street nor expect pate Seta : comprehensive, aie search a 
Address Midvale, Illinois 40093 your records, if during the process of completing this confirmation 
additional information about other deposit and loan accounts we 
may have with you comes to your attention, please include such 
information below. Please use the enclosed envelope to return the 
form directly to our accountants. 


|. At the close of business on the date listed above, our records indicated the following deposit balance(s): 


ACCOUNT NAME 


ACCOUNT NUMBER 


INTEREST RATE BALANCE* 


General account 


19751-974 


None 109,713.11 A2 


2. We were directly liable to the financial institution for loans at the close of business on the date listed above as follows: 
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ACCOUNT NO/ 
DESCRIPTION 


BALANCE* DATE DUE INTEREST RATE 


DATE THROUGH WHICH 
INTEREST IS PAID 


DESCRIPTION OF 
COLLATERAL 


N/A 50,000.00 V/9/17 4.75% N/A General 
N/A 90,000.00 V/9/17 4.625% N/A Security 
N/A 60,000.00 1/23/17 4.75% N/A Agreement 


ode fore. varuary 5, 20/7 


(Customer’s Authorized Signature) (Date) 


The information presented above by the customer is in agreement with our records. Although we have not conducted 
a comprehensive, detailed search of our records, no other deposit or loan accounts have come to our attention 


except as noted below. 
eC January 8, 20/7 


(Financial Institution Authorized Signature) (Date) 
voce President 
(Title) 


EXCEPTIONS AND/OR COMMENTS 


None 


Please return this form directly to our accountants: 


Jones and Smith CPAs 
2111 First Street 
Detroit, Michigan 48711 


Approved 1990 by American Bankers Association, American Institute of Certified Public Accountants, 
and Bank Administration Institute. Additional forms available from: AICPA-Order Department, 1-888-777-7077 


*Ordinarily, balances are intentionally left blank if they are not available at the time the form is prepared. 
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bottom of the form obligates banks to inform the CPA firm of any loans not included 
on the confirmation about which the bank has knowledge. The effect of this limited 
responsibility is to require auditors to satisfy themselves about the completeness 
objective for unrecorded bank balances and loans from the bank in another manner. 
Similarly, banks are not expected to inform auditors of such things as open lines of 
credit, compensating balance requirements, or contingent liabilities for guaranteeing 
the loans of others. If auditors want confirmation of this type of information, they 
should obtain a separate confirmation from the financial institution addressing the 
matters of concern. 

After auditors receive the completed bank confirmation, the balance in the bank 
account confirmed by the bank should be traced to the amount stated on the bank 
reconciliation. Similarly, all other information on the reconciliation should be traced 
to the relevant audit schedules. If the bank confirmation does not agree with the audit 
schedules, auditors must investigate the difference. 


Accessing Cutoff Bank Activity after Year-End A cutoff bank statement is a 
partial-period bank statement and the related copies of or digital access to cancelled 
checks, duplicate deposit slips, and other documents included in bank statements, 
provided by the bank directly to the CPA firm’s office or through online access to the 
bank’s electronic records of the client’s bank account information. The purpose of 
the cutoff bank statement or electronic access to account information on the bank’s 
system is to verify the reconciling items on the client’s year-end bank reconciliation 
with evidence that is maintained by the bank, not the client. To fulfill this purpose, the 
auditor requests the client to have the bank provide directly to the auditor a partial- 
period statement, or digital access to the information, for 7 to 10 days subsequent to 
the balance sheet date. 

Alternatively, auditors can wait until the subsequent period bank statement is 
available to verify reconciling items, if a cutoff statement is not received directly from 
the bank or online access to client bank account information is not available to the 
auditor. The purpose is to test whether the client’s employees have omitted, added, 
or altered any of the documents accompanying the statement. Obviously, this tests 
for intentional misstatements. The auditor performs the following verification in the 
month subsequent to the balance sheet date: 


* Foot the lists of all cancelled checks, debit memos, deposits, and credit memos 

* Verify that the bank statement balances when the footed totals are used 

* Review the items included in the footings to make sure that they were can- 
celled by the bank in the proper period and do not include any erasures or 
alterations 


Tests of the Bank Reconciliation A well-prepared independent bank reconciliation 
is an essential internal control over cash. Auditors test the bank reconciliation to de- 
termine whether client personnel have carefully prepared the bank reconciliation and 
to verify whether the client’s recorded bank balance is the same amount as the actual 
cash in the bank except for deposits in transit, outstanding checks, and other reconcil- 
ing items. 

In verifying the reconciliation, the auditor uses information available to the audi- 
tor through online access to client account information provided by the bank or in the 
cutoff bank statement to verify the appropriateness of reconciling items. The auditor’s 
verification of the reconciliation involves several procedures: 


¢ Verify that the client’s bank reconciliation is mathematically accurate. 

* Trace the balance on the bank confirmation and/or the beginning balance 
shown in online client banking records or in the cutoff statement to the balance 
per bank on the bank reconciliation to ensure they are the same. 
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ELECTRONIC 
CONFIRMATIONS 
OF BANK 
BALANCES 


As illustrated by the Parmalat fraud discussed at the 
beginning of this chapter, one of the shortcomings 
of the confirmation process is difficulty authenticat- 
ing the confirmation respondent. Although auditors 
generally confirm bank balances because they are 
considered a highly reliable source of evidence about 
cash in the bank, obtaining bank confirmations can 
be a time-consuming process. Organizations may not 
respond to confirmation requests, and it may take 
several weeks to receive confirmation responses 
through the mail. 


confirmation requests and the auditor to communi- 
cate directly with the confirming parties. 

AICPA auditing standards note that an electronic 
confirmation system that creates a secure confirma- 
tion environment may mitigate the risk of intercep- 
tion or alteration of the confirmation. Those stan- 
dards also note that when the auditor plans to rely 
on the controls over such a system or process, an 
assurance trust services report or another assurance 
report on the system or process may assist the audi- 
tor in assessing the design and operating effective- 


ness of electronic and manual controls embedded in 
that system or process. 


Automated confirmations using a third-party 
intermediary can address many of these short- 
comings and improve confirmation efficiency and 
effectiveness. Authentication checks are performed 
on all parties to the confirmation process (audit firm, 
client, and financial institution). A secure value-added 
network with digital signatures and encryption tech- 
nology is used to allow the client to authorize the 


Sources: |. George Aldhizer and James Cashell, “Automating 
the Confirmation Process: How to Enhance Audit Effectiveness 
and Efficiency,’ The CPA Journal (April 2006) p. 6-10; 2. AICPA 
Professional Standards, AU-C 505, “External Confirmations” 
(www.aicpa.org). 


¢ Trace checks written and recorded before year-end and included with the cutoff 
bank statement to the list of outstanding checks on the bank reconciliation and 
to the cash disbursements journal in the period or periods prior to the balance 
sheet date. All checks that cleared the bank after the balance sheet date and were 
included in the cash disbursements journal should also be included on the out- 
standing check list. If a check was included in the cash disbursements journal, it 
should be included as an outstanding check if it did not clear before the balance 
sheet date. Similarly, if a check cleared the bank before the balance sheet date, it 
should not be on the bank reconciliation. 

* Investigate all significant checks included on the outstanding check list that 
have not cleared the bank on the cutoff statement. The first step in the inves- 
tigation should be to trace the amount of any items not clearing to the cash 
disbursements journal. The reason for the check not being cashed should be 
discussed with the client, and if the auditor is concerned about the possibility 
of fraud, the vendor’s accounts payable balance should be confirmed to deter- 
mine whether the vendor has recognized the receipt of the cash in its records. 
In addition, a copy or access to a digital image of the cancelled check should be 
examined before the last day of the audit if it becomes available. 

* Trace deposits in transit to the cutoff bank statement. All cash receipts not 
deposited in the bank at the end of the year should be traced to the cutoff bank 
statement to make sure that they were deposited shortly after the beginning of 
the new year. 

¢ Account for other reconciling items on the bank statement and bank recon- 
ciliation. These include such items as bank service charges, bank errors and cor- 
rections, and unrecorded transactions debited or credited directly to the bank 
account by the bank. These reconciling items should be investigated to be sure 
that they have been treated properly by the client. 


Figure 23-5 (p. 772) illustrates how the types of audit tests are used to audit the 
general cash account. Observe in the figure that tests of controls, substantive tests 
of transactions, and substantive analytical procedures are done for each transaction 
cycle involving the cash account. 
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FIGURE 23-5 Types of Audit Tests Used for General Cash in the Bank 


Cash in bank 


Beginning balance 


Cash receipts Cash disbursements 


Audited by Audited by 
TOC-T, STOT, and SAP TOC-T, STOT, and SAP 


Ending balance 


Audited by 
TOC-B, SAP, and TDB 


Tests of 
controls in 
transaction 

cycles* 

(TOC-T) 


Tests of controls ; 
Substantive Substantive Tests of : 
over bank ; ; Sufficient 
Pe tests of analytical details of : 
reconciliation + fae + * appropriate 
transactions: procedures balances : 
evidence 


(ToC-B) (STOT) (SAP) (TDB) 


* Tests of controls in transaction cycles, substantive tests of transactions, and substantive analytical procedures are done for the four transaction 
cycles included in Figure 23-2 (p. 763). The primary tests of the ending cash balance are tests of details of balances. 


CONCEPT CHECK 


|. Explain the relationships among the initial assessed control risk, tests of controls and 
substantive tests of transactions for cash disbursements, and the tests of details of cash 
balances. Give one example in which the conclusions reached about internal controls in 
cash disbursements will affect the tests of cash balances. 


2. Why is the monthly reconciliation of bank accounts by an independent person an 
important internal control over cash balances? Which individuals will generally not be 
considered independent for this responsibility? 


Recognize when to extend 


account to test further for 
material fraud. 
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FRAUD-ORIENTED PROCEDURES 
OBJECTIVE 23-40 A major consideration in the audit of the general cash balance is the possibility of 


fraud. The auditor must extend the procedures in the audit of year-end cash to deter- 


suche ses ee nomena) es mine the possibility of a material fraud when there are inadequate internal controls, 


especially the improper segregation of duties between the handling of cash and the 
recording of cash transactions in the accounting records and the lack of an indepen- 
dently prepared monthly bank reconciliation. 

In designing procedures for uncovering fraud, auditors should carefully consider 
the nature of the deficiencies in internal control, the type of fraud that is likely to 
result from the deficiencies, the potential materiality of the fraud, and the audit proce- 
dures that are most effective in uncovering the fraud. 

When auditors are specifically testing for fraud, they should keep in mind that 
audit procedures other than tests of details of cash balances can also be useful. 
Procedures that may uncover fraud in the cash receipts area include: 


* Confirmation of accounts receivable 
* Tests performed to detect lapping 
* Review of the general ledger entries in the cash account for unusual items 
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* Comparison of customer orders to sales and subsequent cash receipts 
¢ Examination of approvals and supporting documentation for bad debts and 
sales returns and allowances 


Similar tests can be used for testing for the possibility of fraudulent cash 
disbursements. 

Even with reasonably elaborate fraud-oriented procedures, it is extremely diffi- 
cult to detect thefts of cash, as well as fraudulent financial reporting involving cash, 
especially omitted transactions and account balances. If, for example, a company has 
illegal offshore cash accounts and makes deposits to those accounts from unrecorded 
sales, it is unlikely that an auditor will uncover the fraud. Nevertheless, auditors are 
responsible for making a reasonable effort to detect fraud when they have reason to 
believe it may exist. The following procedures for uncovering fraud are directly related 
to year-end cash balances: extended tests of the bank reconciliation, proofs of cash, 
and tests of interbank transfers. 


When the auditor believes that the year-end bank reconciliation may be intentionally 
misstated, it is appropriate to perform extended tests of the year-end bank reconcilia- 
tion. The extended procedures verify whether all transactions included in the journals 
for the last month of the year were correctly included in or excluded from the bank 
reconciliation and verify whether all items in the bank reconciliation were correctly 
included. Let’s assume that there are material internal control weaknesses and the 
client’s year-end is December 31. Using a common approach, auditors: 


1. Start with the bank reconciliation for November and compare all reconcil- 
ing items with cancelled checks and other documents in the December bank 
statement. 

2. Compare all remaining cancelled checks and deposit slips in the December bank 
statement with the December cash disbursements and receipts journals. 

3. Trace all uncleared items in the November bank reconciliation and the December 
cash disbursements and receipts journals to the client's December 31 bank recon- 
ciliation to make sure those items are included. 

4. Verify that all reconciling items in the December 31 bank reconciliation represent 
items from the November bank reconciliation and December’s journals that have 
not yet cleared the bank. 


In addition to these four tests, the auditor must carry out procedures subsequent 
to the end of the year with the use of the bank cutoff statement. These tests are the 
same as previously discussed. 


Auditors sometimes prepare a proof of cash when the client has material internal 
control weaknesses in cash. The auditor uses a proof of cash to determine whether the 
following were done: 


¢ All recorded cash receipts were deposited 

¢ All deposits in the bank were recorded in the accounting records 
¢ All recorded cash disbursements were paid by the bank 

¢ All amounts that were paid by the bank were recorded 


A proof of cash includes the following four reconciliation tasks: 


1. Reconcile the balance on the bank statement with the general ledger balance at 
the beginning of the proof-of-cash period. 

2. Reconcile cash receipts deposited per the bank with receipts recorded in the cash 
receipts journal for a given period. 

3. Reconcile electronic payments and cancelled checks clearing the bank with those 
recorded in the cash disbursements journal for a given period. 

4. Reconcile the balance on the bank statement with the general ledger balance at 
the end of the proof-of-cash period. 


Extended Tests of the 
Bank Reconciliation 


Proof of Cash 
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A proof of cash of this nature is commonly called a four-column proof of cash 
that contains one column for each of the four types of information listed above. A 
proof of cash can be performed for one or more interim months, the entire year, or 
the last month of the year. The concern in an interim-month proof of cash, as shown 
in Figure 23-6, is not with the ending cash balance. Rather, the auditor’s focus is on 
reconciling the amounts recorded in the books with the amounts included in the bank 
statement. 

When doing a proof of cash, the auditor is combining substantive tests of trans- 
actions and tests of details of balances. A proof of cash receipts is a test of recorded 
transactions, whereas a bank reconciliation is a test of the balance in cash at a point 
in time. A proof of cash is an excellent method of comparing recorded cash receipts 
and disbursements with the bank account and with the bank reconciliation. However, 


FIGURE 23-6 | Interim Proof of Cash 
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Clawson Industries Schedule 
Interim Proof of Cash Prepared by TIS/16 
6/30/16 Approved by TINT/IN6 


Acct. 101 — General account, First National Bank 
5/31/16 Receipts Disbursements 6/30/16 


Balance per Bank $121,782.12 $627,895.20 $631,111.96 $118,565.36 


Deposits in transit 
5/31 21,720.00 <21,720.00> 


6/30 16,592.36 16,592.36 


Outstanding checks 
5/31 <36,396.50> <36,396.50> 
aI88 14,800.10 <14,800.10> 


NSF checks <4,560.00> <4,560.00> 


To allow for effect of a cash disburse- 
ment recorded as a credit item 
in cash receipts journal <8,500.00> <8,500.00> 


Balance per bank, adjusted $107,105.62 $609,707.56 $596,455.56 $120,357.62 


Balance per books, unadjusted $107,105.62 $609,707.56 $597,957.04 $118,856.14 
Bank debit memos (G) 120.00 <120.00> 


Payroll checks erroneously entered 
in General Disbursements Journal @© <1,621.48> 1,621.48 


Balance per books, adjusted $107,105.62 $609,707.56 $596,455.56 $120,357.62 


@ Per 6/30/16 bank statement. 

@ Detailed listing filed below; traced to subsequent bank statements. 

©) Outstanding-check list filed below: examined cancelled checks. 

@ Detailed listing filed below; all NSF items were redeposited in June and had all cleared as of 6/30/16. 
©) Safety deposit rentals; traced to recording via journal entry. 

© Traced to journal entry correcting error. 
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the proof of cash disbursements is not effective for discovering checks written for 
an improper amount, fraudulent checks, or other misstatements in which the dollar 
amount appearing on the cash disbursements records is incorrect. Similarly, a proof 
of cash receipts is not useful for uncovering the theft of cash receipts or the recording 
and deposit of an improper amount of cash. 


Embezzlers occasionally cover a theft of cash by a practice known as kiting: transfer- 
ring money from one bank to another and incorrectly recording the transaction. Near 
the balance sheet date, a check is drawn on one bank account and immediately depos- 
ited in a second account for credit before the end of the accounting period. In making 
this transfer, the embezzler is careful to make sure that the check is deposited at a late 
enough date so that it does not clear the first bank until after the end of the period. If 
the interbank transfer is not recorded until after the balance sheet date, the amount 
of the transfer is recorded as an asset in both banks. Although there are other ways to 
commit this fraud, each involves increasing the bank balance to cover a shortage by 
the use of interbank transfers. 

To test for kiting, as well as for unintentional errors in recording interbank trans- 
fers, auditors can list all interbank transfers made a few days before and after the 
balance sheet date and trace each to the accounting records for proper recording. 
Figure 23-7 (p. 776) shows an interbank transfer schedule with four interbank trans- 
fers made shortly before and after the balance sheet date. There are several things that 
should be audited on the interbank transfer schedule. 


¢ The accuracy of the information on the interbank transfer schedule should be verified. 
The auditor should compare the disbursement and receipt information on the 
schedule to the cash disbursements and cash receipts records to make sure 
that it is accurate. Similarly, the dates on the schedule for transfers that were re- 
ceived and disbursed should be compared with the bank statement. Finally, cash 
disbursements and receipts records should be examined to make sure that all 
transfers a few days before and after the balance sheet date have been included 
on the schedule. (The tick mark explanations on the schedule in Figure 23-7 
indicate that these steps have been taken.) 

° The interbank transfers must be recorded in both the receiving and disbursing banks. If, for 
example, there was a $10,000 transfer from Bank A to Bank B but only the dis- 
bursement was recorded, this is evidence of an attempt to conceal a cash theft. 

° The date of the recording of the disbursements and receipts for each transfer must be in the 
same fiscal year. In Figure 23-7, the dates in the two “date recorded in books” 
columns [(4) and (7)] are in the same period for each transfer; therefore, they 
are correct. If a cash receipt was recorded in the current fiscal year and the dis- 
bursement in the subsequent fiscal year, it may be an attempt to cover a cash 
shortage. 

¢ Disbursements on the interbank transfer schedule should be correctly included in or excluded 
from year-end bank reconciliations as outstanding checks. In Figure 23-7, the 12-31-16 
bank reconciliation for the general cash account should include outstanding 
checks for the second and third transfers but not the other two. [Compare the 
dates in columns (4) and (5).] Understatement of outstanding checks on the 
bank reconciliation indicates the possibility of kiting. 

¢ Receipts on the interbank transfer schedule should be correctly included in or excluded from 
year-end bank reconciliations as deposits in transit. In Figure 23-7, the 12-31-16 bank 
reconciliations for the savings and payroll accounts should indicate a deposit 
in transit for the third transfer but not for the other three. (Compare the dates 
for each transfer in the last two columns.) Overstating deposits in transit on the 
bank reconciliation indicates the possibility of kiting. 


Even though audit tests of interbank transfers are usually fraud oriented, they are 
often performed on audits in which there are numerous bank transfers, regardless of 


Tests of Interbank 
Transfers 
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FIGURE 23-7 
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Clawson Industries 
Schedule of Interbank Transfers 
December 31, 2016 


Disbursements 


Schedule _A-7 
Prepared by Client / DED 1/10/17 
Approved by SW 1/18/17 


Receipts 


Bank 
(2) 


Date Recorded _ Date Paid 
Amount in Books by Bank 


(3) (4) (5) 


Date Recorded Date Received 
Bank in Books by Bank 
(6) (8) 


First National - general 
First National - general 
First National - general 
First National - general 


$20,642 ¥ 
$37,998 A A-2 
$10,000 ¥ A.2 
$21,014 ¥ 


12-26-16 ® 
12-28-16 
12-30-16 
01-02-17 ® 


12-26-16 O 
01-02-17 O 
01-04-17 O 
01-04-17 OF 


v¥ Traced to cash disbursements records. 
Traced to cash receipts records. 

& Check included as outstanding on bank reconciliation. 
® Check or EFT (Electronic Funds Transfer) not included as outstanding on bank reconciliation. 
Receipt included as a deposit in transit. 

O Traced to bank statement. 
@ Receipt not included as a deposit in transit. 


Federal Charter - payroll 
Federal Charter - savings 
Federal Charter - savings 
Federal Charter - payroll 


12-27-16 O@ 
12-29-16 O@ 
01-03-17 D@ 
01-04-17 0@ 


Note: Examined cash disbursements and cash receipts records for checks to and deposits from bank accounts. None included 


except those listed above. 


MASQUERADING 
FOR CASH 
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internal controls. In addition to the possibility of kiting, inaccurate handling of trans- 
fers can result in a misclassification between cash and accounts payable. The mate- 
riality of transfers and the relative ease of performing the tests make many auditors 


believe they should always be performed. 


While businesses have always been concerned about 
someone entering their premises to steal cash on 
hand, they now have to focus on another type of 
security threat in which criminals can be in another 
part of the world but still confiscate an organiza- 
tion’s cash. In this new type of fraud, known as 
“masquerading,” fraudsters hack into an organiza- 
tion’s email or other communications system and 
pose as a senior executive, such as the CEO, CFO, 
or controller, and direct a lower-level employee to 
urgently execute a financial transaction that involves 
the disbursement of funds. Money is then wired or 
transmitted through the banking system to an ac- 
count controlled by the criminal. In some cases, the 
fraudsters are so bold that they even pick up the 
telephone to make the request. While wire transfers 
can sometimes be cancelled before the transac- 

tion is executed, in most cases it is hard to get the 
money back. 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-08-04 00:58:37. 


Financial institutions are working hard to raise 
awareness of masquerading as a fraud technique. 
Bank of the West offers the following tips: 


e Confirm that the request to initiate the wire is 
from an authorized source within the company 
Double- and triple-check email addresses 
Establish a multi-person approval process for 
transactions above a certain dollar threshold 
Slow down and be aware that fraud may be 
present any time wire transfers include tight 
deadlines 
Be suspicious of confidentiality of the 
transaction 
Require all wire transfers to be linked to a 
valid approved purchase or service 


Source: David McCann, “Criminals Posing as CFOs to Commit 
Wire Fraud,” August 13, 2014 (www.cfo.com). 
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AUDIT OF FINANCIAL INSTRUMENTS ACCOUNTS 


In testing the year-end balance of financial instruments, the auditor must accumu- 
late sufficient appropriate evidence to evaluate whether the financial instruments 
accounts, as stated on the balance sheet, are fairly stated and properly disclosed in 
accordance with all eight balance-related audit objectives used for tests of details of 
balances (existence, completeness, accuracy, classification, cutoff, detail tie-in, realiz- 
able value, and rights), as listed in more detail in Table 23-2 (p. 779). We now discuss 
the methodology for auditing year-end financial instruments. 


Business risks associated with financial instruments will vary depending on the sig- 
nificance and aggressiveness of a company’s investing activity. Risks will be higher 
for companies investing in less liquid securities or derivative financial instruments, 
and when investments represent a greater proportion of total assets. Financial ser- 
vices firms are exposed to greater risk due to the sheer volume of activity and types of 
instruments traded; for example, several firms have suffered large trading losses from 
the activities of individual “rogue traders” that were hidden by misstating investment 
and cash balances. In addition, overall market volatility is higher due to increased pro- 
gram trading activity in the markets. The auditor should obtain an understanding of 
the risks from the client’s investment policies and strategies, as well as management 
controls that mitigate these risks. 


The financial instruments account balances may be material depending on the type 
and frequency of investment activity. Factors that impact inherent risk of financial 
instruments include management’s objectives related to investment activity (e.g., 
hedging to minimize risk), the complexity of the securities or derivatives, the com- 
pany’s prior experience with certain investments, and whether external factors such 
as credit risk or interest rate risk impact the relevant assertions. Many of these risks 
relate to the accuracy, classification, and realizable value audit objectives. An addi- 
tional factor that increases inherent risk for financial instruments is the complexity of 
the relevant accounting standards. The majority of financial instruments are valued 
using fair value estimates. Accounting standards distinguish between a level 1 fair 
value estimate (observable, i.e., quoted, prices in an active market for identical assets 
or liabilities) and level 2 or level 3 estimates. Level 2 estimates use observable inputs 
(directly or indirectly) other than quoted prices, such as a price for a similar asset or 
liability, whereas level 3 estimates use unobservable inputs such as a pricing model 
or discounted cash flows. These estimates require significant management judgment 
and the auditor also needs to consider management incentives to classify investments 
as either fair value level 2 or level 3. All of these risks, combined with recent market 
volatility and the potential for markets to become illiquid, result in significant poten- 
tial for misstatements and misclassification of financial instruments balances. 


The auditor needs to have an understanding of the design and operating effectiveness 
of internal controls surrounding the initiation, authorization, processing, fair value 
measurement, and disclosure of investment activities. Most importantly, manage- 
ment needs to have (1) an investment strategy and an awareness of the level of expo- 
sure to various risks; (2) procedures in place to properly classify financial instruments 
as trading, available-for-sale, or held-to-maturity based on intent; (3) procedures in 
place to initiate and record transactions; and (4) strong internal controls over deter- 
mining fair value estimates, such as personnel with appropriate expertise or experi- 
ence in valuing level 2 or 3 estimates. If a company uses a service organization, such as 
an investment adviser or manager, to manage its investment activity, the auditor will 
need to have an understanding of controls for the service organization as well. The 
auditor can often rely on the internal controls of the service organization if the service 


Design and perform audit 
tests of financial instruments 
accounts. 


Identify Client Business 
Risks Affecting Financial 
Instruments (Phase I) 


Set Performance 
Materiality and Assess 
Inherent Risk (Phase 1) 


Assess Control Risk 
(Phase 1) 
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Design and Perform 
Tests of Controls and 
Substantive Tests of 
Transactions (Phase II) 


Design and Perform 
Substantive Analytical 
Procedures (Phase II) 


Design Tests of Details 
of Financial Instruments 
Balances (Phase III) 
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organization’s auditor issues a report on the service organization’s internal control, as 
discussed in Chapter 12 (pp. 380-381). Otherwise, the auditor may need specialized 
knowledge or may need to rely on a specialist from within the firm to assist in under- 
standing the relevant information systems. 


Unlike some other accounts where an auditor can choose to perform more extensive 
substantive testing and reduce reliance on controls, assessing internal controls related 
to financial instruments may be necessary in order to reduce audit risk to an accept- 
able level, especially for transaction-related audit objectives. Tests of transactions to 
be performed related to financial instruments include tests of purchases and sales 
of securities and derivatives or settling of hedging transactions, associated gains or 
losses, and interest and dividend income. The auditor typically relies on statements 
and brokers’ advices (notifications sent from brokers to a client with details of pur- 
chases or sales) from investment managers to test purchases and sales as long as 
controls are deemed effective, traces payments or proceeds to cash disbursements 
or receipts, and then tests mathematical accuracy of gains and losses. Interest income 
can be recomputed, and dividends can be recomputed and compared to a public 
source such as Standard and Poor’s dividend records. 


Substantive analytical procedures are typically not as important in assessing the year- 
end balance for financial instruments because these balances may fluctuate from 
year-to-year and are not necessarily linked to other accounts. However, substantive 
analytical procedures may be used to test the reasonableness of interest and dividend 
income. Auditors may also compare the relative percentage of investments in each of 
the three fair value categories (level 1, 2, or 3) from year-to-year to assess changes in 
investment strategy or portfolio risk. 


The starting point for testing the ending balance of financial instrument accounts is to 
obtain a schedule of investment activity for the year. A schedule of investment activity 
will include beginning balances, purchases and sales of financial instruments as well 
as the associated gains or losses, and ending balances recorded at fair market value or 
other value consistent with accounting standards. The schedule will also show divi- 
dend and interest income. The balance-related audit objectives and common tests of 
details of balances in the audit of financial instruments are shown in Table 23-2. The 
most important objectives are existence, accuracy, and realizable value for invest- 
ments in securities, while completeness is also important for derivative financial 
instruments. Presentation and disclosure objectives are also very important given 
the extensive footnote disclosure requirements related to fair value estimates. In our 
discussion of detailed tests, we assume the entity is using a service organization as an 
investment manager and that the auditor has determined that the service organization 
has effective controls. An investment manager, or investment advisor, typically initi- 
ates transactions, holds the securities, and processes and maintains records related 
to the transactions. We refer to the service organization as the broker-dealer in our 
discussion of audit procedures. 

The auditor requests a confirmation from the broker-dealer to confirm year-end 
holdings as well as settled and unsettled transactions that occurred during the year. 
The confirmation provides assurance on existence, completeness, and accuracy. It is 
important to simultaneously verify the cash, cash equivalents, and financial instru- 
ments balances to ensure management is not attempting to cover a cash shortage by 
double-counting cash. More extensive testing related to completeness is necessary 
if derivative financial instruments exist, such as examining contracts for embedded 
derivatives as well as reading minutes from board of directors meetings related to 
hedging and investment activity. 
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TABLE 23-2 


Balance-Related Audit Objective 


Financial instruments as listed on the 
schedule of investment activity foot 
correctly and agree with the general 
ledger (detail tie-in). 


Balance-Related Audit Objectives and Tests of Details of Balances 
for Financial Instruments Accounts 


Common Tests of 
Details of Balances Procedures 


Foot the schedule of investment activity. 


Prove the schedule of investment activity as 
to additions and subtractions. 

Trace the ending balance by category to the 
general ledger. 


Comments 


Investments will be categorized as trading, 
available-for-sale, and held-to-maturity. 
The schedule may include securities valued 
using level |, level 2, or level 3 fair value 

estimates. 


Financial instruments as listed on the 
schedule of investment activity exist 
(existence). 

Existing financial instruments are recorded 
(completeness). 

Financial instruments as listed on the 
schedule of investment activity are 
accurate (accuracy). 


Confirmation with the broker-dealer. 


Physical inspection of the security or 
derivative contract. 


Inspection of underlying agreements. 


Typically, confirmations provide sufficient 
evidence without the auditor having to 
physically inspect the security or contract. 


Securities and contracts will typically be held 
by the broker-dealer. 


Financial instruments are properly classified 
in the financial statements (classification). 


Test for proper classification as trading, 
available-for-sale, or held-to-maturity. 
Verify proper classification in the footnotes 
as level |, 2, or 3 fair value estimates. 


These classifications are based on manage- 
ment intent and require judgment. 


Financial instrument transactions are 
recorded in the proper period (cutoff). 


Examine selected transactions near year-end 
and related brokers’ advices to determine 
whether they are recorded in the proper 
period. 


Cutoff is more important in testing 
transactions as a client may want to 
record a gain or loss on sale at the end 
of the year. 


Financial instruments included in the 
schedule of investment activity at year- 
end are stated at appropriate amounts 
in accordance with accounting standards 
(realizable value). 


Verify quoted market prices. 

Test management's classifications. 

Test management’s assumptions related to 
valuation. 

Consider using a specialist for testing fair 
value estimates. 

Consider whether an impairment loss is 
required. 


This is the most difficult objective to test, 
and procedures will vary depending on the 
client’s investment strategy as well as the 
types of financial instruments. 


The entity has rights to financial instruments 
included in the schedule of investment 
activity (rights). 


Inspect underlying documents and contracts. 

Confirm significant terms with the 
counterparty to a derivative contract. 

Review minutes of board meetings to 
determine whether any securities are 
pledged as collateral. 


Rights are tested in conjunction with tests 
for existence and accuracy when reviewing 
purchases. 


Tests related to realizable value will vary according to the type of security and 


the associated accounting standards. Accounting standards may require that financial 
instruments be recorded at cost, fair value, or based on an investee’s financial results. 
Auditing guidance is provided for auditing accounting estimates and specifically for fair 
value estimates, as considerable auditor judgment is involved. Level 1 fair value estimates 
(identical assets with quoted market prices) are easier to audit and typically involve 
observing market prices at the end of the year, which can be done by examining The 
Wall Street Journal or another reputable financial publication. Level 2 and level 3 fair value 
estimates are more difficult to audit because they involve significant management judg- 
ment both in classification (level 2 or 3) and in determining the fair value. The auditor 
needs to test the reasonableness and appropriateness of assumptions and models used 
by management to determine fair value estimates. If an auditor chooses to use a specialist 
to test fair value estimates, auditing standards require the auditor to determine whether 
the specialist is objective and qualified, and the auditor needs to understand the methods 
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used by the specialist to determine fair values. It is also important for the auditor to con- 
sider management’s incentives to classify financial instruments as either level 2 or level 3 
due to differences in the estimates obtained under the different approaches, as well as the 
more extensive disclosure requirements related to level 3 fair value estimates. 


CONCEPT CHECK 


I. Explain why an auditor compares the “date of deposit according to the books” to the 
“date of disbursement according to the books” on an interbank transfer schedule to 
detect kiting. 

2. Briefly explain why accounting standards related to fair value estimates make the audit 
of financial instruments more complex. 


SUMMARY 


In this chapter, we have seen that transactions in most cycles affect the cash account. Because 
of the relationship between transactions in several cycles and the ending cash account bal- 
ance, the auditor typically waits to audit the ending cash balance until the results of tests of 
controls and substantive tests of transactions for all cycles are completed and analyzed. Tests 
of the cash balance normally include tests of the bank reconciliations of key cash accounts, 
such as the general cash account, imprest payroll account, and imprest petty cash fund. If 
auditors assess a high likelihood of fraud in cash, they may perform additional tests such as 
extended bank reconciliation procedures, a proof of cash, or tests of interbank transfers. 
The effort and amount of judgment involved in auditing financial instruments will 
vary depending on the client’s investment strategy and management incentives. Primary 
tests include confirmation with the broker-dealer as well as testing fair value estimates. 


ESSENTIAL TERMS 


Bank reconciliation—the monthly rec- 
onciliation, usually prepared by client per- 
sonnel, of the differences between the cash 
balance recorded in the general ledger and 
the amount in the bank account 

Branch bank accounts—separate bank 
accounts maintained at local banks by 
branches of a company 

Cash equivalents—excess cash invested 
in short-term, highly liquid investments 
such as time deposits, certificates of de- 
posit, and money market funds 

Cutoff bank statement—a partial-period 
bank statement and the related cancelled 
checks, duplicate deposit slips, and other 
documents included in bank statements, 
provided by the bank directly to the auditor; 
the auditor uses it to verify reconciling items 
on the client’s year-end bank reconciliation 
Fair value estimate—the price that would 
be received to sell an asset or paid to transfer 
a liability in an orderly transaction between 
market participants at the measurement date 
Financial instruments—a tradable asset of 
any kind, including cash, equity securities, 
debt securities, and derivative instruments 


General cash account—the primary 
bank account for most organizations; vir- 
tually all cash receipts and disbursements 
flow through this account at some time 
Imprest petty cash fund—a fund of cash 
maintained within the company for small 
cash acquisitions or to cash employees’ 
checks; the fund’s fixed balance is compar- 
atively small and is periodically reimbursed 
Kiting—the transfer of money from one 
bank to another and improperly recording 
the transfer so that the amount is recorded 
as an asset in both accounts; this practice is 
used by embezzlers to cover a theft of cash 
Proof of cash—a four-column audit 
schedule prepared by the auditor to rec- 
oncile the bank’s record of the client’s be- 
ginning balance, cash deposits, cleared 
checks, and ending balance for the period 
with the client’s records 

Standard bank confirmation form—a 
form approved by the AICPA and Ameri- 
can Bankers Association through which 
the bank responds to the auditor about 
bank balance and loan information pro- 
vided on the confirmation 


REVIEW QUESTIONS 


23-1 (OBJECTIVES 23-1, 23-2) Explain the relationships among the initial assessed control 
risk, tests of controls and substantive tests of transactions for cash receipts, and the tests of 
details of cash balances. 


23-2 (OBJECTIVE 23-1) What is meant by an imprest bank account for a branch operation? 
Explain the purpose of using this type of bank account. 


23-3 (OBJECTIVE 23-3) Evaluate the effectiveness and state the shortcomings of the prepara- 
tion of a bank reconciliation by the controller in the manner described in the following 
statement: “When I reconcile the bank account, the first thing I do is review the sorted list 
of returned checks and find which numbers are missing. Next I determine the amount of 
the uncleared checks by referring to the cash disbursements journal. If the bank account 
reconciles at that point, I am all finished with the reconciliation. If it does not, I search for 
deposits in transit, checks from the beginning outstanding check list that still have not 
cleared, other reconciling items, and bank errors until it reconciles. In most instances, 
I can do the reconciliation in 20 minutes.” 


23-4 (OBJECTIVE 23-3) How do bank confirmations differ from positive confirmations of 
accounts receivable? Distinguish between them in terms of the nature of the information 
confirmed, the sample size, and the appropriate action when the confirmation is not 
returned after the second request. Explain the rationale for the differences between these 
two types of confirmations. 


23-5 (OBJECTIVE 23-3) Evaluate the necessity of following the practice described by an audi- 
tor: “In confirming bank accounts, I insist upon a response from every bank the client has 
done business with in the past 2 years, even though the account may be closed at the bal- 
ance sheet date.” 


23-6 (OBJECTIVE 23-3) Describe what is meant by a cutoff bank statement and state its 
purpose. 


23-7 (OBJECTIVE 23-3) Why are auditors usually less concerned about the client’s cash 
receipts cutoff than the cutoff for sales? Explain the procedure involved in testing for the 
cutoff for cash receipts. 


23-8 (OBJECTIVE 23-3) Explain why, in verifying bank reconciliations, most auditors empha- 
size the possibility of a nonexistent deposit in transit being included in the reconciliation 
and an outstanding check being omitted rather than the omission of a deposit in transit 
and the inclusion of a nonexistent outstanding check. 


23-9 (OBJECTIVE 23-3) How will a company’s bank reconciliation reflect an electronic 
deposit of cash received by the bank from credit card agencies making payments on behalf 
of customers purchasing products from the company’s online Web site, but not recorded 
in the company’s records? 

23-10 (OBJECTIVE 23-4) Explain the purpose of a four-column proof of cash. List two types 
of misstatements it is meant to uncover. 

23-11 (OBJECTIVE 23-4) Distinguish between lapping and kiting. Describe audit procedures 
that can be used to uncover each. 

23-12 (OBJECTIVES 23-3, 23-4) Why is there a greater emphasis on the detection of fraud in 
tests of details of cash balances than for other balance sheet accounts? Give two specific 
examples that demonstrate how this emphasis affects the auditor’s evidence accumulation 
in auditing year-end cash. 

23-13 (OBJECTIVE 23-5) How would an auditor test the realizable value audit objective for a 
financial instrument classified as a level 3 fair value estimate? 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


23-14 (OBJECTIVES 23-3, 23-4, 23-5) The following questions deal with auditing year-end cash 
and financial instruments. Choose the best response. 


a. A CPA obtains a January 10 cutoff bank statement for a client directly from the 
bank. Very few of the outstanding checks listed on the client’s December 31 bank 
reconciliation cleared during the cutoff period. A probable cause for this is that 
the client 
(1) is engaged in kiting. 

(2) is engaged in lapping. 
(3) has overstated its year-end bank balance. 
(4) transmitted the checks to the payees after year-end. 


b. In establishing the existence and ownership of an investment held by a corporation 
in the form of publicly traded stock, an auditor should inspect the securities or 
(1) obtain written representations from management confirming that the securities 
are properly classified as trading securities. 
(2) inspect the audited financial statements of the investee company. 
(3) confirm the number of shares owned that are held by an independent custodian. 
(4) determine that the investment is carried at the lower of cost or market. 


c. The auditor should ordinarily send confirmation requests to all banks with which the 
client has conducted any business during the year, regardless of the year-end balance, 
because 
(1) this procedure will detect kiting activities that would otherwise not be detected. 
(2) the confirmation form also seeks information about indebtedness to the bank. 
(3) the sending of confirmation requests to all such banks is required by auditing 

standards. 
(4) this procedure relieves the auditor of any responsibility with respect to non- 
detection of forged checks. 


23-15 (OBJECTIVE 23-4) The following questions deal with discovering fraud in auditing 
year-end cash. Choose the best response. 


a. The auditor should control and verify all liquid assets simultaneously to prevent 
(1) unrecorded disbursements. 
(2) conversion of assets to conceal a shortage. 
(3) unauthorized disbursements. 
(4) embezzlement. 


b. Which of the following is one of the better auditing techniques to detect kiting? 
(1) Review composition of authenticated deposit slips 
(2) Review subsequent bank statements and cancelled checks received directly from 
the banks 
(3) Prepare year-end bank reconciliations 
(4) Prepare a schedule of bank transfers from the client’s books 


c. Which of the following cash transfers results in a misstatement of cash at December 
31, 2016? 


BANK TRANSFER SCHEDULE 


Disbursements Receipt 


Transfer Recorded in books Paid by bank Recordedin books Received by bank 


(1) 12/31/16 1/4/17 12/31/16 12/31/16 
(2) 1/4/17 1/5/17 12/31/16 \/4/17 
(3) 12/31/16 1/5/17 12/31/16 \/4/17 
(4) 1/4/17 I/1I/17 1/4/17 \/4/17 
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DISCUSSION QUESTIONS AND PROBLEMS 


23-16 (OBJECTIVES 23-3, 23-4) The following are the findings from your audit of the cash and 
bank accounts of your client Moneycome Company for the year ended 31 December 2017 
(Sunday). 

1. A check was received from a customer on 27 December 2017 (Wednesday). The dis- 
patch clerk forgot to bank in the check before the year-end close but banked in on 2 
January 2018 (Wednesday). 

2. Deposits for pre-orders of $2,000 were included as cash sales. 

3. The clerk forgot to enter the cash till totals from two checkout aisles amounting to 
$40,000. The cash till printouts show that the receipts are dated 31 December 2017. 

4. The manager who is the wife of the managing director took out $5,000 from the cash 
till to pay for her credit card on 28 December 2017. She returned the money a week 
later. 

5. A check to a supplier, issued on 27 December 2017, was only collected by their sales- 
man on 3 January 2018. 

6. The bank was asked to prepare two checkbooks on 29 December 2017. The dispatch 
collected the checks on 4 January 2018. 

7. The dispatch clerk was asked to buy postage stamps worth $400 on 31 December 
2017. When he arrived at the post office it was closed. He did not buy the stamps. 


a. Assuming that each of the observations above is fraudulent, state the most likely mo- Required 
tivation of the person responsible. 

b. Suggest an internal control procedure that can be instituted for each fraud to reduce 
the likelihood of occurrence? 

c. Provide an audit procedure that can be used to detect each fraud. 
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23-17 (OBJECTIVES 23-3, 23-4, 23-5) The following audit procedures are concerned with tests 
of details of general cash and financial instruments balances: 


1, 


2. 


Obtain a standard bank confirmation from each bank with which the client does 
business. 

Compare the balance on the bank reconciliation obtained from the client with the 
bank confirmation. 


. List the check number, payee, and amount of all material checks not returned with 


the cutoff bank statement. 


. Review minutes of the board of directors meetings, loan agreements, and bank con- 


firmation for interest-bearing deposits, restrictions on the withdrawal of cash, and 
compensating balance agreements. 


. Prepare a four-column proof of cash. 
. Compare the bank cancellation date with the date on the cancelled check for checks 


dated on or shortly before the balance sheet date. 


. Trace deposits in transit on the bank reconciliation to the cutoff bank statement and 


the current year cash receipts journal. 


. Compare the price per share on an equity investment at year-end according to the 


schedule of investment activity to the quoted market price according to an outside 
pricing source. 


. Confirm the balance of financial instruments at year-end with the broker-dealer ser- 


vice organization used by the client to manage its investment portfolio. 


Required Explain the objective of each audit procedure. 


23-18 (OBJECTIVE 23-3) The Cairo Wheat Supply Company, a client of yours, informs you 
that they recently lost several employees in their accounting department. They are strug- 
gling to prepare for their yearly audit, so they have asked you to assist with their bank 
reconciliation for the year ended December 31, 2010. You obtain the following financial 
information from the company: 


General Ledger Bank Statement 


Beginning balance 12/1/10 $ 8,178 $ 10,123 
Deposits 30,012 
Cash receipts journal 32,156 

Checks cleared (17,456) 
Cash disbursements journal (18,478) 

July bank service charge (30) 
Note paid directly (20,500) 
NSF check (125) 
Ending balance 12/31/10 $21,856 $ 20,024 


November 30 Bank Reconciliation 


Information in General Ledger and Bank Statement 


Balance per bank $10,123 
Deposits in transit 1,300 
Outstanding checks (3,245) 
Balance per books $8,178 


You also obtain some additional information, as follows: 


5. 


. Checks clearing that were outstanding as of November 30 totaled $3,000. 
. Checks clearing that were recorded in the December disbursements journal totaled 


$13,935. 


. A check for $500 just cleared the bank but has not yet been recorded in the cash 


disbursements journal. You learn that the expense is for several bushels of wheat 
recently purchased by the company. 


. In December, a check for $405 was mistakenly charged to Cairo Wheat Supply, but 


was actually intended for a different company’s bank account. The bank has agreed 
to credit Cairo Wheat Supply for the difference. 
Deposits in December consist of $1,300 from November and $28,712 from December. 
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6. Cairo Wheat Company signed a temporary loan agreement with the bank earlier 
in the year, a payment for which is due in December in the amount of $2,500. This 
amount has not yet been recorded on the books. 

7. Anexpected payment from a customer in the amount of $125 did not clear the bank. The 
credit manager investigated the matter and discovered that the account was closed after 
its owner died. The amount is not expected to be paid from the estate. 


a. Prepare a bank reconciliation that shows both the unadjusted and adjusted balance 
per books. 

. Prepare all adjusting entries. 

. What audit procedures would you use to verify each item in the bank reconciliation? 

. What is the cash balance that should appear on the December 31, 2010, financial 
statements? 


ands 


23-19 (OBJECTIVES 23-3, 23-4) In the audit of the Regional Transport Company, a large branch 
that maintains its own bank account, cash is periodically transferred to the central account 
in Cedar Rapids. On the branch account’s records, bank transfers are recorded as a debit to 
the home office clearing account and a credit to the branch bank account. Similarly, the 
home office account is recorded as a debit to the central bank account and a credit to the 
branch office clearing account. Gordon Light is the head bookkeeper for both the home 
office and the branch bank accounts. Because he also reconciles the bank account, the 
senior auditor, Cindy Marintette, is concerned about the internal control deficiency. 

As a part of the year-end audit of bank transfers, Marintette asks you to schedule the 
transfers for the last few days in 2016 and the first few days of 2017. You prepare the fol- 


lowing list: 
Date Recorded in Date Recorded in Date Deposited 
the Home Office the Branch Office in the Home Date Cleared 
Amount of Cash Receipts Cash Disbursements Office Bank the Branch Bank 
Transfer Journal Journal Account Account 
$17,000 12-27-16 12-29-16 12-26-16 12-27-16 
28,000 12-28-16 01-02-17 12-28-16 12-29-16 
16,000 01-02-17 12-30-16 12-28-16 12-29-16 
10,000 12-26-16 12-26-16 12-28-16 01-03-17 
21,000 01-02-17 01-02-17 12-28-16 12-31-16 
22,000 01-07-17 01-05-17 12-28-16 01-03-17 
39,000 01-04-17 01-06-17 01-03-17 01-05-17 


a. In verifying each bank transfer, state the appropriate audit procedures you should Required 
perform. 

. Prepare any adjusting entries required in the home office records. 

. Prepare any adjusting entries required in the branch bank records. 

. State how each bank transfer should be included in the December 31, 2016, bank 
reconciliation for the home office account after your adjustments in part b. 

e. State how each bank transfer should be included in the December 31, 2016, bank 

reconciliation of the branch bank account after your adjustments in part c. 


ands 


23-20 (OBJECTIVE 23-4) The following are various potential misstatements due to errorsor @@. 
fraud (1 through 7), and a list of auditing procedures (a. through h.) the auditor would con- oa © 
sider performing to gather evidence to determine whether the error or fraud is present. 


Possible Misstatements Due to Errors or Fraud 


1. The auditor suspects that a lapping scheme exists because an accounting department 
employee who has access to cash receipts also maintains the accounts receivable led- 
ger and refuses to take any vacation or sick days. 

2. The auditor suspects that the entity is inappropriately increasing the cash reported 
on its balance sheet by drawing a check on one account and not recording it as an 
outstanding check on that account and simultaneously recording it as a deposit in a 
second account. 
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. The entity’s cash receipts of the first few days of the subsequent year were properly 


deposited in its general operating account after the year-end. However, the auditor 
suspects that the entity recorded the cash receipts in its books during the last week of 
the year under audit. 


. The auditor noticed a significant increase in the number of times that petty cash was 


reimbursed during the year and suspects that the custodian is stealing from the petty 
cash fund. 


. The auditor suspects that a kiting scheme exists because an accounting department 


employee who can issue and record checks seems to be leading an unusually luxuri- 
ous lifestyle. 


. During tests of the reconciliation of the payroll bank account, the auditor notices that 


a check to an employee is significantly larger than other payroll checks. 


. The auditor suspects that the controller wrote several checks and recorded the cash 


disbursements just before year-end but did not mail the checks until after the first 
week of the subsequent year. 


List of Auditing Procedures 


a. 


ane 


g. 
h. 


Compare the details of the cash receipts journal entries with the details of the corre- 
sponding daily deposit slips. 


. Count the balance in petty cash at year-end. 
. Agree gross amount on payroll checks to approved hours and pay rates. 
. Obtain the cutoff bank statement and compare the cleared checks to the year-end 


reconciliation. 


. Examine invoices, receipts, and other documentation supporting reimbursement of 


petty cash. 

Send a standard bank confirmation confirming the balance in the bank at year-end. 
Examine payroll checks clearing after year-end with the payroll journal. 

Prepare a bank transfer schedule. 


Required For each possible misstatement, identify one audit procedure that would be most effective 
in providing evidence regarding the potential misstatement. Listed auditing procedures 
may be used once, more than once, or not at all. 


23-21 (OBJECTIVE 23-4) You are doing the first-year audit of Sherman School District and 
have been assigned responsibility for doing a four-column proof of cash for the month of 
October 2016. You obtain the following information: 


1. 


2. 


Balance per books September 30 $ 10,725 
October 31 5,836 

Balance per bank September 30 6,915 
October 31 8,276 

. Outstanding checks September 30 18Il 
October 31 2,615 

. Cash receipts for October per bank 28,792 
per books 20,27 | 

. Deposits in transit September 30 5,621 
October 31 996 


. Interest on a bank loan for the month of October, charged by the bank 


but not recorded, was $596. 


. Proceeds on a note of the Jones Company were collected by the bank on 


October 28 but were not entered on the books: 


Principal $ 2,900 
Interest 396 
$ 3,296 


*Based on AICPA question paper, American Institute of Certified Public Accountants. 
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8. On October 26, a $1,144 check of the Billings Company was charged to Sherman 
School District’s account by the bank in error. 

9. Dishonored checks are not recorded on the books unless they permanently fail to 
clear the bank. The bank treats them as disbursements when they are dishonored and 
as deposits when they are redeposited. Checks totaling $1,335 were dishonored in 
October; $600 was redeposited in October and $735 in November. 


a. Prepare a four-column proof of cash for the month ended October 31. It should show Required 
both adjusted and unadjusted cash. 
b. Prepare all adjusting entries. 


23-22 (OBJECTIVES 23-1, 23-2) Check forging offences is a crime in Bermuda and in many @) 

: ie : Ay N 
countries around the world. Visit the following webpage to learn about ways to protect ‘(>)\B? 
yourself from check forging. Then answer the following questions. ow 


http://www.police.bm/content/cheque-forging# Protecting 


1. Your staff is paid in cash every week. Is this practice safe? 

2. Your elderly bookkeeper insists that the checkbooks are kept in the safety box when 
they are unused. Her younger assistant says this practice is a hassle. Who is right? 

3. There are two signatories to the company bank account: your partner and you. You 
find your partner’s habit of signing blank checks irritating. Do you have the right to 
be irritated? 


23-23 (OBJECTIVE 23-5) McNeil Company, a medium-sized manufacturer of microwave ®@,. 
ovens, has been an audit client for the past five years. McNeil Co. has been steadily grow- om 
ing and recently hired a new CEO, who has decided to increase the level of investments in 
financial instruments as a way of generating a profit from excess cash from operations. 
The new CEO has invested primarily in actively-traded equity securities, but has also 
invested a portion of the cash in speculative derivative financial instruments. McNeil Co. 
is using a brokerage firm to execute trades, but the CEO is making the decision as to which 
securities and derivatives to purchase and sell. 
In planning for the current year’s audit engagement, you note the following related to 
the investments in financial instruments: 


1. The CEO discusses the investment strategy with the board of directors, but the board 
is not involved in the purchase and sale decisions and does not approve derivative 
contracts. The CEO enters into the speculative derivative financial instruments on 
behalf of McNeil Co. 

2. Total investments in financial instruments (trading and available-for-sale securities) 
at year-end represent approximately 15% of total assets. The majority of investments 
are classified as trading securities, and many of the equity investments would be con- 
sidered high-risk stocks. 

. The CEO makes the determination to classify securities as trading or available-for-sale. 

. McNeil Co. has recorded significant gains on sales of financial instruments. 

. The new CEO has an incentive to continue to grow the company and report a profit 
because he has been given an incentive bonus based on return on assets. 


wm Bw 


a. Identify the inherent and control risks related to the financial instruments accounts Required 
for McNeil Co. 

b. Identify at least two audit procedures the auditor would perform to test the existence 
balance-related audit objective for the trading and available-for-sale securities. 

c. How would the auditor test the completeness balance-related audit objective for the 
speculative derivative financial instruments? 

d. Identify at least two audit procedures the auditor would perform to test the realizable 
value balance-related audit objective for the financial instruments accounts. Assume 
the investments in stock are all actively-traded in a liquid market, but the derivative 
financial instruments require a level 3 fair value estimate. 

e. In your opinion, would the audit of financial instruments require the use of a valua- 
tion specialist? Why or why not? 
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23-24 (OBJECTIVE 23-5) Visit the following URL to learn about “International standard on 
auditing (ISA) 540: Auditing accounting estimates, including fair value accounting esti- 
mates, and related disclosures” http://www.ifac.org/system/files/downloads/a028-2010- 
iaasb-handbook-isa-540.pdf 

Para 2 mentions, “Some financial statement items cannot be measured precisely, 
but can only be estimated. For purposes of this ISA, such financial statement items are 
referred to as accounting estimates. The nature and reliability of information available 
to management to support the making of an accounting estimate varies widely, which 
thereby affects the degree of estimation uncertainty associated with accounting estimates. 
The degree of estimation uncertainty affects, in turn, the risks of material misstatement of 
accounting estimates, including their susceptibility to unintentional or intentional man- 
agement bias.” 


1. What are the evidence that an auditor should obtain in order to get an understanding 
in order to provide a basis for the identification and assessment of the risks of mate- 
rial misstatement for accounting estimates when performing risk assessment proce- 
dures and related activities? (Hint: The Requirements) 

2. Your client, whose core business is selling groceries,owns a shopping mall in the 
heart of town. Recently the local government has announced that a new Light Rail 
Transit station will be built opposite the mall. With the new development, you are 
of the opinion that the mall cannot be valued accurately at historical cost. You have 
proposed that they engage a property valuation expert to revalue the property. Your 
client wants to know why you can’t do the estimate yourself as “accountants are all 
experts in figures”. 
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COMPLETING THE 


AUDIT 


CHAPTER 24 


ART 5 includes only one chapter and covers the fourth 

and final phase of an audit: completing the audit. Even 

when auditors perform the other phases of an audit 
well, if they do a poor job carrying out the completion phase, 
the quality of the audit will be low. When auditors perform the 
planning phase (phase I) and the two testing phases (phases II 
and III) well, the completion phase is typically relatively easy. 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


24-1 


24-2 


24-3 


24-4 


24-5 


24-6 


24-7 


24-8 
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Design and perform audit 
tests related to presenta- 
tion and disclosure audit 
objectives. 

Conduct a review for 
contingent liabilities 

and commitments. 

Obtain and evaluate letters 
from the client’s attorneys. 
Conduct a post-balance-sheet 
review for subsequent events. 
Design and perform the 

final steps in the evidence- 
accumulation segment of 

the audit. 

Integrate the audit evidence 
gathered and evaluate the 
overall audit results. 
Communicate effectively 

with the audit committee 

and management. 

Identify the auditor’s responsi- 
bilities when facts affecting the 
audit report are discovered 
after its issuance. 


COMPLETING THE AUDIT 


Good Review Requires More Than Looking at Audit Files 


Larry Lenape, an audit senior at Santro, Best & Harmon, assigned staff assistant Clawson 
Little the audit of accounts payable for Westside Industries, a large equipment manufacturer. 
Accounts payable is a major liability account for a manufacturing company, and testing accounts 
payable cutoff is an important audit area. Testing primarily involves reviewing the liability 
recorded by the client by examining subsequent payments to suppliers and other creditors to 
ensure that they were correctly recorded. 


Lenape observed that Little 
was spending a lot of time on 
the phone, apparently on per- 
sonal matters. Shortly before 
the audit was completed, Little 
announced that he was leav- 
ing the firm. Despite Little’s 
distractions due to his personal 
affairs, he completed the audit 
work he was assigned within 
the budgeted time. 


Because of Lenape’s concern 
about Little’s work habits, he 
decided to review the audit files with extreme care. Every schedule he reviewed was properly 
prepared, with tick marks entered and explained by Little, indicating that he had made an ex- 
tensive examination of underlying data and documents and had found the client’s balance to 
be adequate as stated. Specifically, there were no payments subsequent to year-end for inven- 
tory purchases received during the audit period that had not been accrued by the company. 


When Lenape finished the audit, he notified Kelsey Mayburn, the engagement audit manager, 
that the files were ready for her review. She had considerable knowledge about equipment 
manufacturers and also about Westside Industries. Mayburn reviewed all of the audit files, 
including substantive analytical procedures performed during the audit. After calculating ad- 
ditional analytical procedures during her review, she contacted Lenape and told him accounts 
payable did not seem reasonable to her. She asked him to do some additional checking. Lenape 
went back and looked at all the documents that Little had indicated in the audit files that he 
had inspected. It was quickly apparent that Little had either not looked at the documents or did 
not know what he was doing when he inspected them. There were almost $5 million of pur- 
chases applicable to the audit period that had not been included as liabilities. Mayburn’s review 
probably saved Santro, Best & Harmon significant embarrassment or worse. 
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Starting with Chapter 6, the first three phases of the audit process were studied, as outlined by the flowchart in the 
margin. Attention is now given to the fourth and final phase, which is shaded in the figure: completing the audit. As 
the chapter-opening case illustrates, the final phase of the audit demands careful and thoughtful review of the audit 
by an experienced and knowledgeable person. In addition to reviewing the results, several other aspects of complet- 
ing the audit are critical to the success of an audit. In this chapter, the seven parts of completing the audit outlined by 


the flowchart in the margin on page 792 are covered. 


PERFORM ADDITIONAL TESTS 
FOR PRESENTATION AND DISCLOSURE 


Chapter 6 described the need to perform procedures to satisfy the three categories of 
audit objectives: transaction-related objectives, balance-related objectives, and pre- 
sentation and disclosure-related objectives. Our discussion of the first three phases of 
the audit explained how auditors design and perform audit tests to obtain sufficient 
appropriate evidence to support each of these categories of audit objectives. Our illus- 
trations of transaction cycle testing emphasized performing audit tests to support the 
six transaction-related and the eight balance-related audit objectives. We’ve discussed 
how those procedures also provide evidence about the four presentation and disclo- 
sure objectives, which are summarized in the first column of Table 24-1. 

As part of phase IV of the audit, auditors evaluate evidence they obtained during 
the first three phases of the audit to determine whether they should perform additional 
procedures for presentation and disclosure-related objectives. Auditors approach 
obtaining evidence for presentation and disclosure objectives consistent with how they 
approach obtaining evidence for transaction-related and balance-related objectives. 


* Perform procedures to obtain an understanding of controls related to presenta- 
tion and disclosure objectives as a part of risk assessment procedures. 

* Conduct tests of controls related to disclosures when the initial assessment of 
control risk is below maximum. 

¢ Perform substantive procedures to obtain assurance that all audit objectives are 
achieved for information and amounts presented and disclosed in the financial 
statements. 


The second column of Table 24-1 includes examples of substantive procedures 
related to the presentation and disclosure objectives. 

Often, procedures for presentation and disclosure-related objectives are integrated 
with the auditor’s tests for transaction-related and balance-related objectives. For 


i). h2 Si Presentation and Disclosure Audit Objectives 


Audit Objectives Examples of Substantive Procedures 


Review debt contracts to determine that accounts 
receivable are pledged as collateral. 


Occurrence and rights and obligations—Disclosed 
events and transactions have occurred and pertain 
to the entity. 


Completeness—AIl disclosures that should have been Use a disclosure checklist to determine if the financial 
included in the financial statements have been statements include all disclosures required by 
included. accounting standards. 


Review financial statements to determine if assets are 
properly classified between current and noncurrent 
categories. Read the footnotes for clarity. 


Classification and understandability—Financial information 
is appropriately presented and described and 
disclosures are clearly expressed. 


Accuracy and valuation—Financial and other information 
are disclosed fairly and at appropriate amounts. 


Reconcile amounts included in the long-term debt 
footnotes to information examined and supported in 
the auditor's long-term debt audit files. 


Summary of the 
Audit Process 


PHASE | 
Plan and design 
an audit approach 


PHASE II 
Perform tests of 
controls and 
substantive tests 
of transactions 


PHASE III 
Perform substantive 
analytical procedures 

and tests of details 
of balances 


PHASE IV 
Complete the 
audit and issue 
an audit report 
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Design and perform audit tests 
related to presentation and 
disclosure audit objectives. 
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Phase IV— 


Completing the Audit 


Perform additional 
tests for presenta- 
tion and disclosure 


Review for 
contingent liabilities 


Review for 
subsequent events 


Accumulate 
final evidence 


Evaluate results 


Issue audit report 


Communicate with 
audit committee 
and management 


Conduct a review for contingent 
liabilities and commitments. 


example, as part of the audit of accounts receivable, auditors evaluate the need to 
separate notes receivable and amounts due from affiliates and trade accounts due from 
customers. They must also determine that current and noncurrent receivables are clas- 
sified separately and any factoring or discounting of notes receivable is disclosed. 

While much of the information presented and disclosed in the financial state- 
ments is audited as part of the auditor’s testing in earlier phases of the audit, in phase 
IV auditors evaluate evidence obtained during the first three phases of the audit to 
assess whether additional evidence is needed for the presentation and disclosure 
objectives. In phase IV, auditors also evaluate whether the overall presentation of the 
financial statements and related footnotes complies with accounting standards. This 
includes an evaluation of whether individual financial statements reflect the appro- 
priate classification and description of accounts consistent with accounting require- 
ments and that the information is presented in proper form and with the proper 
terminology required by accounting standards. 

One of the auditor’s primary concerns related to presentation and disclosure- 
related objectives is determining whether management has disclosed all required 
information (completeness objective for presentation and disclosure). To assess risks 
that the completeness objective for presentation and disclosure is not satisfied, audi- 
tors consider information obtained during the first three phases of audit testing to 
determine if they are aware of facts and circumstances that should be disclosed. 

Due to the unique nature of disclosures related to contingent liabilities and sub- 
sequent events, auditors often assess the risk as high that all required information 
may not be completely disclosed in the footnotes. Audit tests performed in earlier 
audit phases often do not provide sufficient appropriate evidence about contingent 
liabilities and subsequent events. Therefore, auditors design and perform procedures 
in every audit to review for contingent liabilities and subsequent events as part of their 
phase IV testing. These procedures are discussed next. 


REVIEW FOR CONTINGENT LIABILITIES 
AND COMMITMENTS 


OBJECTIVE 24-200 A contingent liability is a potential future obligation to an outside party for an 


unknown amount resulting from activities that have already taken place. Material 
contingent liabilities must be disclosed in the footnotes. Three conditions are required 
for a contingent liability to exist: 


1. There is a potential future payment to an outside party or the impairment of an 
asset that resulted from an existing condition 

2. There is uncertainty about the amount of the future payment or impairment 

3. The outcome will be resolved by some future event or events 


For example, a lawsuit that has been filed but not yet resolved meets all three 
conditions. 

Accounting standards use two primary approaches in dealing with uncertainty 
in loss contingencies. The first measures the contingency using a fair value approach. 
The second approach uses a probability threshold. With the probability threshold, 
the standards describe three levels of likelihood of occurrence (ranging from remote 
to probable) and the appropriate financial statement treatment for each likelihood. 
These requirements are summarized in Table 24-2. To evaluate whether the client has 
applied the appropriate approach and treatment, the auditor must exercise consider- 
able professional judgment. 

Contingency footnotes should describe the nature of the contingency to the 
extent it is known and the opinion of legal counsel or management as to the expected 
outcome. Figure 24-1 is an illustration of a footnote for pending litigation and 
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97 See Likelihood of Occurrence and Financial Statement Treatment 


Likelihood of Occurrence of Event Financial Statement Treatment 


Remote (slight chance) 


No disclosure is necessary. 


Reasonably possible (more than remote, but less 
than probable) 


Footnote disclosure is necessary. 


Probable (likely to occur) ° If the amount can be reasonably estimated, 
financial statement accounts are adjusted. 
¢ If the amount cannot be reasonably estimated, 


footnote disclosure is necessary. 


company guarantees of debt, which are both accounted for using the probability 
threshold approach. 
Auditors are especially concerned about certain contingent liabilities: 


¢ Pending litigation for patent infringement, product liability, or other actions 
* Income tax disputes 

¢ Product warranties 

* Notes receivable discounted 

* Guarantees of obligations of others 

¢ Unused balances of outstanding letters of credit 


Auditing standards make it clear that management, not the auditor, is responsible 
for identifying and deciding the appropriate accounting treatment for contingent lia- 
bilities. In many audits, it is impractical for auditors to uncover contingencies without 
management's cooperation. 

The auditor’s primary objectives in verifying contingent liabilities are: 


¢ Evaluate the accounting treatment of known contingent liabilities to determine 
whether management has properly classified the contingency (classification 
presentation and disclosure objective). 

* Identify to the extent practical any contingencies not already identified by man- 
agement (completeness presentation and disclosure objective). 


Closely related to contingent liabilities are commitments. They include such 
things as agreements to purchase raw materials or to lease facilities at a certain price 
and to sell merchandise at a fixed price, as well as bonus plans, profit-sharing and 
pension plans, and royalty agreements. The most important characteristic of a com- 
mitment is the agreement to commit the firm to a set of fixed conditions in the future, regard- 
less of what happens to profits or the economy as a whole. Presumably the entity 
agrees to commitments to better its own interests, but they may turn out to be less 
or more advantageous than originally anticipated. Companies ordinarily describe all 
commitments either in a separate footnote or combine them with a footnote related 
to contingencies. 


FIGURE 24-| Contingent Liability Footnote 


There are various suits and claims pending against the company and its consolidated subsidiaries. It is the 
opinion of the company’s management, based on current available information, that the ultimate liability, if 
any, resulting from such suits and claims will not materially affect the consolidated financial position or 
results of operations of the company and its consolidated subsidiaries. 


The company has agreed to guarantee the repayment of approximately $14,000,000 loaned by a bank to 
several affiliated corporations in which the company owns a minority interest. 


Phase IV— 


Completing the Audit 


Perform additional 
tests for presenta- 
tion and disclosure 


Review for 
contingent liabilities 


Review for 
subsequent events 


Accumulate 
final evidence 


Evaluate results 


Issue audit report 


Communicate with 
audit committee 
and management 
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Audit Procedures for 
Finding Contingencies 


Evaluation of Known 
Contingent Liabilities 
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Many of these potential obligations are verified as an integral part of various segments 
of the audit rather than as a separate activity near the end of the audit. For example, 
auditors test for unused balances in outstanding letters of credit as a part of confirm- 
ing bank balances and loans from banks. Similarly, auditors consider the possibility of 
income tax disputes as a part of analyzing income tax expense, reviewing the general 
correspondence file, and examining revenue agent reports. Even if contingencies are 
verified separately, auditors commonly perform the tests well before the last few days 
of completing the audit to ensure their proper verification. Tests of contingent liabili- 
ties near the end of the audit are more of a review than an initial search. 

The first step in the audit of contingencies is to determine whether any contingencies 
exist (occurrence presentation and disclosure objective). As you know from studying 
other audit areas, it is more difficult to discover unrecorded transactions or events 
than to verify recorded information. Once the auditor knows that contingencies exist, 
evaluating their materiality and the footnote disclosures can ordinarily be satisfacto- 
rily resolved. 

The following are some audit procedures commonly used to search for contingent 
liabilities, but not all are applicable to every audit: 


* Inquire of management (orally and in writing) about the possibility of unre- 
corded contingencies. In these inquiries, the auditor must be specific in describ- 
ing the different kinds of contingencies that may require disclosure as reminders 
to management of contingencies they overlooked or do not fully understand. If 
management overlooked a contingency or does not fully comprehend account- 
ing disclosure requirements, the inquiry can be helpful to identify required dis- 
closures. At the completion of the audit, auditors typically ask management to 
make a written statement as a part of the letter of representation (discussed later 
in this chapter) that it is aware of no undisclosed contingent liabilities. Naturally, 
inquiries of management are not useful in uncovering the intentional failure to 
disclose contingencies. 

¢ Review current and previous years’ internal revenue agent reports for income 
tax settlements. The reports may indicate areas or years in which there are un- 
settled disagreements. If a review has been in progress for a long time, there is 
an increased likelihood of a tax dispute. 

¢ Review the minutes of directors’ and stockholders’ meetings for indications of 
lawsuits or other contingencies. 

¢ Analyze legal expense for the period under audit and review invoices and state- 
ments from legal counsel for indications of contingent liabilities, especially law- 
suits and pending tax assessments. 

¢ Obtain a letter from each major attorney performing legal services for the client 
as to the status of pending litigation or other contingent liabilities. This proce- 
dure is examined in more depth shortly. 

* Review audit documentation for any information that may indicate a potential 
contingency. For example, bank confirmations may indicate notes receivable 
discounted or guarantees of loans. 

¢ Examine letters of credit in force as of the balance sheet date and obtain a con- 
firmation of the used and unused balances. 


If auditors conclude that there are contingent liabilities, they must evaluate the sig- 
nificance of the potential liability and the nature of the disclosure needed in the 
financial statements to obtain evidence about the occurrence and rights and obliga- 
tions presentation and disclosure objective. In some instances, the potential liability 
is sufficiently well known to be included in the statements as an actual liability under 
the probability threshold approach. In other instances, disclosure may be unneces- 
sary if the contingency is highly remote or immaterial. CPA firms often obtain a 
separate evaluation of the potential liability from its own legal counsel, especially 
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highly material ones, rather than relying on management or management’s attorneys. 
Because they are advocates for the client, the client’s attorneys may lose perspective in 
evaluating the likelihood of losing the case and the amount of the potential judgment. 
For those contingencies that require disclosure, the auditor also reviews the draft foot- 
note to ensure that the disclosed information is understandable and fairly states the 
conditions of the contingency. 


The search for unknown commitments is usually performed as a part of the tests in 
each audit area. For example, in verifying sales transactions, the auditor should be alert 
for sales commitments. Similarly, commitments for the purchase of raw materials or 
equipment can be identified as a part of the audit of each of these accounts. The auditor 
should also be aware of the possibility of commitments when reading minutes, con- 
tracts, and correspondence files. 


Audit Procedures for 
Finding Commitments 


Inquiry of the client’s attorneys is a major procedure auditors rely on for evaluat- 
ing known litigation or other claims against the client and identifying additional ones. 
The auditor relies on the attorney’s expertise and knowledge of the client’s legal affairs 
to provide a professional opinion about the expected outcome of existing lawsuits and ‘OBJECTIVE 24-300 
the likely amount of the liability, including court costs. The attorney is also likely to 
know of pending litigation and claims that management may have overlooked. 

Many CPA firms analyze legal expense for the entire year and have the client send 
a standard inquiry letter to every attorney the client has been involved with in the cur- 
rent or preceding year, plus any attorney the firm occasionally engages. In some cases, 
this involves a large number of attorneys, including some who deal in aspects of law 
that are far removed from potential lawsuits. 

The standard inquiry to the client’s attorney, prepared on the client’s letterhead 
and signed by one of the company’s officials, should include the following: 


Inquiry of Client’s 
Attorneys 


Obtain and evaluate letters from 
the client’s attorneys. 


° A list including (1) pending threatened litigation and (2) asserted or unasserted claims or 
assessments with which the attorney has had significant involvement. This list is typically 
prepared by management, but management may request that the attorney pre- 
pare the list. 

° A request that the attorney furnish information or comment about the progress of each item 
listed. The desired information includes the legal action the client intends to 
take, the likelihood of an unfavorable outcome, and an estimate of the amount 
or range of the potential loss. 

° A request of the law firm to identify any unlisted pending or threatened legal actions or a 
statement that the client’s list is complete. 

* A statement informing the attorney of the attorney’s responsibility to inform management 
of legal matters requiring disclosure in the financial statements and to respond directly to the 
auditor. If the attorney chooses to limit a response, reasons for doing so are to be 
included in the letter. 


Figure 24-2 provides an example of a typical standard letter sent to the attorney for 
return directly to the CPA’s office. Notice the first paragraph requests that the attorney 
communicate about contingencies up to approximately the date of the auditor’s report. 

Attorneys in recent years have become reluctant to provide certain information 
to auditors because of their own exposure to legal liability for providing incorrect or 
confidential information. The nature of the refusals by attorneys to provide auditors 
with complete information about contingent liabilities falls into two categories: 


1. The attorneys refuse to respond due to a lack of knowledge about matters involv- 
ing contingent liabilities. 
2. The attorneys refuse to disclose information that they consider confidential. 
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For example, the attorney might be aware of a violation of a patent agreement that 
could result in a significant loss to the client if it were known (unasserted claim). 
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FIGURE 24-2 | Typical Inquiry of Attorney 


HILLSBURG HARDWARE CO. 
2146 Willow St. 
Gary, Indiana 46405 


March |, 2017 


Bailwick & Bettle, Attorneys 
11216 Michigan Avenue 
Chicago, IL 60606 


Our auditors, Berger and Anthony, CPAs (P.O. Box 8175, Gary, Indiana 46405), are conducting an audit 
of our financial statements for the fiscal year ended December 31, 2016. In connection with their audit, 
we have prepared and furnished to them a description and evaluation of certain contingencies, 
including those attached, involving matters with respect to which you have been engaged and to 
which you have devoted substantive attention on behalf of the company in the form of legal 
consultation or representation. For the purpose of your response to this letter, we believe that as to 
each contingency an amount in excess of $100,000 would be material, and in total, $700,000. 
However, determination of materiality with respect to the overall financial statements cannot be 
made until our auditors complete their audit. Your response should include matters that existed at 
December 31, 2016, and during the period from that date to the date of the completion of their audit, 
which is anticipated to be on or about March 15, 2017. 


Please provide to our auditors the following information: 


(1) Such explanation, if any, that you consider necessary to supplement the listed judgments 
rendered or settlements made involving the company from the beginning of this fiscal year 
through the date of your reply. 

Such explanation, if any, that you consider necessary to supplement the listing of pending or 
threatened litigation, including an explanation of those matters as to which your views may 
differ from those stated and an identification of the omission of any pending or threatened 
litigation, claim, and assessment or a statement that the list of such matters is complete. 

(3) Such explanation, if any, that you consider necessary to supplement the attached information 
concerning unasserted claims and assessments, including an explanation of those matters as 
to which your views may differ from those stated. 


We understand that whenever, in the course of performing legal services for us with respect to a matter 
recognized to involve an unasserted possible claim or assessment that may call for financial statement 
disclosure, you have formed a professional conclusion that we should disclose or consider disclosure 
concerning such possible claim or assessment, as a matter of professional responsibility to us, you will 
so advise us and will consult with us concerning the question of such disclosure and the applicable 
requirements of accounting standards. Please specifically confirm to our auditors that our 
understanding is correct. 


Please specifically identify the nature of and reasons for any limitations in your response. 


Yours very truly, 
Hillsburg Hardware Co. 


Rell L 


Rick Chulick, Pres. 


Such an instance falls under the second category. The inclusion of the information in 
a footnote could actually cause the lawsuit and therefore be damaging to the client. 

If an attorney refuses to provide the auditor with information about material 
existing lawsuits (asserted claims) or unasserted claims, auditors must modify their audit 
report to reflect the lack of available evidence (a scope limitation, which requires a qualified 
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SEC FOCUSES 
ON LOSS 
CONTINGENCIES 


Disclosure of loss contingencies is a natural source 
of tension between companies and their auditors. 
The underlying source of this tension is the culture of 
transparency in financial reporting, and the adversarial 
nature of the justice system. While auditors want to 
learn about pending litigation to meet auditing stan- 
dards requirements and assess the adequacy of disclo- 
sure, companies are concerned that disclosure to the 
auditor could compromise attorney-client privilege. 
A framework for communications between auditors 
and lawyers was developed in a 1975 agreement be- 
tween the AICPA and the American Bar Association 
(ABA), “Statement of Policy Regarding Lawyers’ 
Responses to Auditors’ Request for Information.” 
Under the FASB Accounting Standards Codification 
(ASC) Topic 450—Contingencies, a company needs 
to consider whether a loss from litigation is probable, 
whether the amount of loss can be reasonably esti- 
mated, and whether an estimate of the possible loss 
or range of loss can be made. The company is likely 
to discuss these matters with its auditor in making 


this discussion, which could impact the adequacy of 
the company’s disclosure. 

The FASB had initially proposed a new standard 
governing contingencies in 2007. The board received 
242 comment letters, and many were critical that 
the new disclosures would require companies to 
waive client—attorney privilege, and negatively affect 
a company’s ability to defend itself. A revised exposure 
draft was issued in 2010. Although this proposal 
limited the required disclosures, the board received 
339 comments, and many indicated the disclosures 
could have a prejudicial effect on pending litigation. 
Many comments indicated that the problem was a 
lack of compliance with the existing requirements, 
rather than a need for additional disclosure. The 
FASB removed the loss contingencies project from 
its technical agenda in 2012. 


Sources: |. Kim Nilsen, “Renewed Focus on Loss Contingency 
Disclosures,” Journal of Accountancy (April 2011), pp. 37-39; 
2. Michael Cohn, “FASB Cancels Loss Contingencies 


these determinations. The SEC is concerned that the 
agreement between the AICPA and ABA could limit 


or disclaimer of opinion). This requirement in the auditing standards has the effect of 
requiring management to give its attorneys permission to provide contingent liability 
information to auditors and to encourage attorneys to cooperate with auditors in 
obtaining information about contingencies. 

As directed by the Sarbanes-Oxley Act, rules require attorneys serving public 
companies to report material violations of federal securities laws committed by 
the company. An attorney must report violations to the public company’s chief 
legal counsel or chief executive officer. If the legal officer or CEO fails to appropri- 
ately respond, the attorney must report violations to the company’s audit commit- 
tee. Responding to these requirements, the American Bar Association subsequently 
amended its attorney-client confidentiality rules to permit attorneys to breach confi- 
dentiality if a client is committing a crime or fraud. 


Disclosure Project,’ Accounting Today (July 13, 2012) 
(www.accountingtoday.com). 


REVIEW FOR SUBSEQUENT EVENTS 


The third part of completing the audit is the review for subsequent events. The audi- 
tor must review transactions and events that occurred after the balance sheet date 
to determine whether any of these transactions or events affect the fair presentation 
or disclosure of the current period statements. The auditing procedures required by 
auditing standards to verify these transactions and events are commonly called the 
review for subsequent events or post-balance-sheet review. 

The auditor’s responsibility for reviewing subsequent events is normally limited 
to the period beginning with the balance sheet date and ending with the date of the 
auditor’s report. As a result, the subsequent events review should be completed near 
the end of the audit.! Figure 24-3 shows the period covered by a subsequent events 
review and the timing of that review. 


'When the auditor’s name is associated with a registration statement under the Securities Act of 1933, the auditor’s 
responsibility for reviewing subsequent events extends beyond the date of the auditor’s report to the date the registration 
becomes effective. 


Conduct a post-balance-sheet 
review for subsequent events. 
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Types of Subsequent 
Events 


Phase IV— 
Completing the Audit 
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tion and disclosure 
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FIGURE 24-3 Period Covered by Subsequent Events Review 


Client’s ending Audit Date client 
balance sheet report issues financial 


date date statements 


Ss 


3-11-17 3-26-17 


Period to which review 
for subsequent events applies 


Period for processing 
the financial statements 


The auditor is responsible for reviewing for subsequent events occurring between 12-31-16 and 
3-11-17, but not later than the audit report date. Most subsequent events audit procedures are 
performed near the audit report date. 


Two types of subsequent events require consideration by management and evalu- 
ation by the auditor: those that have a direct effect on the financial statements and 
require adjustment of the current year’s financial statement amounts and those that 
have no direct effect on the financial statement amounts but for which disclosure is 
required. 


Those That Have a Direct Effect on the Financial Statements and Require 
Adjustment Some events that occur after the balance sheet date provide additional 
information to management that helps them determine the fair presentation of 
account balances as of the balance sheet date. Information about those events helps 
auditors in verifying the balances. For example, if the auditor is having difficulty 
determining the correct valuation of inventory because of obsolescence, the sale of 
raw material inventory as scrap in the subsequent period will indicate the correct 
value of the inventory as of the balance sheet date. 

Subsequent period events, such as the following, require an adjustment of account 
balances in the current year’s financial statements if the amounts are material: 


¢ Declaration of bankruptcy by a customer with an outstanding accounts receiv- 
able balance because of the customer’s deteriorating financial condition 

¢ Settlement of litigation at an amount different from the amount recorded on the 
books 

¢ Disposal of equipment not being used in operations at a price below the current 
book value 


When subsequent events are used to evaluate the amounts included in the year- 
end financial statements, auditors must distinguish between conditions that existed 
at the balance sheet date and those that came into being after the end of the year. The 
subsequent information should not be incorporated directly into the statements if 
the conditions causing the change in valuation took place after year-end. For exam- 
ple, assume one type of a client’s inventory suddenly becomes obsolete because of a 
technology change after the balance sheet date. The sale of the inventory at a loss in 
the subsequent period is not relevant in the valuation of inventory for obsolescence 
in this case. 

Auditors of accelerated filer public companies must inquire about and consider 
any information about subsequent events that materially affects the effectiveness of 
internal control over financial reporting as of the end of the fiscal period. If auditors 
conclude that the events reflect a material weakness that existed at year-end, they 
must give an adverse opinion on internal control over financial reporting. If they are 
unable to determine the effect of the subsequent event on the effectiveness of internal 
control, they must disclaim their opinion on internal control. 
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Those That Do Not Have a Direct Effect on the Financial Statements but for Which 
Disclosure May Be Required Subsequent events of this type are events that provide ev- 
idence about conditions that did not exist at the date of the balance sheet being reported 
on but arose after the balance sheet date and may be significant enough to require dis- 
closure. Examples of these types of nonrecognized subsequent events include: 


¢ A decline in the market value of securities held for temporary investment or 
resale 

¢ The issuance of bonds or equity securities 

¢ A decline in the market value of inventory as a consequence of government 
action barring further sale of a product 

¢ The uninsured loss of inventories as a result of fire 

¢ A merger or an acquisition 


Nonrecognized subsequent events may require disclosure if they are significant 
and if the financial statements would be misleading without the disclosure. Ordinarily 
these events can be adequately disclosed by the use of footnotes. Occasionally, an 
event may be so significant as to require disclosure in supplemental financial statements, 
which include the effect of the event as if it had occurred on the balance sheet date. An 
example is an extremely material merger. 

Auditors of accelerated filer public companies may also identify events related 
to internal control over financial reporting that arose subsequent to year-end. If the 
auditor determines that these subsequent events have a material effect on the com- 
pany’s internal control over financial reporting, the auditor’s report must include an 
explanatory paragraph either describing the event and its effect or directing the reader 
to a disclosure in management's report on internal control of the event and its effect. 


There are two categories of audit procedures for the subsequent events review: 


1. Procedures normally integrated as a part of the verification of year-end account 
balances 

2. Procedures performed specifically for the purpose of discovering events or trans- 
actions that must be recognized as subsequent events. 


The first category includes cutoff and valuation tests done as a part of the tests 
of details of balances. For example, auditors examine subsequent period sales and 
acquisition transactions to determine whether the cutoff is accurate. Auditors also test 
the collectibility of accounts receivable by reviewing subsequent period cash receipts 
to evaluate the valuation of the allowance for uncollectible accounts. Procedures for 
cutoff and valuation have been discussed sufficiently in preceding chapters and are 
not repeated here. 

The second category of tests are performed specifically to obtain information to 
incorporate into the current year’s account balances or footnotes as tests of the com- 
pleteness presentation and disclosure objective. These tests include the following: 


Review Records Prepared Subsequent to the Balance Sheet Date Auditors should 
review journals and ledgers to determine the existence and nature of significant trans- 
actions related to the current year. If journals are not kept up-to-date, auditors should 
review documents that will be used to prepare the journals. 

Auditors of public companies that are accelerated filers must inquire about and 
examine statements issued during the subsequent events review period, such as rel- 
evant internal audit reports and regulatory agency reports on the company’s internal 
control over financial reporting. 


Review Internal Statements Prepared Subsequent to the Balance Sheet Date In 
the review, auditors should emphasize changes in the business compared to results 
for the same period in the year under audit and changes after year-end. They should 
pay careful attention to major changes in the business or environment in which the 
client is operating. Auditors should discuss the interim statements with management 
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Dual Dating 


to determine whether they are prepared on the same basis as the current period state- 
ments, and also inquire about significant changes in the operating results. 


Examine Minutes Issued Subsequent to the Balance Sheet Date Auditors must ex- 
amine the minutes of stockholders and directors meetings subsequent to the balance 
sheet date for subsequent events affecting the current period financial statements. 


Correspond with Attorneys As discussed earlier in the chapter, auditors correspond 
with attorneys as a part of the search for contingent liabilities. Auditors normally 
request the attorney to date and mail the letter as of the expected audit completion 
date to fulfill the auditors’ responsibility for subsequent events. 


Inquire of Management Inquiries vary from client to client, but normally include 
significant changes in the assets or capital structure of the company after the balance 
sheet date, the current status of items that were not completely resolved at the balance 
sheet date, and unusual adjustments made subsequent to the balance sheet date. Public 
company auditors must also include inquiries of management about any changes in in- 
ternal control over financial reporting made subsequent to the end of the fiscal period. 

Inquiries of management about subsequent events must be done with appropri- 
ate client personnel to obtain meaningful answers. For example, it is not useful for 
the auditor to discuss tax or union matters with an accounts receivable supervisor. 
Depending on the information desired, auditors usually make inquiries of the control- 
ler, vice presidents, and the president. 


Obtain a Letter of Representation The letter of representation written by the 
client’s management to the auditor formalizes statements made by management 
about different matters throughout the audit, including discussions about subsequent 
events. This letter is mandatory and includes other relevant matters. This letter is dis- 
cussed in the following section. 


Occasionally, the auditor determines that a subsequent event that affects the current 
period financial statements occurred after the date of the audit report but before the 
audit report was issued. The source of such information is typically management or the 
media. For example, what if an audit client acquired another company after the audi- 
tor had gathered sufficient appropriate evidence to support the audit opinion? Using 
the dates in Figure 24-3 on page 798, assume the acquisition occurred on March 23, 
when the last day of audit testing was March 11. In that situation, auditing standards 
require the auditor to extend audit tests for the newly discovered subsequent event to 
make sure that it is correctly disclosed. The auditor has two equally acceptable options 
for expanding subsequent events tests: 


1. Expand all subsequent events tests to the new date 
2. Restrict the subsequent events review to matters related to the new subsequent event 


For the first option, auditors simply change the audit report date to the new date. 
For the second option, the auditor issues a dual-dated audit report, meaning that the 
audit report includes two dates: the first date for the completion of audit testing, except 
for the specific exception, and the second date, which is always later, for the exception. 
In the example, assume the auditor performs audit tests pertaining only to the acqui- 
sition and completes those tests on March 31. The audit report will be dual-dated as 
follows: March 11, 2017, except for note 17, as to which the date is March 31, 2017. 


CONCEPT CHECK 

I. Explain the importance of the completeness presentation and disclosure audit objective. 
What procedures do auditors typically follow to address the completeness of disclosures? 

2. Describe a contingency. What conditions are required for a contingent liability to exist? 


3. Distinguish between the two general types of subsequent events and explain how they 
differ. Give two examples of each. 
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FINAL EVIDENCE ACCUMULATION 


In addition to the review for subsequent events, the auditor has several final evidence- 
accumulation responsibilities that apply to all cycles. Five types of final evidence 
accumulation are discussed in this section: perform final analytical procedures, 
evaluate the going-concern assumption, obtain a management representation letter, 
consider information accompanying the basic financial statements, and read other 
information in the annual report. Each of these is done late in the audit. 


Auditing standards require auditors to perform analytical procedures during the 
completion of the audit. These procedures are useful as a final review for material 
misstatements or financial problems not noted during other testing and to help the 
auditor take a final objective look at the financial statements. It is common for a 
partner to do the analytical procedures during the final review of audit documenta- 
tion and financial statements. Typically, a partner has a good understanding of the 
client and its business because of ongoing relationships. This knowledge combined 
with effective analytical procedures help the partner identify possible oversights in an 
audit. The opening story on the audit of Westside Industries illustrates this point. 

When performing analytical procedures during the final review stage, the part- 
ner generally reads the financial statements, including footnotes, and considers the 
adequacy of evidence gathered about unusual or unexpected account balances or 
relationships identified during planning or while conducting the audit. The partner 
also considers unusual or unexpected account balances or relationships that were not 
previously identified. 

Results from final analytical procedures may indicate that additional audit evi- 
dence is necessary. If this is the case, the auditor should perform additional testing 
to obtain sufficient appropriate evidence that the affected accounts are fairly stated. 
If the unexpected relationship is due to a client misstatement that is identified in the 
additional testing, the auditor should propose an adjustment to correct the misstate- 
ment if it is material. 


Auditing standards require the auditor to evaluate whether there is a substantial doubt 
about a client’s ability to continue as a going concern for at least one year beyond the 
balance sheet date. Auditors make that assessment initially as a part of planning but 
may revise it after obtaining new information. For example, an initial assessment of 
going concern may need revision if the auditor discovers during the audit that the 
company has defaulted on a loan, lost its primary customer, or decided to dispose of 
substantial assets to pay off loans. Auditors use analytical procedures, discussions 
with management about potential financial difficulties, and their knowledge of the 
client’s business gained throughout the audit to assess the likelihood of financial 
failure within the next year. 

A final assessment of the entity’s going-concern status is desirable after all evi- 
dence has been accumulated and proposed audit adjustments have been incorporated 
into the financial statements. When auditors have reservations about the going- 
concern assumption, they must evaluate management’s plans to avoid bankruptcy 
and the feasibility of achieving these plans. Making the final decision whether to issue 
a report with a going-concern explanatory paragraph can be time-consuming and 
difficult, especially during an economic downturn. (For more discussion of going- 
concern explanatory paragraphs, see page 80 in Chapter 3.) 


Auditing standards require the auditor to obtain written representations from man- 
agement, usually in a letter of representation documenting management’s most 
important oral representations made during the audit. The letter is prepared on the 
client’s letterhead, addressed to the CPA firm, and signed by high-level corporate 


Design and perform the final 
steps in the evidence- 
accumulation segment 

of the audit. 


Perform Final 
Analytical Procedures 


Evaluate Going- 
Concern Assumption 


Obtain Management 
Representation Letter 
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FASB ISSUES 
GUIDANCE ON 
MANAGEMENT?’S 
RESPONSIBILTY TO 
EVALUATE GOING 
CONCERN 


Under generally accepted accounting principles 
(GAAP), financial statements are prepared on the 
assumption that the entity is a going concern unless 
liquidation is imminent. If liquidation is imminent, the 
financial statements should be prepared on the liqui- 
dation basis of accounting following the guidance in 
the FASB Accounting Standards Codification (ASC) 
under Subtopic 205-30, Presentation of Financial 
Statements—Liquidation Basis of Accounting. 

Auditors have long had responsibility to evaluate 
whether the entity is a going concern, and include 
information in the auditor's report if there is substantial 
doubt about the entity’s ability to continue as a going 
concern. However, GAAP did not provide guidance 
about management's responsibility to evaluate whether 
there is doubt about the entity's ability to continue 
as a going concern, and related footnote disclosures. 
This changed in August 2014 with the FASB's issuance 
of Accounting Standards Update 2014-15, Disclosure 
of Uncertainties about an Entity’s Ability to Continue as a 
Going Concern, which is effective for annual reporting 
periods ending after December 15, 2016. The 
standards update creates a new Subtopic 205-40, 
Presentation of Financial Statements—Going Concern, 
in the Accounting Standards Codification. If man- 
agement identifies conditions that raise substantial 
doubt about the entity’s ability to continue as a go- 
ing concern, they should disclose in the footnotes: 


. The principal conditions or events that raise 
substantial doubt about the entity’s ability 
to continue as a going concern 

. Management's evaluation of the significance of those 
conditions or events in relation to the entity’s ability 
to meet its obligations 


If management has a plan that alleviates the 
substantial doubt, then management should 
also disclose this information. However, if the 
substantial doubt is not alleviated after consider- 
ing management’s plans, the footnotes should 
include a statement that there is substantial doubt 
about the entity’s ability to continue as a going 
concern within one year after the financial state- 
ments are issued, and should include a discus- 
sion of management's plans that are intended 
to mitigate the conditions or events that raise 
substantial doubt about the entity’s ability to 
continue as a going concern. The PCAOB is 
evaluating revisions to the existing PCAOB audit- 
ing standard on evaluating going concern in light 
of the changes to the accounting requirements. 


Sources: |. FASB Accounting Standards Update No. 2014-15, 
Disclosure of Uncertainties about an Entity’s Ability to Continue 
as a Going Concern (August 2014); 2. PCAOB, “Standard 
Setting Agenda—Office of the Chief Auditor,” June 30, 2015 
(pcaobus.org). 


officials, usually the president and chief financial officer. While the letter implies that 

it has originated with the client, it is common practice for the auditor to prepare the 

letter and request the client to reproduce it on the company’s letterhead and sign it. 

Refusal by a client to prepare and sign the letter requires a qualified opinion or dis- 

claimer of opinion. The letter should be dated no earlier than the date of the auditor’s 

report to make sure that there are adequate representations about subsequent events. 
The three purposes of the client letter of representation are: 


Phase I1V— 
Completing the Audit 


Perform additional 
tests for presenta- 


Gisaanal dieclesies 1. To impress upon management its responsibility for the assertions in the financial statements. 


It is easy for management to forget that they are responsible, not the auditor, for 

Review for the fair presentation of financial statements, especially in smaller companies that 
contingent liabilities lack personnel with expertise in accounting. 

2. To remind management of potential misstatements or omissions in the financial statements. 

Renleee son For example, if the letter of representation includes a reference to pledged assets 


subsequent events 


es ee 


Accumulate 
final evidence 


and contingent liabilities, honest management may be reminded of its unin- 
tentional failure to disclose the information adequately, which helps satisfy the 
completeness presentation and disclosure objective. To fulfill this objective, the 
a al letter of representation should be sufficiently detailed to act as a reminder to 
Evaluate results management. 

= a 3. To document the responses from management to inquiries about various aspects of the audit. 
This provides written documentation of client representations in the event of dis- 
agreement or a lawsuit between the auditor and client. A letter of representation 
also helps reduce misunderstandings between management and the auditor. 


Issue audit report 


—_—— 


Communicate with 
audit committee 
and management 


Auditing standards suggest four categories of specific matters that should be 
included. The four categories, with examples of each, are: 
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1. Financial statements 
« Management’s acknowledgment of its responsibility for the fair presenta- 
tion of the financial statements 
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* Management’s belief that the financial statements are fairly presented in 
conformity with applicable accounting standards 


2. Completeness of information 
¢ Availability of all financial records and related data 
¢ Completeness and availability of all minutes of meetings of stockholders, 
directors, and committees of directors 
« Absence of unrecorded transactions 


3. Recognition, measurement, and disclosure 

* Management’s belief that the effects of any uncorrected financial statement 
misstatements are immaterial to the financial statements (a summary of 
these items should be included in or attached to the letter) 

¢ Information concerning fraud involving (a) management, (b) employees 
who have significant roles in internal control, or (c) others where the fraud 
could have a material effect on the financial statements 

* Information concerning related party transactions and amounts receivable 
from or payable to related parties 

* Unasserted claims or assessments that the entity’s lawyer has advised are proba- 
ble of assertion and must be disclosed in accordance with accounting standards 


4. Subsequent events 
¢ Bankruptcy of a major customer with an outstanding account receivable at 
the balance sheet date 
¢ A merger or acquisition after the balance sheet date 


PCAOB auditing standards require the auditor to obtain written representations 
from management about its responsibility for internal control over financial report- 
ing and management’s conclusion about the effectiveness of internal control over 
financial reporting as of the end of the fiscal period. Auditors of public companies 
may obtain a combined representation letter for both the audit of the financial state- 
ments and the audit of internal control. 

A client representation letter is a written statement from a nonindependent 
source and therefore cannot be regarded as reliable evidence. However, the letter does pro- 
vide documentation that management has been asked certain questions to make sure 
that management understands its responsibilities and to protect the auditor if man- 
agement files claims against the auditor. 

In some audits, the auditor may find other evidence that contradicts statements in 
the letter of representation. In such cases, the auditor should investigate the circum- 
stances and consider whether representations in the letter are reliable. 


Clients often include additional information beyond the basic financial statements in 
materials prepared for management or outside users. Auditing standards refer to this 
additional information as supplementary information in relation to the financial statements 
as a whole. Figure 24-4 (p. 780) illustrates the basic financial statements and additional 
supplementary information. 

Auditing standards intentionally refrain from defining or restricting supple- 
mentary information to enable companies to individualize the information to meet 
the needs of statement users. However, several types of information are commonly 
included in the additional information section, such as detailed comparative state- 
ments supporting the totals on the primary financial statements for accounts such as 
cost of goods sold and operating expenses. 

Auditors must clearly distinguish their audit and reporting responsibility for the 
primary financial statements and for supplementary information. Usually, the audi- 
tor has not performed a sufficiently detailed audit to justify an opinion on the addi- 
tional information. In some instances, however, the auditor may be engaged by the 
client to report on the supplementary information accompanying the basic financial 


Consider Supplementary 


Information in Relation 
to Financial Statements 
as a Whole 
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Supplementary Information Accompanying Basic 


FIGURE 24-4 ne eeeenenee 


Balance sheet 


Standard 
auditor’s 
report 


Income statement Basic financial 


statements 
Statement of 


cash flows 


Footnotes 


Detailed comparative 
statements Supplementary 
information 


Explanatory paragraph 

or separate report— 

unmodified, qualified, 
or disclaimer 


Statistical data accompanying 
basic financial 
statements 


Schedule of 
insurance coverage 


statements. To complete that engagement, the supplementary information must be 
derived from the accounting records used to generate the basic financial statements 
and involve the same time period as the basic financial statements. Additionally, the 
auditor cannot have issued an adverse opinion or disclaimer of opinion on the basic 
financial statements. 

When reporting on supplementary information, the auditor uses the same 
materiality as that used in forming an opinion on the basic financial statements. As 
a result, the additional procedures required are less extensive than if the auditor were 
issuing an opinion on the information taken by itself. 

Auditor reporting on supplementary information can be either in an other matter 
explanatory paragraph following the opinion paragraph in the auditor's report on the 
financial statements or in a separate report on the supplementary information. The 
following is an example of an explanatory paragraph reporting on supplementary 
information in relation to the financial statements as a whole: 


Our audit was conducted for the purpose of forming an opinion on the financial 
statements as a whole. The accompanying information on pages x through y is pre- 
sented for purposes of additional analysis and is not a required part of the financial 
statements. Such information is the responsibility of management and was derived 
from and relates directly to the underlying accounting and other records used to pre- 
pare the financial statements. The information has been subjected to the auditing 
procedures applied in the audit of the financial statements and certain additional 
procedures, including comparing and reconciling such information directly to the 
underlying accounting and other records used to prepare the financial statements or 
to the financial statements themselves, and other additional procedures in accordance 
with auditing standards generally accepted in the United States of America. In our 
opinion, the information is fairly stated in all material respects in relation to the 
financial statements as a whole. 


If the auditor concludes that the supplementary information is materially mis- 
stated in relation to the financial statements as a whole, the auditor should request 
management to revise the supplementary information. If management does not make 
the necessary modifications, the auditor should modify the auditor’s opinion on the 
supplementary information and describe the misstatement in the auditor’s report. Ifa 
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separate report is being issued on the supplementary information, the auditor should 
withhold the auditor’s report on the supplementary information. 

Sometimes additional information is required by accounting standards, which 
auditing standards refer to as required supplementary information. Required supplemen- 
tary information is not part of the basic financial statements; however, a designated 
accounting standards setter considers the information to be an essential part of 
financial reporting. When required supplementary information accompanies the 
basic financial statements, auditing standards require the auditor to perform certain 
additional procedures that are limited to inquiry of management about the methods 
of preparing the information and comparison of the information for consistency with 
management’s responses to the auditor’s inquiries, the basic financial statements, and 
to information the auditor obtains during the audit of the basic financial statements. 
Because these limited procedures do not provide sufficient evidence to provide any 
assurance about the required supplementary information, the auditor’s report on 
the basic financial statements includes an explanatory paragraph that contains a dis- 
claimer of opinion about the required supplementary information. 


Auditing standards require the auditor to read other information included in 
annual reports pertaining directly to the financial statements. For example, assume 
that the president’s letter in the annual report refers to an increase in earnings per 
share from $2.60 to $2.93. The auditor is required to compare that information with 
the financial statements to make sure it corresponds. 

Auditor responsibility to read other information included in annual reports per- 
tains only to information that is not a part of the financial statements but is published 
with them. Examples are the president's letter and explanations of company activities 
included in annual reports of nearly all publicly held companies. It usually takes audi- 
tors only a few minutes to make sure that the nonfinancial statement information 
is consistent with the statements. If auditors conclude that a material inconsistency 
exists, they should request the client to change the information. If the client refuses, 
which would be unusual, the auditor should include an explanatory paragraph in the 
audit report or withdraw from the engagement. 


Read Other Information 
in the Annual Report 


EVALUATE RESULTS 


After performing all audit procedures in each audit area, including the review for 
contingencies and subsequent events and accumulating final evidence, the auditor 
must integrate the results into one overall conclusion about the financial statements. 
Ultimately, the auditor must decide whether sufficient appropriate audit evidence has 
been accumulated to warrant the conclusion that the financial statements are stated 
in accordance with the applicable accounting framework. Similarly, when issuing a 
report on internal control, auditors must also arrive at an overall conclusion about 
the effectiveness of internal control over financial reporting. The five main aspects of 
evaluating the results are discussed next. 


To make a final evaluation as to whether sufficient appropriate evidence has been 
accumulated, the auditor reviews the audit documentation for the entire audit to deter- 
mine whether all material classes of transactions, accounts, and disclosures have been 
adequately tested, considering all circumstances of the audit. An important part of the 
review is to make sure that all parts of the audit program have been accurately com- 
pleted and documented and that all audit objectives have been met. The auditor must 
decide whether the audit program is adequate, considering problem areas identified as 
the audit progressed. For example, if misstatements were discovered during tests of sales, 
the initial plans for tests of details of accounts receivable may have been insufficient. 


Integrate the audit evidence 
gathered and evaluate the overall 
audit results. 


Sufficient Appropriate 
Evidence 
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FIGURE 24-5 Completing the Audit Checklist 


1. Examination of prior year’s audit documentation 
a. Were last year’s audit files examined for areas of emphasis in the current year audit? 
b. Was the permanent file reviewed for items that affect the current year? 


2. Internal control 


a. Has internal control been adequately understood? 
b. Is the scope of the audit adequate in light of the assessed control risk? 
c. Have all significant deficiencies and material weaknesses been reported in writing to those charged 


with governance? 


3. General documents 


a. Were all current year minutes and resolutions reviewed, abstracted, and followed up? 

b. Has the permanent file been updated? 

c. Have all major contracts and agreements been reviewed and abstracted, copied, or downloaded to 
ascertain that the client complies with all existing legal requirements? 


Evidence Supports 
Auditor’s Opinion 


Phase IV— 
Completing the Audit 


Perform additional 
tests for presenta- 
tion and disclosure 


Review for 
contingent liabilities 


Review for 
subsequent events 


Accumulate 
final evidence 


Evaluate results 


Issue audit report 


Communicate with 
audit committee 
and management 


Financial Statement 
Disclosures 


As an aid in deciding whether the audit evidence is adequate, auditors often use 
a completing the audit checklist, which is a reminder of items that may have been 
overlooked. Figure 24-5 illustrates part of a completing the audit checklist. 

If auditors conclude that sufficient evidence has not been obtained to decide 
whether the financial statements are fairly presented, they have two choices: accumu- 
late additional evidence or issue either a qualified opinion or a disclaimer of opinion. 


An essential part of evaluating whether the financial statements are fairly stated 
involves the auditor’s review of the summary of misstatements found in the audit. 
When any one misstatement is material, auditors should propose that the client correct 
the financial statements. It may be difficult to determine the appropriate amount 
of adjustment because the exact amount of the misstatement may be unknown if it 
involves an estimate or includes an estimate for sampling risk. Nevertheless, the audi- 
tor must decide on the required adjustment. (In some audits there may be more than 
one material misstatement.) 

In addition to individually material misstatements, there are often several immate- 
rial misstatements that the client did not adjust. Auditors must combine individually 
immaterial misstatements to evaluate whether the combined amount is material. They 
can keep a record of these misstatements and combine them in different ways, but many 
auditors use an unadjusted misstatement audit schedule or summary of possible mis- 
statements. An example of an unadjusted misstatement worksheet is given in Figure 24-6. 
Auditors are also required to consider the impact on the current year financial state- 
ments of misstatements identified in a prior year that were not corrected. 

The schedule in Figure 24-6 includes both known misstatements that the client has 
decided not to adjust and projected misstatements, including an allowance for sampling 
risk, and total possible misstatements for several financial statement categories. The 
bottom left portion of the audit schedule, under the heading “Conclusions,” includes a 
comparison of possible overstatements and understatements to materiality. A summary 
of this audit schedule should be included with management’s representation that the 
uncorrected misstatements are immaterial. 

If auditors believe that there is sufficient evidence but they conclude that the 
financial statements are not fairly presented, they again have two choices: The state- 
ments must be revised to the auditor’s satisfaction or either a qualified or an adverse 
opinion must be issued. 


Before completing the audit, auditors must make a final evaluation of whether the dis- 
closures in the financial statements satisfy all presentation and disclosure objectives. 


Arens, Alvin, etQ/2AQiting and AssuRaré SeviG@ McK TONGA! Edition BBFon Education, Limited, 2016. ProQuest Ebook Central, 


Created from undip-ebooks on 2021-08-06 07:03:04. 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


FIGURE 24-6 Unadjusted Misstatement Audit Schedule 
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Hillsburg Hardware Co. Schedule A-3 Date 


Summary of Possible Misstatements Prepared by LF 3/I5/I7 


12/31/16 Approved by JA 3/I5/I7 


POSSIBLE MISSTATEMENT—OVERSTATEMENT 
(UNDERSTATEMENT) 


Audit File Type of Total Current Noncurrent Current Income 
Source Misstatement Amount Assets Assets Liabilities Before Tax 


B-4 Understated allowance for [EA] 95,000 95,000 95,000 
uncollectible accounts 


Accounts receivable/Sales cutoff [P] 60,000 (60,000) (60,000) 
misstatements 


Difference between physical [A] 120,000 (120,000) (120,000) 
inventory and book figures 


Unrecorded liabilities [P] 285,000 (100,000) (85,000) (285,000) 100,000 
Repairs expense items that [A] 90,000 (90,000) (90,000) 


should have been capitalized 
Totals (185,000) (175,000) (285,000) (75,000) 


[EA] Estimated based on substantive analytical procedures. 
[A] Actual population misstatements. 
[P] Estimated population misstatements based on the sample, including allowance for sampling risk. 


Conclusions 


The net effects of the above items are as follows: None of these aggregate effects or the individual items has 
a material effect on the financial statements in total or with 
Net Effects Materiality respect to the components they pertain to. On this basis, 
Current assets (185,000) 1,531,000 adjustment of any or all of the items is passed. 
Total assets (360,000) 1,841,000 


Income before taxes (75,000) 442,000 Leslie Franklin 
3/15/17 


As part of the final review for financial statement disclosures, many CPA firms require 
the completion of a financial statement disclosure checklist for every audit. These 
questionnaires are designed to remind the auditor of common disclosure problems 
in financial statements and to facilitate the final review of the entire audit by an inde- 
pendent partner. Figure 24-7 (p. 808) illustrates a partial financial statement disclosure 
checklist. Naturally, a checklist is not sufficient to replace the auditor’s knowledge of 
the proper application of accounting standards for the circumstances of the audit. 


There are three reasons why an experienced member of the audit firm must thor- 


; : é ‘ : Audit D i 
oughly review audit documentation at the completion of the audit: wen eee eee 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Review 
1. To evaluate the performance of inexperienced personnel. A considerable portion of most 
audits is performed by audit personnel with fewer than four or five years of 
experience. These people may have sufficient technical training to conduct an 
Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, Limited, 2016. ProQuest Ebook Cen@@hapter 24 / COMPLETING THE AUDIT 823 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?doclD=5 185606. 
Created from undip-ebooks on 2021-08-06 07:03:04. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Phase I1V— 


Completing the Audit 
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tests for presenta- 
tion and disclosure 


Review for 
contingent liabilities 


Review for 
subsequent events 


Accumulate 
final evidence 


Evaluate results 


Issue audit report 


Communicate with 
audit committee 
and management 


Engagement Quality 
Review 


Summary of Evidence 
Evaluation 


Financial Statement Disclosure Checklist: 
Property, Plant, and Equipment 


FIGURE 24-7 


. Are the following disclosures included in the financial statements or notes: 
a. Balances of major classes of depreciable assets (land, building, equipment, and so forth) at the 
balance sheet date? 
b. Allowances for depreciation, by class or in total, at the balance sheet date? 
c. General description of depreciation methods for major classes of PP&E? 
d. Total amount of depreciation charged to expense for each income statement presented? 
e. Basis of evaluation? 
. Are carrying amounts of property mortgaged and encumbered by indebtedness disclosed? 
. Are details of sale and leaseback transactions during the period disclosed? 
. ls the carrying amount of property not a part of operating plant—for example, idle or held for 
investment or sale—segregated? 
. Has consideration been given to disclosure of fully depreciated capital assets still in use and capital 
assets not presently in use? 


adequate audit, but their lack of experience affects their ability to make sound 
professional judgments in complex situations. 


2. To make sure that the audit meets the CPA firm’s standard of performance. Within any CPA 
firm, the quality of staff performance varies considerably, but careful review by 
top-level personnel in the firm helps to maintain a uniform quality of auditing. 


3. To counteract the bias that often enters into the auditor’s judgment. Auditors must attempt 
to remain objective throughout the audit, but they may lose proper perspective 
on a long audit when complex problems need to be solved. 


Except for a final independent review, which is discussed shortly, the review 
of audit documentation should be conducted by someone who is knowledgeable 
about the client and the circumstances in the audit. Therefore, the auditor’s immedi- 
ate supervisor normally conducts the initial review of audit files prepared by another 
auditor. For example, the least experienced auditor’s work is ordinarily reviewed by 
the audit senior. The senior’s immediate superior, who is normally a supervisor or 
manager, reviews the senior’s work and also reviews, less thoroughly, the schedules 
of the inexperienced auditor. Finally, the partner assigned to the audit must ultimately 
review all audit documentation, but the partner reviews those prepared by the super- 
visor or manager more thoroughly than the others. While performing the review, 
each reviewer has discussions with the auditor responsible for preparing the audit 
documentation to learn how significant audit issues were resolved. Except for the 
final independent review, most audit documentation review is done as each segment 
of the audit is completed. 


At the completion of larger audits, it is common to have the financial statements and 
the entire set of audit files reviewed by a completely independent reviewer who has 
not participated in the audit, but is a member of the audit firm doing the audit. An 
engagement quality review, sometimes referred to as an independent review, is 
required for SEC engagements, including the review of interim financial information 
and the audit of internal controls. This reviewer often takes an adversarial position to 
make sure the conduct of the audit was adequate. The audit team must be able to jus- 
tify the evidence it has accumulated and the conclusions it reached on the basis of the 
circumstances of the audit. 


Figure 24-8 summarizes evaluating whether there is sufficient appropriate evidence 
and whether the evidence supports the opinion on the financial statements. It shows 
that the auditor evaluates the sufficiency and appropriateness of the evidence by first 
evaluating achieved audit risk, by account and by cycle, and then making the same 
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FIGURE 24-8 


Actual audit evidence 
(by cycle, account, 
and objective) 


Audit procedures 
Sample size 
Items to select 
Timing 


Evaluate results 
(by account and cycle) 


Evaluating Results and Reaching Conclusions on the Basis of Evidence 


Evaluate overall 
financial statements 


Estimated misstatement 
(by account) 
Achieved audit risk 
(by account and cycle) 


Estimated misstatement 
(overall statements) 
Achieved audit risk 
(overall statements) 


Issue 
-—> audit 
report 


evaluation for the overall financial statements. The auditor also evaluates whether the 
evidence supports the audit opinion by first estimating misstatements in each account 
and then for the overall financial statements. In practice, the evaluation of achieved 
audit risk and estimated misstatement are made at the same time. On the basis of 
these evaluations, the audit report is issued for the financial statements. 


ISSUE THE AUDIT REPORT 


The auditor should wait to decide the appropriate audit report to issue until all evi- 
dence has been accumulated and evaluated, including all steps of completing the audit 
discussed so far. Because the audit report is the only thing that most users see in the 
audit process, and the consequences of issuing an inappropriate report can be severe, 
it is critical that the report be correct. 

When a CPA firm decides that a standard unmodified report is inappropriate, 
there will almost certainly be extensive discussions among technical partners in the 
CPA firm and often with client personnel. Most CPA firms have comprehensive audit 
reporting manuals to assist them in selecting the appropriate wording of the report 
they decide to issue. 


COMMUNICATE WITH THE 
AUDIT COMMITTEE AND MANAGEMENT 


After the audit is completed, several potential communications from the auditor may 
be sent to the audit committee or others charged with governance, including com- 
munication of detected fraud and illegal acts, internal control deficiencies, other com- 
munications with the audit committee, and a management letter. The first three of 
these communications are required by auditing standards to make certain that those 
charged with governance, which is often the audit committee and senior manage- 
ment, are informed of audit findings and auditor recommendations. The fourth item, 
a management letter, is often communicated to operating management. 


Auditing standards require the auditor to communicate all fraud and illegal acts to the 
audit committee or similarly designated group, regardless of materiality. The purpose 
is to assist the audit committee in performing its supervisory role for reliable financial 
statements. 


As discussed in Chapter 12, the auditor must also communicate in writing significant 
internal control deficiencies and material weaknesses in the design or operation 
of internal control to those charged with governance. In larger companies, this 


Communicate effectively 
with the audit committee and 
management. 


Communicate Fraud 
and Illegal Acts 


Communicate Internal 
Control Deficiencies 
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Other Communications 
with Audit Committee 


Phase IV— 


Completing the Audit 


Perform additional 
tests for presenta- 
tion and disclosure 


Review for 
contingent liabilities 


Review for 
subsequent events 


Accumulate 
final evidence 


Evaluate results 


Issue audit report 


Communicate with 
audit committee 
and management 


communication is made to the audit committee and in smaller companies, it may be 
made to the owners or senior management. 


Auditing standards require the auditor to communicate certain additional informa- 
tion obtained during the audit to those charged with governance, which is generally 
the audit committee. The purpose of this required communication is to keep the audit 
committee, or others charged with governance, informed about significant and rel- 
evant information for the oversight of the financial reporting process and to provide 
an opportunity for the audit committee to communicate important matters to the 
auditor. Thus, the auditing standard requirements are designed to encourage two-way 
communications between the auditor and those charged with governance. There are 
four principal purposes of this required communication: 


1. To communicate auditor responsibilities in the audit of financial statements. This 
communication includes discussion by the auditor that the audit of financial 
statements is designed to obtain reasonable, rather than absolute, assurance 
about material misstatements in the financial statements. For audits of financial 
statements that do not include an audit of internal control over financial report- 
ing, the communication also indicates that the auditor is not providing an opin- 
ion on the effectiveness of internal control, in addition to other limitations of an 
audit of financial statements. 

2. To provide an overview of the scope and timing of the audit. The purpose of this required 
communication is to provide a high-level overview, such as the auditor’s approach 
to addressing significant risks and consideration of internal control, and timing of 
the audit. Details of the nature and timing of audit procedures is not appropriate to 
avoid compromising the effectiveness and predictability of the audit. 

3. To provide those charged with governance with significant findings arising during the audit. 
These communications include discussion of material misstatements detected 
during the audit that were corrected by the client and uncorrected misstatements 
that were accumulated by the auditor. The auditor’s view of qualitative aspects of 
significant accounting practices and estimates should also be presented, as well 
as significant difficulties encountered during the audit, including disagreements 
with management, among other matters. 

4. To obtain from those charged with governance information relevant to the audit. The audit 
committee or others charged with governance, such as the full board of direc- 
tors, may share strategic decisions that may affect the nature and timing of the 
auditor’s procedures. 


Communications about significant findings arising during the audit are normally 
made in writing. Communications about other matters may be made orally or in writ- 
ing, with all oral communications documented in the audit files. Communications 
should be made timely to allow those charged with governance to take appropriate 
actions. Generally, communications about the auditor’s responsibilities and the audit 
scope and timing occur early in an audit, while communications about significant 
findings usually occur throughout the entire engagement period. 

The Sarbanes—Oxley Act of 2002 includes additional communication require- 
ments for auditors of public companies. For example, auditors must communicate 
all alternative treatments of financial information within requirements of accounting 
standards that have been discussed with management, ramifications of the alternative 
disclosures and treatments, and the treatment preferred by the auditor. As the audit is 
completed, the auditor should determine that the audit committee is informed about 
the initial selection of and changes in significant accounting policies or their applica- 
tion during the current audit period, as well as the reasons for any changes. The audi- 
tor should also communicate information about methods used to account for any 
significant unusual transactions and the effect of significant accounting policies in 
controversial or emerging areas. 
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A management letter is intended to inform client personnel of the CPA’s recom- 
mendations for improving any part of the client’s business. Most recommenda- 
tions focus on suggestions for more efficient operations. The combination of the 
auditor’s experience in various businesses and a thorough understanding gained in 
conducting the audit places the auditor in a unique position to provide assistance 
to management. 

Many CPA firms write a management letter for every audit to demonstrate 
to management that the firm adds value to the business beyond the audit service 
provided. Their intent is to encourage a better relationship with management and 
to suggest additional tax and permitted advisory services that the CPA firm can 
provide. 

A management letter differs from a letter reporting significant deficiencies in 
internal control, which was discussed in Chapter 12. The latter is required when 
there are significant deficiencies or material weaknesses in internal control, and 
must follow a prescribed format and be sent in accordance with the requirements of 
auditing standards. A management letter is optional and is intended to help the client 
operate its business more effectively. 

Each management letter should be developed to meet the style and preferences 
of the CPA firm and the needs of the client. Some auditors combine the manage- 
ment letter with the letter about significant deficiencies and material weaknesses. On 
smaller audits, it is common for the auditor to communicate operational suggestions 
orally rather than by a management letter. 


Management Letters 


SUBSEQUENT DISCOVERY OF FACTS 
After the auditor issues the audit report and completes all communications with ‘OBJECTIVE 24-8 


management and the audit committee, the audit is finished. Usually, the next major aaa a 
‘ ; f entify the auditor’s responsi- 
contact between the auditor and client occurs when the planning process of the next —jitiieg when facts Sain: 
year’s audit begins. the audit report are discovered 
Although it rarely happens, auditors sometimes learn after the audited financial state- _after its issuance. 
ments have been issued that the financial statements are materially misstated. Examples 
are the inclusion of material nonexistent sales, the failure to write off obsolete inven- 
tory, or the omission of an essential footnote. Similarly, following the issuance of a 
report on internal control over financial reporting as part of an integrated audit, audi- 
tors may become aware of conditions that existed at the date of the report that would 
have changed their opinion had they been aware of those conditions. 
When this subsequent discovery of facts occurs, the auditor has an obliga- 
tion to make certain that users who are relying on the financial statements are 
informed about the misstatements or change in the conclusion on the effectiveness 
of internal controls. (If the auditor had known about the misstatements before the 
audit report was issued, the auditor would have insisted that management cor- 
rect the misstatements or, alternatively, a different audit report would have been 
issued.) It does not matter whether the failure to discover the misstatement or 
material weakness was the fault of the auditor or the client. In either case, the audi- 
tor’s responsibility remains the same. Although subsequent discovery of facts is 
not part of completing the audit, it is included in this chapter because it is easier to 
understand in this context. 
If the auditor discovers that the statements are misleading after they have been 
issued, the most desirable action is to request that the client issue an immediate 
revision of the financial statements that includes an explanation of the reasons for 
the revision. If a subsequent period’s financial statements are completed before the 
revised statements would be issued, it is acceptable to disclose the misstatements in 
the subsequent period’s statements. When pertinent, the client should inform the 
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Review for Subsequent Events and Subsequent 


eRe Discovery of Facts 


Client’s ending Audit Date client 
balance sheet report _ issues financial 
date date statements 


<< = =—Se 


12-31-16 3-11-17 3-26-17 


JX ) 


Period to which Period for Period in which 
review for subsequent processing subsequent discovery 
events applies the financial of facts is made 

statements 


SEC and other regulatory agencies of the misstated financial statements. The audi- 
tor is responsible to make certain that the client has taken the appropriate steps to 
inform users of the misstated statements. 

If the client refuses to disclose the misstated statements, the auditor must 
inform the board of directors. The auditor must also notify regulatory agencies 
having jurisdiction over the client that the statements are no longer fairly stated 
and also, when practical, each person who relies on the financial statements. If the 
stock is publicly held, it is acceptable to request the SEC and the stock exchange to 
notify stockholders. 

The subsequent discovery of facts requiring the recall or reissuance of financial 
statements arises only from business events that existed before the date of the auditor’s report. 
For example, a revision of the financial statements is not required if an account receiv- 
able is believed to be collectible after an adequate review of the facts at the date of 
the audit report, but the customer subsequently files bankruptcy. If the customer 
had filed for bankruptcy before the audit report date, however, there is a subsequent 
discovery of facts. 

The auditor’s responsibility for subsequent events review ends on the date of the 
audit report, when the auditor has gathered sufficient appropriate evidence to form 
an opinion. Auditors have no responsibility to search for subsequent facts, but if they 
discover that issued financial statements are incorrectly stated, they must take action 
to correct them. In most cases, subsequent discovery of facts occurs when auditors 
discover a material misstatement in issued financial statements during the subsequent 
year’s audit, or when the client reports a misstatement to the auditor. 

Figure 24-9 illustrates the periods covered by the review for subsequent events, 
processing the financial statements, and subsequent discovery of facts after the audit 
report date. As you review the figure, note that auditors have no responsibility to 
review subsequent events after the audit report date. If auditors discover subsequent 
facts after the audit report date (3-11-17), but before the financial statements are 
issued (3-26-17), they will require that the financial statements be revised before they 
are issued. Auditors will also follow one of the two options discussed in this chapter’s 
“Dual Dating” section, page 800. 


CONCEPT CHECK 


1. Explain the purpose of a client letter of representation. What types of information are 
normally included in the letter? 


2. How does an auditor evaluate the unadjusted misstatement schedule (also called sum- 
mary of possible misstatements) at the end of the audit engagement to assess whether 
the financial statements are fairly presented? 


Arens, Alvin, et@(2@diting and AssuRare SediG@ McK TONGA! Edifior\ BB Fon Education, Limited, 2016. ProQuest Ebook Central, 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


Created from undip-ebooks on 2021-08-06 07:03:04. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance Services, EBook, Global Edition, Pearson Education, Limited, 2016. ProQuest Ebook Cen@@hapter 24 / COMPLETING THE AUDIT 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 


SUMMARY 


The completion phase of the audit is critical to ensuring a quality audit. In this phase, 
auditors perform additional tests for presentation and disclosure, including reviewing for 
contingencies and subsequent events. Auditors also review the sufficiency of the audit 
evidence and the decisions reached to determine whether they support the audit opinion. 
Auditors then communicate with the audit committee and management about important 


audit findings and other matters. 


Commitments—agreements that the en- 
tity will hold to a fixed set of conditions, 
such as the purchase or sale of merchan- 
dise at a stated price, at a future date, re- 
gardless of what happens to profits or to 
the economy as a whole 

Completing the audit checklist—a re- 
minder to the auditor of aspects of the au- 
dit that may have been overlooked 
Contingent liability—a potential future 
obligation to an outside party for an un- 
known amount resulting from activities 
that have already taken place 

Dual-dated audit report—the use of one 
audit report date for normal subsequent 
events and a later date for one or more sub- 
sequent events that come to the auditor's 
attention after the date of the audit report 
Engagement quality review—a review 
of the financial statements and the entire 
set of audit files by a completely indepen- 
dent reviewer to whom the audit team 
must justify the evidence accumulated and 
the conclusions reached; also referred to as 
“independent review” 

Financial statement disclosure check- 
list—a questionnaire that reminds the 
auditor of disclosure problems commonly 
encountered in audits and that facilitates 
final review of the entire audit by an inde- 
pendent partner 

Independent review—see “engagement 
quality review” 

Inquiry ofthe client’sattorneys—a letter 
from the client requesting that legal coun- 
sel inform the auditor of pending litigation 
or any other information involving legal 
counsel that is relevant to financial state- 
ment disclosure 

Letter of representation—a written 
communication from the client to the 
auditor formalizing statements that the 
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ESSENTIAL TERMS 


client has made about matters pertinent to 
the audit 

Management letter—an optional letter 
written by the auditor to a client’s manage- 
ment containing the auditor’s recommenda- 
tions for improving any aspect of the client’s 
business 

Other information included in annual 
reports— information that is not a part of 
the financial statements but is published 
with them; auditors must read this infor- 
mation for inconsistencies with the finan- 
cial statements 

Review for subsequent events—the au- 
diting procedures performed by auditors 
to identify and evaluate subsequent events; 
also known as a post-balance-sheet review 
Review of audit documentation— 
a review of the completed audit files by 
another member of the audit firm to en- 
sure quality and counteract bias 
Subsequent discovery of facts—auditor 
discovery that the financial statements are 
materially misstated, or that the opinion 
on internal controls over financial report- 
ing may not have been appropriate, after 
they have been issued 

Subsequent events—transactions and 
other pertinent events that occurred after 
the balance sheet date that affect the fair 
presentation or disclosure of the state- 
ments being audited 

Unadjusted misstatement audit 
schedule—a summary of immaterial mis- 
statements not adjusted at the time they were 
found, used to help the auditor assess wheth- 
er the combined amount is material; also 
known as a summary of possible misstatements 
Unasserted claim—a potential legal 
claim against a client where the condition 
for a claim exists but no claim has been 


filed 


REVIEW QUESTIONS 


24-1 (OBJECTIVE 24-1) Identify and describe the four presentation and disclosure audit 
objectives. Explain how many of the procedures to test presentation and disclosure 
audit objectives are integrated with tests performed in earlier stages of the audit. 


24-2 (OBJECTIVE 24-2) Explain why an auditor is interested in a client’s future commitments 
to purchase raw materials at a fixed price. 


24-3 (OBJECTIVE 24-2) Distinguish between a contingent liability and an actual liability and 
give three examples of each. 


24-4 (OBJECTIVE 24-2) In the audit of the James Mobley Company, you are concerned about 
the possibility of contingent liabilities resulting from a patent dispute. Discuss the proce- 
dures you could use for an extensive investigation in this area. 


24-5 (OBJECTIVE 24-3) Explain why the analysis of legal expense is an essential part of every 
audit. 


24-6 (OBJECTIVES 24-2, 24-3) During the audit of the Merrill Manufacturing Company, Ralph 
Pyson, CPA, has become aware of four lawsuits against the client through discussions with 
the client, reading corporate minutes, and reviewing correspondence files. How should 
Pyson determine the materiality of the lawsuits and the proper disclosure in the financial 
statements? 


24-7 (OBJECTIVE 24-3) Distinguish between an asserted and an unasserted claim. Explain 
why a client’s attorney may not reveal an unasserted claim. 


24-8 (OBJECTIVE 24-3) Describe the action that an auditor should take if an attorney refuses 
to provide information that is within the attorney’s jurisdiction and may directly affect the 
fair presentation of the financial statements. 


24-9 (OBJECTIVE 24-4) What major considerations should the auditor take into account in 
determining how extensive the review of subsequent events should be? 


24-10 (OBJECTIVE 24-4) Identify five audit procedures normally done as a part of the review 
for subsequent events. 


24-11 (OBJECTIVES 24-4, 24-8) Five months after issuing an unqualified audit opinion and an 
unqualified opinion on internal controls for the audit of the year ended December 31, 2016, 
for a large publicly traded client, the client and the auditor become aware of a material mis- 
statement in sales revenue for the year in question, which was the result of a material weak- 
ness in internal controls. Is this a subsequent event or a subsequent discovery of facts? What 
are the auditor’s responsibilities related to the audit opinion and the opinion on internal 
controls? 


24-12 (OBJECTIVE 24-5) Miles Lawson, CPA, believes that the final summarization is the 
easiest part of the audit if careful planning is followed throughout the audit. He makes 
sure that each segment of the audit is completed before he goes on to the next. When the 
last segment of the audit is completed, he is finished with the audit. He believes this may 
cause each part of the audit to take a little longer, but he makes up for it by not having to 
do the final summarization. Evaluate Lawson's approach. 


24-13 (OBJECTIVES 24-1, 24-5, 24-6) Compare and contrast the accumulation of audit evidence 
and the evaluation of the adequacy of the disclosures in the financial statements. Give two 
examples in which adequate disclosure could depend heavily on the accumulation of evi- 
dence and two others in which audit evidence does not normally significantly affect the 
adequacy of the disclosure. 


24-14 (OBJECTIVES 24-5, 24-7) Distinguish between a management letter and a letter about 
significant deficiencies in internal control. Give examples of items that might be included 
in a management letter. 

24-15 (OBJECTIVE 24-5) Explain what is meant by information accompanying basic finan- 
cial statements. Provide two examples of such information. What levels of assurance may 
the CPA offer for this information? 


suRare SeviG® MRNGKTON Kal Eeifio“s 8 BaFon Education, Limited, 2016. ProQuest Ebook Central, 


1-08-06 07:03:04. 


om/lib/undip-ebooks/detail.action?doclID=5185606. 


24-16 (OBJECTIVE 24-6) Distinguish between regular audit documentation review and inde- 
pendent review and state the purpose of each. Give two examples of potential findings in 
each of these two types of review. 


24-17 (OBJECTIVE 24-7) Describe matters that the auditor must communicate to audit com- 
mittees of public companies. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


24-18 (OBJECTIVES 24-2, 24-4) The following questions deal with contingent liabilities and 
the review for subsequent events. Choose the best response. 


a. When a contingency is resolved subsequent to the issuance of audited financial state- 
ments, which correctly contained disclosure of the contingency in the footnotes 
based on information available at the date of issuance, the auditor should 
(1) take no action regarding the event. 

(2) insist that the client issue revised financial statements. 
(3) inform the audit committee that the report cannot be relied on. 
(4) inform the appropriate authorities that the report cannot be relied on. 


b. Which of the following would be least likely to be included in a standard inquiry to 

the client’s attorney? 

(1) A list provided by the client of pending litigation or asserted or unasserted claims 
with which the attorney has had some involvement 

(2) A request for the attorney to opine on the correct accounting treatment associ- 
ated with an outstanding claim or pending lawsuit outcome 

(3) A request that the attorney provide information about the status of pending 
litigation 

(4) A request for the attorney to identify any pending litigation or threatened legal 
action not identified on a list provided by the client 


c. An audit report was dual-dated for a subsequent event disclosed in the financial 
statements, which occurred after the completion of the evidence collection pro- 
cess but before the issuance of the financial statements. The auditor’s responsibil- 
ity for events occurring subsequent to the completion of the evidence collection 
process was 
(1) limited to include only events occurring before the date of the last subsequent 

event referred to. 
(2) extended to subsequent events occurring through the date of issuance of the 
financial statements. 

) limited to the specific events referred to. 

(4) extended to include all events occurring since the completion of the evidence 

collection process. 


d. An example of an event occurring in the period between the end of the year being 
audited and the date of the auditor’s report that normally will not require disclosure 
in the financial statements or auditor’s report is 
(1) serious damage to the company’s plant from a widespread flood. 

(2) issuance of a widely advertised capital stock issue with restrictive covenants. 

(3) settlement of a large liability for considerably less than the amount recorded. 

(4) decreased sales volume resulting from a general business recession. 


24-19 (OBJECTIVES 24-5, 24-7) The following questions concern communications between 
management, those charged with governance, and the auditor. Choose the best response. 


a. Which of the following is not a required item to be communicated by the auditor to 
the audit committee or others charged with governance? 
(1) Information about the auditor’s responsibility in an audit of financial statements 
(2) Information about the overall scope and timing of the audit 
( 
( 
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b. Written management representations obtained by the auditor in connection with a 

financial statement audit should include a 

(1) summary ofall corrected misstatements. 

(2) statement of management's belief that any uncorrected misstatements are in fact 
not misstatements. 

(3) statement of management's belief that the effects of uncorrected misstatements 
are not material. 

(4) summary ofall uncorrected misstatements. 


c. Amanagement letter 

(1) is the auditor’s report on significant deficiencies and material weaknesses in 
internal control. 

(2) contains recommendations from the auditor designed to help the client improve 
the efficiency and effectiveness of its business. 

(3) is mandatory in all audits and must be dated the same date as the audit report. 

(4) contains management's representations to the auditor documenting statements 
made by management to the auditor during the audit about matters affecting the 
financial statements. 


24-20 (OBJECTIVE 24-5) The following questions concern information accompanying basic 
financial statements. Choose the best response. 


a. The Form 10-K filed by management of a public company includes a section on 
management’s discussion and analysis (MD&A) in addition to the annual financial 
statements. Which of the following best describes the auditor’s responsibility for the 
MD&A information? 

(1) The auditor must perform sufficient appropriate audit procedures to opine on 
the MD&A information. 

(2) The auditor has no responsibilities related to the MD&A disclosures. 

(3) The auditor must read the MD&A information to determine if there is any mate- 
rial inconsistency with the audited financial statements. 

(4) The auditor must provide a disclaimer of opinion related to the MD&A 
information. 


b. Management of Thurman Corporation included additional supplementary informa- 
tion in documents that include the audited financial statements for the year ended 
December 31, 2016. Management has asked its audit firm, Wally, CPAs, whether they 
can report on the supplementary information. Which of the following conditions 
would preclude Wally, CPAs, from conducting this engagement? 

(1) The supplementary information is derived from the accounting records used to 
generate the basic financial statements. 

(2) The supplementary information covers the period January 1, 2016, through 
February 15, 2017. 

(3) Wally’s opinion on the basic financial statements was unqualified. 

(4) When evaluating supplementary information, Wally plans to use the same mate- 
riality threshold as that used in the audit of the basic financial statements. 


c. Investment and property schedules are presented for purposes of additional analysis 
in a document outside the basic financial statements. The schedules are not required 
supplementary information. When the auditor is engaged to report on whether the 
supplementary information is fairly stated in relation to the audited financial state- 
ments as a whole, the measurement of materiality is the 
(1) greater of the individual schedule of investments or schedule of property by 
itself. 

(2) lesser of the individual schedule of investments or schedule of property by 
itself. 

(3) same as that used in forming an opinion on the basic financial statements as a 
whole. 

(4) combined total of both the individual schedules of investments and property as 
a whole. 
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DISCUSSION QUESTIONS AND PROBLEMS 


24-21 (OBJECTIVES 24-1, 24-2) Elizabeth Johnson, CPA, has completed the audit of notes pay- 
able and other liabilities for Valley River Electrical Services and now plans to audit contingent 
liabilities and commitments. 


a. Distinguish between contingent liabilities and commitments and explain why both Required 
are important in an audit. 

b. Identify three useful audit procedures for uncovering contingent liabilities that 
Johnson will likely perform in the normal conduct of the audit, even if she had no 
responsibility for uncovering contingencies. 

c. Identify three other procedures Johnson is likely to perform specifically for the pur- 
pose of identifying undisclosed contingencies to help her obtain evidence about the 
completeness presentation and disclosure objective. 

d. Identify three useful audit procedures for uncovering commitments that Johnson 
will likely perform as part of the audit in other accounts. 


24-22 (OBJECTIVE 24-2) In an audit of the Marco Corporation as of December 31, 2016, the 
following situations exist. No entries have been made in the accounting records in relation 
to these items. 
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Required 


Required 
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. During the year 2016, the Marco Corporation was named as a defendant in a suit for 
damages by the Dalton Company for breach of contract. An adverse decision to the 
Marco Corporation was rendered and the Dalton Company was awarded $4,000,000 
damages. At the time of the audit, the case was under appeal to a higher court. 

2. On December 23, 2016, the Marco Corporation declared a common stock dividend 
of 1,000 shares with a par value of $1,000,000 of its common stock, payable February 
2, 2017, to the common stockholders of record December 30, 2016. 

. The Marco Corporation has guaranteed the payment of interest on the 10-year, first 
mortgage bonds of the Newart Company, an affiliate. Outstanding bonds of the 
Newart Company amount to $5,500,000 with interest payable at 5% per annum, due 
June 1 and December 1 of each year. The bonds were issued by the Newart Company 
on December 1, 2014, and all interest payments have been met by that company with 
the exception of the payment due December 1, 2016. The Marco Corporation states 
that it will pay the defaulted interest to the bondholders on January 15, 2017. 


a. Define contingent liability. 

b. Describe the audit procedures you would use to learn about each of the situations 
listed. 

. Describe the nature of the adjusting entries or disclosure, if any, you would make for 
each of these situations.” 


24-23 (OBJECTIVE 24-3) Miss Yu is performing the audit on leases of TipuPte Ltd for the year 
ended 31 December 2016. From the ledger, Miss Yu noticed that there are three items, 
which are on lease, i.e. a van, a lathe machine and the oven. As part of the audit, Miss Yu 
would send standard confirmation letters to the lessors. 

Two days before the end of the fieldwork, Miss Yu received confirmation from the 
van’s lessor. Miss Yu’s client has short taken the van lease by $10,000. Miss Yu sent the 
second reminder confirmation and managed to receive the confirmation from the lathe 
machine’s lessor. The lease would only start from 1 January 2017. Miss Yu has to yet to 
receive any confirmation pertaining to the leasing of the oven. 


Ww 


a 


a. What should Miss Yu do in the future to make sure that the confirmation letter are 
received and answered promptly? 
b. There are discrepancies to two of the items. What further action should Miss Yu take? 


24-24 (OBJECTIVES 24-4, 24-8) The field work for the June 30, 2016, audit of Tracy Brewing 
Company was finished August 19, 2016, and the completed financial statements, accom- 
panied by the signed audit reports, were mailed September 6, 2016. In each of the highly 
material independent events (a. through h.), state the appropriate action (1 through 4) for 
the situation and justify your response. The alternative actions are as follows: 

1. Adjust the June 30, 2016, financial statements. 

2. Disclose the information in a footnote in the June 30, 2016, financial statements. 

3. Request the client to recall the June 30, 2016, statements for revision. 

4. No action is required. 


The events are as follows: 
a. On August 6, 2016, the auditor discovered that a debtor of Tracy Brewing went bankrupt 


on July 30, 2016. The cause of the bankruptcy was an unexpected loss of a major lawsuit 
on July 15, 2016, resulting from a product deficiency suit by a different customer. 


b. On December 14, 2016, the auditor discovered that a debtor of Tracy Brewing went 
bankrupt on July 15, 2016, due to declining financial health. The sale generating the 
receivable had taken place January 15, 2016. 

c. On December 14, 2016, the auditor discovered that a debtor of Tracy Brewing went 
bankrupt on October 2, 2016. The sale had taken place April 15, 2016, but the 
amount appeared collectible at June 30, 2016, and August 19, 2016. 


“Based on AICPA question paper, American Institute of Certified Public Accountants. 
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d. On August 15, 2016, the auditor discovered that a debtor of Tracy Brewing went 
bankrupt on August 1, 2016. The most recent sale had taken place April 2, 2015, and 
no cash receipts had been received since that date. 


e. On July 20, 2016, Tracy Brewing settled a lawsuit out of court that had originated in 
2013 and is currently listed as a contingent liability. 


f. On September 14, 2016, Tracy Brewing lost a court case that had originated in 2015 
for an amount equal to the lawsuit. The June 30, 2016, footnotes state that in the 
opinion of legal counsel, there will be a favorable settlement. 


g. On July 20, 2016, a lawsuit was filed against Tracy Brewing for a patent infringement 
action that allegedly took place in early 2016. In the opinion of legal counsel, there is 
a danger of a significant loss to the client. 


h. On May 31, 2016, the auditor discovered an uninsured lawsuit against Tracy Brewing 
that had originated on February 28, 2016. 


24-25 (OBJECTIVE 24-5) Callie Peters is completing the audit of MakingNewFriends.com for the 
year ended December 31, 2016. Callie has been the audit manager on this engagement for the 
past three years. MakingNewFriends.com issued stock two years ago, but has had difficulty 
establishing a loyal client base and generating advertising revenues. In reviewing results for 
the current year, Callie noted the client has had operating losses for the past three years, and 
its working capital ratio has declined from 1.2 in 2015 to 0.9 in 2016. Callie discussed plans 
for the future with the management of MakingNewFriends.com, and they indicated they are 
planning on obtaining debt financing in fiscal 2017; however, they have not yet secured the 
financing with a bank. Management also indicated they are aggressively pursuing new adver- 
tising contracts and plan to increase advertising revenues by 20% in 2017. 


a. According to auditing standards, what is the auditor’s obligation to consider whether 
the client can continue as a going concern? 

b. Over what time period is the auditor required to consider the client’s ability to con- 
tinue as a going concern? 

c. What factors discussed above are relevant for a going-concern assessment for 
MakingNewFriends.com? What additional information might the auditor consider in 
the going-concern assessment? 

d. What responsibility does the auditor have to evaluate whether management’s plans 
will be effective? 


24-26 (OBJECTIVE 24-5) A public listed company must not only fulfill the disclosure require- 
ments that have been stipulated in the accounting standards but also the local corporation 
act and the requirements of the bourse of which the company is listed. 

In Malaysia, public listed companies must not only fulfill the requirements of the 
Companies Act 1965-2015 but also the Malaysian Financial Reporting Standards and the 
Listing Requirements of Bursa Malaysia. To research further on the Listing Requirements, 
visit http://www.bursamalaysia.com/misc/system/assets/5949/MAIN_Chap%209_LRPh1% 
20%2827Jan2015%29.pdf 

The following are the additional disclosures that are required by Bursa Malaysia. Your 
client, KalotRenBerhad is listed there. 

* Loss of franchise or distributorship rights; 

* the commencement of or the involvement in litigation and any material develop- 

ment arising from such litigation; 

* the commencement of arbitration proceedings or proceedings involving alterna- 
tive dispute resolution methods and any material development arising from such 
proceedings; 

a. What is the difference between disclosure required by the accounting standards and 
additional disclosures as required by a bourse? 

b. From your perusal of the Listing Requirements, you may need to investigate the fol- 
lowing incidents for the purpose of additional disclosure. How would you go about 
verifyingthe following information? 
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¢ There were rumours that KalotRen will lose the franchise of Oklahoma Fried Chick- 
en (OKC) as the principal in the United States is not very happy with how KalotRen 
deals with their casual workers. 

* You have discovered a class action suit by the Penang OKC workers and the labor 
authorities in Penang state. KalotRen has been late paying Employer Provident Fund 
social security payments. 


c. Assuming that the incidents in b. can be classified as contingent liabilities. Suggest 
how the incidents would be disclosed. 


24-27 (OBJECTIVE 24-5) Access AICPA Auditing Standard AU-C 450, Evaluation of Misstatements 
Identified During the Audit (www.aicpa.org), to answer the following questions: 


a. Describe the three types of misstatements that can be identified by the auditor. What 
factors may suggest that the misstatement is not an isolated occurrence? 

b. What factors should the auditor consider in determining whether uncorrected 
misstatements are material, either individually or in the aggregate? 

c. What documentation is required by AU-C 450? 


24-28 (OBJECTIVE 24-6) The following items were discovered during the December 31, 2016, 

audit of the financial statements of Westmoreland Corporation: 

1. The company’s financial statements did not include an accrual for bonuses earned by 
senior management in 2016 but payable in March 2017. The aggregate bonus amount 
was $125,000. 

2. Equipment originally costing $725,000 that was fully depreciated with a remaining 
residual value of $60,000 was sold for $85,000 on December 29, 2016. The purchaser 
agreed to pay for the equipment by January 15, 2017. 

3. Based on close examination of the client’s aged accounts receivable trial balance and 
correspondence files with customers, the auditor determined that management's 
allowance for bad debts is overstated by $44,000. 

4. Expenses totaling $52,000 associated with the maintenance of equipment were 

inappropriately debited to the equipment account. 

. Marketing expenses of $43,000 were incorrectly classified as cost of goods sold. 

6. The company received new computer equipment on January 3, 2017, that had been 
ordered and shipped F.O.B. shipping point to Westmoreland on December 27, 2016. 
No entry has been recorded for this purchase, which was financed by a long-term 
note payable due in full June 30, 2018. 


Ww 


a. Prepare an Unadjusted Misstatement Audit Schedule using the following format (see 
Figure 24-6 on page 807 as an example): 


Possible Misstatement — Overstatement (Understatement) 


Total Current Noncurrent Current Noncurrent Income 
Amount Assets Assets Liabilities Liabilities Before Tax 


b. Balance sheet and income statement materiality for the audit of Westmoreland finan- 
cial statements is $75,000. What is your conclusion about the financial statements if 
the audit findings are not corrected by Westmoreland management before you issue 
the audit report? 


24-29 (OBJECTIVE 24-7) You are the audit senior in charge of the audit of Caraig Petrol 
Stations Corporation. In a letter to the audit committee of the company you informed 
the company of the weaknesses in the controls pertaining to goods in transit. Your team 
noticed that the reconciliation between the goods sent from the petrol warehouse and the 
petrol stations in Cebu is not timely. Reconciliation is only performed at financial year- 
end. You suggested that reconciliations should be done before the books are closed every 
month. 
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Last year, your colleague suggested that they purchase Jolygood, an Enterprise 
Resources Planning (ERP) system for the purpose of inventory tracking. From his expe- 
rience with other similar clients, he is of the opinion that the system that is suitable for 
managing petrol stations. The management purchased the system and used the system 
in the stations on Cebu Island. Unfortunately the system required a lot of Internet wave- 
length to do real time updating. The unstable Internet has resulted in the data becoming 
incongruent between the various warehouses and stations. The management alleged that 
the problems with the ERP had made inventory reconciliations (like what you suggested) 
extremely difficult. They want you to rescind the management letter or else the firm will 
face the risk of litigation due to inadequate professional judgment in making last year’s 
recommendation. 


a. Describe the your firm’s legal and professional responsibility in the issuance of | Required 
management letters. 

b. Discuss the major considerations that will determine whether your firm is liable for 
the wrong advice given by the previous senior. 


CASE 


24-30 (OBJECTIVE 24-6) In your 2010 audit of Baecker Industries, you found several issues 
that you think may indicate possible adjustments to the company’s books. These issues 
are listed below. Management does not want to make any adjustments to the books, as 
they prefer not to revisit old records once a fiscal year has ended. Planning materiality 
for the company’s audit was $100,000, determined by computing 5% of expected income 
before taxes. Prior to any adjustments, actual income before taxes on Baecker’s financial 
statements is $1,652,867. 


Possible adjustments: 

1. Several credit memos that were processed and recorded after year-end relate to sales 
and accounts receivable for 2010. These total $23,529. 

2. Inventory cutoff tests indicate that $22,357 of inventory received on December 
30, 2010, was recorded as purchases and accounts payable 2011. These items were 
included in the inventory count at year-end and were therefore included in ending 
inventory. 

3. Inventory cutoff tests also indicate that several sales invoices were recorded in 2010 
for goods that were shipped in early 2011. The goods were not included in inventory, 
but were set aside in a separate shipping area. The total amount of these shipments 
was $36,022. (Ignore cost of sales for this item.) 

4. The company wrote several checks at the end of 2010 for accounts payable that were 
held and not mailed until January 15, 2011. These totaled $48,336. Recorded cash and 
accounts payable at December 31, 2010, are $2,356,553 and $2,666,290, respectively. 

5. The company has not established an allowance for obsolescence of inventories. Your 
tests indicate that such an allowance is appropriate in an amount somewhere be- 
tween $20,000 and $40,000. 


a. Determine the adjustments that you believe must be made for Baecker’s financial 
statements to be fairly presented. Include the amounts and accounts affected by each 
adjustment. 

b. Why may Baecker’s Industries ‘management resist making these adjustments? 

c. Explain what you consider the most positive way of approaching management per- 
sonnel to convince them to make your proposed changes. 

d. Describe your responsibilities related to unadjusted misstatements that management 
has determined are immaterial individually and in the aggregate. 

e. Assuming Baecker Industries is a publicly listed company, describe how the noted 
adjustments night impact your audit report on internal control over financial 
reporting. 
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OTHER ASSURANCE 
AND NONASSURANCE 
SERVICES 


CHAPTERS 25-26 


hapter 1 introduced assurance and nonassurance 
services offered by CPA firms and other types of audi- 
tors. Assurance services other than audits have become 
increasingly important to both CPA firms and other 
auditors. The two chapters in PART 6 expand on that 
discussion. 


Chapter 25 deals with assurance and nonassurance 
services, both traditional and emerging, that CPA firms 
offer. 


Chapter 26 covers services performed most often by 
governmental and internal auditors, including internal 
financial auditing, governmental financial auditing, and 
operational auditing. 
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OTHER ASSURANCE 
SERVICES 


Skepticism Applies to All Types of Engagements 


Barnhart Construction Company was a contractor specializing in apartment complexes in the 
Southwest. The owner of the construction company, David Barnhart, reached an agreement 
with a promoter named Alton Leonard to serve as a contractor on three construction projects 
Leonard was currently marketing. One problem with the agreement was that Barnhart would 
not receive final payment for the construction work until all the partnership units were sold. 


The first partnership offer- 
ing was completely sold and 
Barnhart was paid. Unfor- 
tunately, the next two part- 
nerships were not completely 
sold. To solve this problem, 
Barnhart loaned money to rel- 
atives and key employees, who 
bought the necessary interests 
for the partnerships to close 
so that Barnhart would receive 
the final payment. 


Renee Lathrup, CPA, a sole 

practitioner, was engaged to conduct a review of Barnhart Construction’s financial statements. 
She noticed that the accounting records showed loans receivable from a number of employees 
and individuals named Barnhart. She also observed that the loans were made just before the 
second and third partnerships closed and that they were in multiples of $15,000, the cost of a 
partnership unit. Lathrup asked Barnhart to explain what had happened. Barnhart told Lathrup, 
“When | received the money from the first partnership escrow, | wanted to do something nice 
for relatives and employees who had been loyal to me over the years.” He told Lathrup, “This 
is just my way of sharing my good fortune with the ones | love. The equality of the amounts is 
just a coincidence.” 


When Lathrup considered the reasonableness of this scenario, she found it hard to believe. 
First, the timing was odd. Second, the amounts seemed to be an unusual coincidence. Third, if 
he really had wanted to do something special for these folks, why hadn’t he given them some- 
thing, rather than loaned them money? Lathrup asked that the promoter, Leonard, send her 
detailed information on the subscriptions for each partnership. Leonard refused, stating that he 
was under legal obligation to keep all information confidential. When Lathrup pressed Barnhart, 
he also refused further cooperation, although he did say he would “represent” to Lathrup that 
the loans had nothing to do with closing the partnerships so that he could get his money. At 
this point, Lathrup withdrew from the engagement. 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


25-1 


25-2 


25-3 


25-4 


25-5 


25-6 


25-7 


Understand the level of as- 
surance and evidence require- 
ments for review, compilation, 
and preparation services. 
Describe special engagements 
to review interim financial 
information for public 
companies. 

Distinguish AICPA attestation 
standards from auditing 
standards and know the 
types of engagements 

to which they apply. 

Describe engagements to 
report on internal con- 

trols at service organiza- 
tions (SOC reports). 
Understand special 
engagements to attest 

to prospective financial 
statements. 

Define agreed-upon pro- 
cedures engagements. 
Describe other audit and 
limited assurance engagements 
related to historical financial 
statements. 
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Up to this chapter, the book has primarily focused on audits of historical financial statements prepared in accor- 
dance with applicable accounting standards. Now, other types of assurance services offered by CPAs involving his- 
torical financial statements are discussed, such as reviews of historical financial statements and limited assurance 
engagements involving historical financial statements to meet specific needs of financial statement users. The 
chapter also examines assurance services for several types of attestation engagements that do not involve histori- 
cal financial statements, such as reports on service organizations and reports on forecasted financial statements. 


REVIEW, COMPILATION, AND PREPARATION SERVICES 


Understand the level of assur- 
ance and evidence requirements 
for review, compilation, and 
preparation services. 


Many nonpublic companies have their financial statements reviewed, compiled, or 
prepared by a CPA, instead of having them audited. The opening story about Barnhart 
Construction Company is an example of a review service. A company’s manage- 
ment may believe that an audit is unnecessary because no bank or regulatory agency 
requires one and management sees no need for audited statements for internal use. 
Instead, the company may engage the CPA to assist in the preparation of financial 
statements, either for internal use or to provide to creditors or lenders under loan 
agreements. Depending on the size of the loan, a lender may require a nonpublic 
entity to engage a CPA to compile or review financial statements and issue a related 
report, rather than conduct an audit. A review provides limited assurance on the 
financial statements, whereas a compilation report provides no expressed assurance. 
Other nonpublic entities may engage a CPA to prepare the financial statements with- 
out having the CPA issue a report. 

The standards for preparation, compilation, and review engagements of finan- 
cial statements, called Statements on Standards for Accounting and Review 
Services (SSARS), are issued by the Accounting and Review Services Committee 
of the AICPA. This committee has authority equivalent to the Auditing Standards 
Board for services involving unaudited financial statements of nonpublic companies. 
Because they are not doing audits, SSARS refer to CPAs performing review, compila- 
tion, and preparation services as accountants, not auditors. 

Because the assurance provided in a preparation, compilation, or review engage- 
ment is considerably below that of audits, less evidence is required for these services 
and they can be provided at a lower fee than an audit. Figure 25-1 illustrates the differ- 
ences in evidence accumulation and level of assurance for audit, review, compilation, 
and preparation engagements. The amount of evidence and assurance needed for each 
engagement is not defined by the profession and therefore depends on the accoun- 
tant’s judgment. 


Relationship Between Evidence Accumulation and 


FIGURE 25" Assurance Attained 


High 
(Audit) 


Level of Limited 
Assurance (Review) 
Attained 


None 
(Compilation or 
Preparation) 


Minimal Significant Extensive 
(Compilation or (Review) (Audit) 
Preparation) 


Amount of Evidence Accumulated 
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Because review, compilation, and preparation services provide less assurance than 
audits, the accountant should establish an understanding with the client about the ser- 
vices to be provided through a written engagement letter. The understanding should 
include a description of the objectives of the engagement, management's responsi- 
bilities, the accountant’s responsibilities, the type and limitations of the service to be 
provided, and a description of the type of compilation or review report expected to 
be issued. As described in the vignette below, the Accounting and Review Services 
Committee (ARSC) has recently completed a Clarity Project similar to the Auditing 
Standards Board Clarity Project for auditing standards. The requirements for review, 
compilation, and preparation services are now discussed in greater detail. 


A review service (SSARS review) engagement allows the accountant to express 
limited assurance that the financial statements are in accordance with applicable 
accounting standards, including appropriate informative disclosures, or other com- 
prehensive basis of accounting (OCBOA), such as the cash basis of accounting. CPAs 
must be independent of the client for review service engagements. 


Review Services 


Procedures Suggested for Reviews The evidence for a review engagement consists 
primarily of inquiries of management and analytical procedures, substantially fewer proce- 
dures than those required for an audit. For reviews, accountants do not obtain an 
understanding of internal control, test controls, assess fraud risk, or do substantive 
tests of transactions or tests of balances, such as confirmation of receivables or physi- 
cal examination of inventory. 

SSARS require the accountant to obtain evidence that consists of the following for 
a review engagement: 


* Obtain agreement on engagement terms. The accountant should agree upon the 
terms of the engagement with management or those charged with governance. 
SSARS require that the agreement of terms be documented in an engagement 
letter or other suitable form of written agreement. 

° Obtain knowledge of the accounting principles and practices of the client’s industry. The accoun- 
tant can study AICPA industry guides or other sources to obtain industry knowledge. 
The level of knowledge for reviews can be somewhat less than for an audit. 

¢ Obtain knowledge of the client. The information should be about the nature of the client's 
business transactions, its ownership structure, key personnel, accounting records and 
employees, the accounting principles and practices used by the client, and the content 
of the financial statements. The level of knowledge can be less than for an audit. 


SSARS CLARITY 
PROJECT 


The Accounting and Review Services Committee 
(ARSC) recently completed its Clarity Project to 
substantially revise all existing compilation and 
review standards using drafting provisions similar to 
those used by the Auditing Standards Board when 
redrafting auditing standards. However, there was 
one notable difference in the ARSC drafting conven- 
tions. Specifically, ARSC did not use international 
standards as the base standard when revising the 
SSARS given unique aspects of the financial report- 


superseded all prior SSARS standards except SSARS 
No. 14, Compilation of Pro Forma Financial Information, 
which is currently being redrafted. SSARS No. 21 also 
introduced the new preparation engagement service, 
which is described in more detail later in this chapter. 
The clarified SSARS are structured as follows: 


* Section 60, General Principles for Engagements Per- 
formed in Accordance with Statements on Standards 
for Accounting and Review Services 
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ing environment in the United States. But, similar to 
the clarified auditing standards, the redrafted SSARS 
establish objectives for each standard, include defini- 
tions, and separate application guidance and other 
materials from the requirements. 

The Clarity Project was completed in October 
2014 when ARSC issued SSARS No. 21, Statement 
on Standards for Accounting and Review Services: 
Clarification and Recodification. That standard 


Section 70, Preparation of Financial Statements 
Section 80, Compilation Engagements 
Section 90, Review of Financial Statements 


These sections are codified in the AICPA 


Professional Standards as AR-C sections. 


Source: AICPA Professional Standards, Volume 2 (as of June |, 
2015). 
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* Make inquiries of management. Inquiry is the most important review procedure. 
The objective is to determine whether the financial statements are fairly pre- 
sented, assuming that management does not intend to deceive the accountant. 
Inquiries must be made of the appropriate client personnel and typically involve 
discussions, such as the following illustrative inquiries: 


1. Describe the accounting standards framework used to develop the financial 
statements, including your procedures for recording, classifying, and summa- 
rizing transactions and disclosing information in the statements. 

2. What unusual or significant transactions occurred this year, including impor- 
tant actions taken at meetings of stockholders and the board of directors? 

3. Is each account on the financial statements prepared in conformity with ac- 
counting standards and consistently applied? 

4. Do you have knowledge of an actual or suspected fraud, communications from 
regulatory agencies, subsequent events, or actions taken by those charged with 
governance that might materially impact the financial statements? 


° Perform analytical procedures. Based on the accountant’s understanding of the 
industry and knowledge of the client, the accountant designs and performs ana- 
lytical procedures. These identify relationships and individual items that appear 
to be unusual. The appropriate analytical procedures are no different from the 
ones already studied (in Chapters 7 and 8 and in chapters dealing with tests of 
details of balances). As unusual trends are noted, the accountant engages in fur- 
ther inquiries with client personnel to obtain explanations for any unexpected 
relationships. 

* Read the financial statements. The accountant should read the financial state- 
ments to determine whether they conform with the financial reporting frame- 
work, such as GAAP, IFRS, or OCBOA. The reading of the financial statements 
may identify items such as headings or section titles in the financial statements 
that are not consistent with the accounting framework used, arithmetical 
errors, clerical mistakes, or omitted disclosures. 

* Reconcile the financial statements to underlying accounting records. The accountant 
should obtain evidence that the financial statements agree or reconcile with the 
accounting records. 

* Obtain letter of representation. The accountant is required to obtain a letter of 
representation from members of management who are knowledgeable about 
financial matters. 

¢ Prepare documentation. The accountant should prepare documentation that is 
sufficient in detail to provide a clear understanding of the work performed, 
the review evidence obtained and its source, and the conclusions reached. 
Documentation should include the engagement letter, analytical procedures 
performed, significant matters covered in the inquiries with management, 
significant findings and issues, communications with management or others 
regarding possible fraud, and the representation letter. 


These procedures ordinarily provide a reasonable basis for obtaining limited 
assurance. However, in some instances, the accountant may become concerned that 
information is incorrect, incomplete, or otherwise unsatisfactory. If so, additional 
procedures should be performed to obtain limited assurance before the accountant 
issues a standard review services report. And, if the accountant becomes aware that 
noncompliance with laws or regulations or fraud may have occurred, the accountant 
should communicate the matter as soon as practicable to the appropriate level of 
management. When fraud is suspected, the auditor should communicate that to man- 
agement at least one level above those involved with the suspected fraud. If the fraud 
involves senior management, the auditor should communicate with those charged 
with governance, for example, the board of directors. 
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Form of Report Figure 25-2 provides an example of the review report when the 
accountant has completed a review engagement and decides that no material changes 
to the financial statements are needed. In addition to the required report title, the 
standard review report includes four paragraphs that include the following: 


1. An introductory paragraph that identifies the entity and period of financial 
statements subject to the review and explicitly notes that the accountant has 
conducted a review. The first paragraph also includes a statement that a review 
primarily consists of analytical procedures and inquiries and is substantially less 
in scope than an audit. 

2. The second paragraph specifies that management is responsible for the prepara- 
tion and fairness of the financial statements and for designing, implementing, and 
maintaining internal controls relevant to financial reporting. The paragraph should 
include the heading “Management's Responsibility for the Financial Statements.” 

3. The third paragraph notes that the accountant’s responsibility is to conduct a re- 
view of management’s financial statements in accordance with SSARS and that 
those standards require the accountant to perform procedures to obtain limited 
assurance that there are no material modifications that should be made to the 
financial statements. This paragraph should include the heading “Accountant's 
Responsibility.” 

4. The fourth paragraph, which is preceded by the heading “Accountant’s 
Conclusion,” expresses limited assurance in the form of negative assurance that 
“we are not aware of any material modifications that should be made to the ac- 
companying financial statements” in order for them to be in conformity with 
applicable accounting standards. 


The date of the review report should be the date on which the accountant has accumu- 
lated review evidence sufficient to provide a reasonable basis for the report conclusion. Each page 
of the financial statements reviewed should include the reference “See independent 
accountant’s review report.” 


FIGURE 25-2. Example of Review Report 


Independent Accountant’s Review Report 

We have reviewed the accompanying financial statements of Archer Technologies, Inc., which comprise 
the balance sheet as of December 31, 2016, and the related statements of income, changes in stockhold- 
ers’ equity, cash flows for the year then ended, and the related notes to the financial statements. A review 
includes primarily applying analytical procedures to management's financial data and making inquiries of 
company management. A review is substantially less in scope than an audit, the objective of which is the 
expression of an opinion regarding the financial statements as a whole. Accordingly, we do not express 
such an opinion. 


Management’s Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements in accordance 
with accounting principles generally accepted in the United States of America; this includes the design, imple- 
mentation, and maintenance of internal control relevant to the preparation and fair presentation of the financial 
statements that are free from material misstatement, whether due to fraud or error. 


Accountant’s Responsibility 

Our responsibility is to conduct the review engagement in accordance with Statements on Standards for Ac- 
counting and Review Services promulgated by the Accounting and Review Services Committee of the AICPA. 
Those standards require us to perform procedures to obtain limited assurance as a basis for reporting whether 
we are aware of any material modifications that should be made to the financial statements for them to be in 
accordance with accounting principles generally accepted in the United States of America. We believe that the 
results of our procedures provide a reasonable basis for our conclusion. 


Accountant’s Conclusion 

Based on our review, we are not aware of any material modifications that should be made to the accompany- 
ing financial statements in order for them to be in accordance with accounting principles generally accepted 
in the United States of America. 
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Failure to Follow Applicable Accounting Framework If a client has failed to follow 
applicable accounting standards in a review engagement, the report must be modi- 
fied. (Accounting standards are the same for all historical financial statements, includ- 
ing reviews.) The report should disclose the effects of the departure as determined by 
management or the accountant’s review procedures. Even if the effects have not been 
determined, the disclosure must appear in the report in a separate paragraph, under the 
heading “Known Departures from Accounting Principles Generally Accepted in the 
United States of America.” The following provides an example of suggested wording: 


Known Departures from Accounting Principles Generally Accepted in 
the United States of America 

As disclosed in note X to the financial statements, accounting prin- 
ciples generally accepted in the United States of America require that land be 
stated at cost. Management has informed us that the company has stated its 
land at appraised value and that, if accounting principles generally accepted 
in the United States of America had been followed, the land account and 
stockholders’ equity would have been decreased by $500,000. 


A compilation service engagement is defined in SSARS as one in which accoun- 
tants apply accounting and financial reporting expertise to assist management in the 
preparation of financial statements and issue a report to a client or third party with- 
out providing any CPA assurance about those statements. Nonpublic entities may engage 
CPA firms to prepare monthly, quarterly, or annual financial statements and to issue a 
compilation report that may be provided to external users. The CPA is not required to 
be independent to perform a compilation and the financial statements can be issued 
without additional disclosures such as footnotes. 


Requirements for Compilation Compilation does not absolve accountants of re- 
sponsibility, as they are always responsible for exercising due care in performing all 
duties. In a compilation engagement, an accountant must accomplish the following: 


¢ Establish an understanding with the client in a written engagement letter or 
other suitable form of written agreement about the objectives of the compila- 
tion engagement, type and limitations of the services to be provided including 
acknowledgement that the accountant does not provide any assurance about 
the financial statements, and a description of the report, if a report is to be 
issued. That agreement also should note that management acknowledges its 
responsibilities for the preparation and fair presentation of the financial state- 
ments, including informative disclosures. 

* Possess knowledge about the accounting principles and practices of the client’s 
industry. 

* Know the client, including a general understanding of the client’s organization, 
the nature of its business transactions, accounting principles and practices used 
by the client, and content of its financial statements (the knowledge can be less 
than that for a review). 

¢ Make inquiries to determine whether the client’s information is satisfactory. 

* Read the compiled financial statements and be alert for any obvious omissions 
or errors in arithmetic and in the application of accounting standards. 

¢ Request management to provide additional or corrected information if the ac- 
countant becomes aware that the records, documents, explanations, or other 
information, including significant judgments by management, is incomplete, 
inaccurate, or otherwise unsatisfactory. 

¢ Prepare documentation in sufficient detail to provide a clear understanding 
of the work performed and any findings or issues that are significant, includ- 
ing any communications with management regarding fraud or illegal acts that 
came to the accountant’s attention. 
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FIGURE 25-3 Compilation Report with Full Disclosure 


Management is responsible for the accompanying financial statements of Williams Company, which comprise 
the balance sheet as of December 31, 2016, and the related statements of income, changes in stockholders’ 
equity and cash flows for the year then ended, and the related notes to the financial statements in accordance 
with accounting principles generally accepted in the United States of America. We have performed the compila- 
tion engagement in accordance with Statements on Standards for Accounting and Review Services promulgated 
by the Accounting and Review Services Committee of the AICPA. We did not audit or review the financial 
statements nor were we required to perform any procedures to verify the accuracy or completeness of the 
information provided by management. Accordingly, we do not express an opinion, a conclusion, nor provide any 
form of assurance on these financial statements. 


* Request management to revise the financial statements, if the accountant 
becomes aware of needed revisions to the financial statements required for those 
statements to be in accordance with the applicable financial reporting framework. 


Accountants do not have to make other inquiries or perform other procedures 
to verify information provided by client personnel. But if they become aware that the 
statements are not fairly presented, they should obtain additional information. If the 
client refuses to provide the information, the accountant should withdraw from the 
compilation engagement. 


Form of Report SSARS define three types of compilation reports. The use of each 
depends on whether management elects to include all the required disclosures with 
the financial statements and whether the accountant is independent. 


1. Compilation with full disclosure. A compilation of this type requires disclosures in 
accordance with accounting standards, the same as for audited financial state- 
ments or reviews, as illustrated by Figure 25-3. 

2. Compilation that omits substantially all disclosures. Figure 25-4 shows the appro- 
priate wording that the accountant adds after the conclusion paragraph of the 
standard compilation report when the accountant compiles statements without 
disclosures. This type of compilation is acceptable if the report indicates the lack of 
disclosures and the absence of disclosures is not, to the CPA’s knowledge, undertaken 
with the intent to mislead users. Typically, this type of statement is used primarily for 
management purposes. 

3. Compilation without independence. A CPA firm can issue a compilation report with 
full or omitted disclosures even if it is not independent of the client, as defined by 
the AICPA Code of Professional Conduct. When the accountant lacks independence, 
an additional paragraph must be added as the last paragraph of the report that 
states: “We are not independent with respect to Williams Company.” 


For all three types of compilation reports, the following elements are also required: 


* The date of the accountant’s report is the date of completion of the compilation. 
* Each page of the financial statements compiled by the accountant should state 
“See accountant’s compilation report.” 


FIGURE 25-4 Compilation That Omits Substantially All Disclosures 


(The first paragraph is the same as the compilation report in Figure 25-3.) 


Management has elected to omit substantially all the disclosures ordinarily included in financial statements 
prepared in accordance with accounting principles generally accepted in the United States of America. If the 
omitted disclosures were included in the financial statements, they might influence the user’s conclusions about 
the company’s financial position, results of operations, and cash flows. Accordingly, the financial statements are 
not designed for those who are not informed about such matters. 
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Preparation Services 


¢ If the client fails to follow accounting standards, the auditor must include the 
same modifications in the compilation report that are used in a review report. 


Many entities may want a CPA to assist them in the preparation of monthly, quarterly, or 
annual financial statements, but they do not want the CPA to provide an accompanying 
compilation report. As part of the SSARS Clarity Project described in the vignette on 
p. 825, the Accounting and Review Services Committee created the preparation engage- 
ment service as an alternative to the compilation service engagement. In a preparation 
service engagement, the CPA is engaged by the client to prepare or assist in preparing 
financial statements, but the CPA does not provide any assurance on the financial state- 
ments or issue a report, even if the financial statements are expected to be used by, or 
provided to, a third party. Additionally, because the preparation service is a nonattest 
service, the CPA does not need to determine whether he or she is independent. 

The CPA’s responsibilities when performing a preparation service are similar to 
those performed in a compilation. The key differences are the CPA does not issue a 
report and the CPA does not need to assess independence. The accountant should 
ensure that a statement is included on each page of the financial statements indicat- 
ing, at a minimum, that “no assurance is provided” on the financial statements. If 
the accountant is prevented from including a statement on each page of the financial 
statements, he or she should issue a disclaimer that makes clear that no assurance 
is provided, or the accountant should perform a compilation service engagement, 
which would include issuance of a compilation report. 


REVIEW OF INTERIM FINANCIAL INFORMATION 
FOR PUBLIC COMPANIES 
‘OBJECTIVE 25-200 The SEC requires that quarterly financial statements be reviewed by the company’s 


Describe special engagements 
to review interim financial 
information for public 
companies. 


external auditor prior to the company’s filing of the Form 10-Q with the SEC. The SEC 
also requires a footnote in the annual audited financial statements disclosing quarterly 
sales, gross profit, income, and earnings per share for the past two years. Typically, the 
footnote in the annual statements is labeled unaudited. At a minimum, the CPA firm 
must perform review procedures of the footnote information. Because the same CPA 
firm does both the annual audit and the public company interim financial statement 
review, they are referred to as auditors, not accountants for the interim review. 

Like reviews under SSARS, a public company interim review includes five 
requirements for review service engagements. The auditor must: (1) obtain knowledge 
of the accounting principles of the client’s industry, (2) obtain knowledge of the client, 
(3) make inquiries of management, (4) perform analytical procedures, and (5) obtain a 
letter of representation. 

Also like SSARS reviews, reviews for public companies do not provide a basis 
for expressing positive opinion level assurance. Ordinarily, auditors perform no tests 
of the accounting records, independent confirmations, or physical examinations. 
However, the two types of reviews differ in several areas. Below are the key differences: 


* Because an annual audit is also performed for the public company client, the 
auditor must obtain sufficient information about the client’s internal control 
for both annual and interim financial information. 

¢ Similarly, because the client is audited annually, the auditor’s knowledge of the 
results of these audit procedures is used in considering the scope and results of 
the inquiries and analytical procedures for the review. 

¢ Under SSARS, the auditor makes inquiries about actions taken at directors’ and 
stockholders’ meetings; for a public company, the auditor reads the minutes of 
those meetings. 
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Example of a Report for Interim Financial Statements 
for a Public Company 


FIGURE 25-5 


REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM 


We have reviewed the consolidated balance sheet of Rainer Company and consolidated subsidi- 
aries as of September 30, 2016, and the related statements of earnings, retained earnings, and cash flows 
for the three-month and nine-month periods then ended. These financial statements are the responsibility 
of the company’s management. 


We conducted our review in accordance with the standards of the Public Company Accounting Oversight 
Board (United States). A review of interim financial information consists principally of applying analytical 
procedures and making inquiries of persons responsible for financial and accounting matters. It is 
substantially less in scope than an audit conducted in accordance with the standards of the Public 
Company Accounting Oversight Board, the objective of which is the expression of an opinion regarding 
the financial statements taken as a whole. Accordingly, we do not express such an opinion. 


Based on our review, we are not aware of any material modifications that should be made to the accom- 
panying interim financial statements for them to be in conformity with accounting principles generally 
accepted in the United States of America. 


* The auditor must also obtain evidence that the interim financial information 
agrees or reconciles with the accounting records for a public company interim 
review. For example, the auditor might compare the interim financial informa- 
tion to the general ledger. 


A public company interim review is performed following standards of the PCAOB 
and the review report makes no reference to SSARS. See Figure 25-5 for an example 
of such a report. Each page of the interim financial information that accompanies the 
report should be clearly marked as “unaudited.” 

If the auditor determines the interim statements violate accounting standards, the 
report should be modified. The language of the modification is similar to that used in 
a review under SSARS, except that the auditor should state the effect of the departure, 
if the amount can be determined. 

The quarterly data reviewed by the auditor and included as a footnote in the 
annual audited statements should be labeled “unaudited.” However, a separate review 
report for this information is not required. 


CONCEPT CHECK 
1. Distinguish among engagements to prepare, compile, and review financial statements. 
What is the level of assurance for each? 


2. What procedures should the auditor use to obtain the information necessary to give the 
level of assurance required of reviews of financial statements? 


ATTESTATION ENGAGEMENTS 


Chapter 1 described assurance services as independent professional services that 
improve the quality of information for decision makers. Individuals who are responsi- 
ble for making business decisions seek assurance services to help improve the reliabil- 
ity and relevance of the information on which they base their decisions. One category 
of assurance services provided by CPAs is attestation services. 

CPAs have increasingly been asked to perform a variety of audit-like services, 
known as attest services, for different purposes. In an attestation engagement, the 
CPA reports on the reliability of information or an assertion made by another party. 
An example is when a bank requests a CPA to report in writing whether an audit client 
has adhered to all requirements of a loan agreement. 


Distinguish AICPA attestation 
standards from auditing 

standards and know the types 
of engagements to which they 


apply. 
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i) i.e Generally Accepted Attestation Standards 


General Standards 


IE 
2, 
3. 
ae 
5, 


The practitioner must have adequate technical training and proficiency to perform the attestation engagement. 

The practitioner must have adequate knowledge of the subject matter. 

The practitioner must have reason to believe that the subject matter is capable of evaluation against criteria that are suitable and available to users. 
The practitioner must maintain independence in mental attitude in all matters relating to the engagement. 

The practitioner must exercise due professional care in the planning and performance of the engagement and the preparation of the report. 


Standards of Field Work 


|. The practitioner must adequately plan the work and must properly supervise any assistants. 
2. The practitioner must obtain sufficient evidence to provide a reasonable basis for the conclusion that is expressed in the report. 


Standards of Reporting 


|. The practitioner must identify the subject matter or assertion being reported on and state the character of the engagement in the report. 
2. The practitioner must state the practitioner’s conclusion about the subject matter or the assertion in relation to the criteria against which 
the subject matter was evaluated in the report. 
3. The practitioner must state all of the practitioner's significant reservations about the engagement, the subject matter, and, if applicable, the 
assertion related thereto in the report. 
4. The practitioner must state in the report that the report is intended solely for the information and use of the specified parties under the 
following circumstances: 
— When the criteria used to evaluate the subject matter are determined by the practitioner to be appropriate only for a limited number of 
parties who either participated in their establishment or can be presumed to have an adequate understanding of the criteria. 
— When the criteria used to evaluate the subject matter are available only to specified parties. 
— When reporting on subject matter and a written assertion has not been provided by the responsible party. 
— When the report is on an attestation engagement to apply agreed-upon procedures to the subject matter. 


Note: The AICPA is in the process of finalizing its clarity project for the attestation standards (see vignette on the next page). When the clarified standards become 
effective, the || attestation standards will not be retained in their current form, but their core aspects will become part of the Preface, which describes the purpose 
of an attestation engagement along with the accountant’s performance and reporting responsibilities. 
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The AICPA has issued 11 attestation standards that are stated in sufficiently general 
terms to enable CPAs to apply them to any attestation engagement, including new types 
of engagements that may arise. These standards, which are shown in Table 25-1, closely 
parallel the principles underlying an audit in accordance with auditing standards. 

The most notable differences in the attestation standards and the principles under- 
lying an audit are in general attestation standards 2 and 3. Standard 2 requires that the 
CPA have adequate knowledge of the subject matter over which there is attestation. For 
example, for CPAs to attest to a company’s compliance with environmental protection 
laws, they need a thorough knowledge of the laws and methods that companies use 
to assure compliance. Standard 3 requires that the CPA be able to evaluate the subject 
matter against criteria that are suitable and available to users. Again, using the example 
of environmental protection laws, measurement difficulties or the lack of specific cri- 
teria may make it difficult for the CPA to conclude whether there is compliance. 

To provide additional guidance for doing attestation engagements, the Auditing 
Standards Board of the AICPA issues Statements on Standards for Attestation 
Engagements (SSAE). These are normally called attestation standards. The Auditing 
Standards Board attempts to distinguish between issues that should be addressed by 
auditing standards and those that should be addressed by attestation standards, even 
though both are attestations. In general, auditing standards apply to attestations that 
deal with providing assurance on historical financial statements, including one or 
more parts of those statements. These may include audits of financial statements pre- 
pared in accordance with accounting standards or some other comprehensive basis of 
accounting, audits of only a balance sheet, and audits of individual accounts. 

All other forms of attestation are addressed in the attestation standards (an exception 
is reviews of historical financial statements of a nonpublic entity, which are addressed in 
SSARS and were discussed earlier in the chapter). Attestation standards are established by 
the Auditing Standards Board following the same process used for auditing standards. 


Attestation Standards 
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CLARITY PROJECT 
FOR ATTESTATION 
STANDARDS 


Similar to how the AICPA has issued clarified auditing 
standards and standards for accounting and review 
services, the Auditing Standards Board has been clari- 
fying the Statements on Standards for Attestation 
Engagements (SSAEs). As part of the Clarity 

Project, the ASB is converging SSAEs to those of 

the International Accounting and Auditing Standards 
Board (IAASB). The re-drafting of SSAEs is based on 
similar provisions that include establishing objectives 
for each standard, including definitions, and separating 
requirements from application and other explanatory 
materials. One notable difference is that the revisions 
restructure the attestation into “chapters” that re- 
place the former sections with the following: 


* Chapter 7: Compliance Attestation 

* Chapter 8: Reporting on an Examination of Con- 
trols at a Service Organization Relevant to User 
Entities’ Internal Control Over Financial Reporting 


As part of the Clarity Project, the ASB has moved 
the guidance in AT Section 501, An Examination of an 
Entity’s Internal Control Over Financial Reporting That 
Is Integrated with an Audit of Its Financial Statements, 
from the attestation standards to the auditing stan- 
dards because it addresses an examination of internal 
control that is integrated with an audit of financial 
statements. 

The Clarity Project recodifies the AT sections as 


“AT-C.” 
Chapter |: Concepts Common to All Attestation 


Engagements 


Source: AICPA Proposed Statement on Standards for 
Attestation Engagements Attestation Standards: Clarification and 
Recodification (July 2013); Subject Matter Specific Attestation 
Standards: Clarification and Recodification (January 2014); 
Reporting on an Examination of Controls at a Service Organization 
Relevant to User Entities’ Internal Control Over Financial Reporting: 
Clarification and Recodification (September 2014). 


Chapter 2: Examination Engagements 

Chapter 3: Review Engagements 

Chapter 4: Agreed-Upon Procedures Engagements 
Chapter 5: Financial Forecasts and Projections 
Chapter 6: Reporting on Pro Forma Financial 
Information 


The Auditing Standards Board decided not to attempt to define the potential bound- 
aries of attestation engagements except in conceptual terms because new services are 
likely to arise. For example, PricewaterhouseCoopers has been attesting to the ballot- 
ing for the Miss America contest for decades, but attesting to compliance with envi- 
ronmental protection laws started only in recent years. 

The AICPA has developed specific attestation standards to address specific types 
of engagements. For example, there are standards related to engagements to compile 
or examine prospective financial statements or to report on internal controls at ser- 
vice organizations. Several of these services are discussed later in this chapter. 


Types of Attestation 
Engagements 


The attestation standards define three levels of engagements and related forms of 


: Levels of Service 
conclusions: ¥ 


1. Examinations 
2. Reviews 
3. Agreed-upon procedures 


In addition, compilation engagements are defined for prospective financial 
statements. 

An examination results in a positive conclusion, which is expressed by the CPA in 
the form of an opinion. In this type of report, the CPA makes a direct statement about 
whether the presentation of the assertions, taken as a whole, conforms to the appli- 
cable criteria. A report on an examination is unrestricted as to distribution by the 
client after it is issued. This means that a client can distribute the information widely, 
including to prospective investors, and for sales and marketing purposes. 

Figure 25-6 (p. 834) contains an examination report issued by Deloitte & Touche, 
LLP, for an engagement to determine if the Statements of Greenhouse Gas Emissions 
of United Parcel Service, Inc., for the years ended December 31, 2014 and 2013, are 
presented in accordance with applicable greenhouse reporting standards issued by 
the World Business Council for Sustainable Development and the World Resources 
Institute. The second paragraph acknowledges that the firm conducted the examina- 
tion in accordance with attestation standards established by the AICPA. Because this 
was an examination-level engagement, the final paragraph contains the firm’s opinion. 
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Example of an Examination Report Under the 


FIGURE 25-6 


INDEPENDENT ACCOUNTANT?’S EXAMINATION REPORT 


We have examined the accompanying Statement of Greenhouse Gas Emissions (“Statement of GHG 
Emissions”) of United Parcel Service, Inc., (the “Company”) for the years ended December 31, 2014, and 
December 31, 2013, and the 2010 base year for Scope | and 2 greenhouse gas emissions. The Company’s 
management is responsible for the Statement of GHG Emissions. Our responsibility is to express an 
opinion based on our examination. 


Our examination was conducted in accordance with attestation standards established by the American 
Institute of Certified Public Accountants and, accordingly, included obtaining an understanding of the 
nature of the Company’s greenhouse gas emissions and its internal control over greenhouse gas emis- 
sions information, examining, on a test basis, evidence supporting the Company’s Statement of GHG 
Emissions and performing such other procedures as we considered necessary in the circumstances. We 


believe that our examination provides a reasonable basis for our opinion. 


As described in Note |, environmental and energy use data are subject to measurement uncertainties 
resulting from limitations inherent in the nature and the methods used for determining such data. The 
selection of different but acceptable measurement techniques can result in materially different measure- 
ments. The precision of different measurement techniques may also vary. 


In our opinion, the Statement of GHG Emissions of the Company for the years ended December 31, 2014, 
and December 31, 2013, and the 2010 base year for Scope | and 2 greenhouse gas emissions and the 2012 
base year for Scope 3 greenhouse gas emissions, is presented, in all material respects, in conformity with 
the Greenhouse Gas Protocol Corporate Accounting and Reporting Standard (Scope | and 2) and the 
Corporate Value Chain (Scope 3) Accounting and Reporting Standard Published by the World Business 
Council for Sustainable Development and World Resources Institute (collectively, the “GHG Protocol”). 


Deloitte & Touche, LLP 
Stamford, Connecticut 
June 26, 2015 


In a review, the CPA provides a moderate level of assurance that is expressed by 
the CPA in the form of a negative assurance conclusion. For a negative assurance report, 
the CPA’s report states whether any information came to the CPA’s attention to indi- 
cate that the assertions are not presented in all material respects in conformity with 
the applicable criteria. A review report is also unrestricted in its distribution. Review 
engagements are prohibited for most services where specified attestation standards 
have been issued, such as prospective financial statements, because of the difficulty of 
setting standards for the limited assurance provided by reviews. 

In an agreed-upon procedures engagement, all procedures the CPA will per- 
form are agreed upon by the CPA, the responsible party making the assertions, and the 
specific persons who are the intended users of the CPA’s report. The degree of assur- 
ance included in such a report varies with the specific procedures agreed to and per- 
formed. Accordingly, such reports are limited in their distribution to only the involved 
parties, who know the procedures the CPA will perform and the level of assurance 
resulting from them. The report should include a statement of what procedures man- 
agement and the CPA agreed to and what the CPA found in performing the procedures. 

Figure 25-7 summarizes the reporting levels for attestation engagements. Next we 
discuss three common types of engagements for which detailed attestation standards 


FIGURE 25-7 Types of Engagements and Related Reports 


Amount of Level of Form of 
Type of Engagement Evidence Assurance Conclusion Distribution 


Examination Extensive High Positive General 


Review Significant Moderate Negative General 


Agreed-upon procedures Varying Varying Findings Limited 
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have been issued: reports on controls at service organizations, prospective financial 
statements, and agreed-upon procedures. 


REPORTS ON CONTROLS AT SERVICE 
ORGANIZATIONS (SOC REPORTS) 


Chapter 12 highlighted that many clients outsource some or all of their IT needs to an 
independent computer service organization rather than maintain an internal IT func- 
tion or data center. In those situations, management of those organizations are depen- 
dent on the effectiveness of internal controls performed at the service organization. 
Additionally, their auditors face difficulty when obtaining an understanding of the 
client’s internal control over financial reporting because many of the controls reside at 
the service organization, and the auditor cannot assume that the controls are adequate 
because they are provided by an independent IT provider. It has become increasingly 
common for the service center to engage a CPA firm to obtain an understanding and 
test internal controls of the service organization and issue a report for use by all cus- 
tomers and their independent auditors. There are three types of service organization 
control (SOC) reports, which are referred to as SOC 1, SOC 2, and SOC 3 reports. 


An SOC 1 report, Report on Controls at a Service Organization Relevant to User Entities’ Internal 
Control Over Financial Reporting, is intended to meet the needs of entities (user entities) 
that use service organizations and their auditors, who are responsible for understand- 
ing internal controls over financial reporting at service organizations. SOC 1 reports 
are used to plan and perform audits of the user entity’s financial statements by their 
auditors, who are referred to as user auditors. The SOC 1 guidance for service auditors 
is in the attestation standards, while guidance for user auditors is in the auditing stan- 
dards. The attestation standards provide guidance for service auditors, who are engaged 
by a service organization to issue one of two types of reports on controls at the service 
organization relevant to user entities’ internal control over financial reporting: 


1. Report on management's description of a service organization’s system and the 
suitability of the design of controls (referred to as a Type 1 report). 

2. Report on management’s description of a service organization’s system and the 
suitability of the design and operating effectiveness of controls (referred to as a 
Type 2 report). 


In a Type 1 report, the service auditor expresses an opinion about the fairness of the 
description of the service organization’s system and an opinion about the suitability 
of the design of controls in that system. The service auditor obtains and reads the sys- 
tem description prepared by the organization’s management and assesses whether the 
description is fairly presented. In making that assessment, the service auditor evaluates 
whether management used suitable criteria in preparing and presenting the service orga- 
nization’s system description. For example, the service auditor would evaluate whether 
the organization’s description includes information about procedures by which transac- 
tions are initiated, authorized, recorded, processed, corrected, and reported for user enti- 
ties and the related accounting records prepared to support those processes. 

In a Type 1 engagement, the service auditor also performs procedures to obtain 
sufficient available evidence to obtain reasonable assurance about the suitability of the 
design of controls. In making that determination, the service auditor evaluates whether 
controls have been designed to address risks threatening the achievement of control 
objectives and whether those controls, if operating as described, provide reasonable 
assurance that those risks would not prevent achievement of control objectives. 

In a Type 2 engagement, the service auditor performs tests of the operating 
effectiveness of the controls at the service organization, in addition to procedures 
performed in the Type 1 engagement. The service auditor’s Type 2 report contains the 


Describe engagements to report 
on internal controls at service 
organizations (SOC reports). 


SOC I Reports 
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SOC 2 Reports 


SOC 3 Reports 


two opinions about the description and suitability of the design of controls that are 
provided in a Type 1 report, plus an additional opinion about the operating effective- 
ness of controls throughout the period. 

Service organizations provide a number of other IT services for entities that may not 
relate to internal controls over financial reporting. For example, a university that out- 
sources the processing of student applications for admission will likely be subject to 
laws requiring the university to maintain the privacy of the information included in 
the application. The university is concerned about the accuracy of that information 
and is responsible for maintaining the privacy of the information including that resid- 
ing at the service organization. Management of the university is also concerned about 
complying with laws or regulations related to processing integrity and privacy and 
may desire assurance about the service organization’s controls relevant to processing 
integrity and privacy that affect the users’ information. 

An SOC 2 report, Report on Controls at a Service Organization Relevant to Security, 
Availability, Processing Integrity, Confidentiality, or Privacy, is intended to meet the needs of a 
broad range of users who need information and assurance about controls at a service 
organization that affect the security, availability, and processing integrity of the systems 
the service organization uses to process users’ data and the confidentiality and privacy of 
the information processed by these systems. For example, customers of a service organi- 
zation may seek an SOC 2 report as part of their vendor risk management considerations. 

The service auditor uses the criteria in Trust Services Principles for evaluating and 
reporting on controls related to security, availability, processing integrity, confiden- 
tiality, or privacy. The five Trust Services principles, which are shown in Table 25-2, 
represent broad statements of objectives. To provide more specific guidance, there are 
related Trust Services criteria for each of the five principles. The controls that the CPA 
reports on in these engagements are intended to prevent, or detect and correct, errors 
or other negative events that affect the service or information provided to user entities 
as they relate to the principle being reported on. 

Similar to SOC 1 reports, there are two types of SOC 2 reports: a type 1 report on man- 
agement’s description of a service organization’s system and the suitability of the design 
of controls and a type 2 report on management's description of a service organization’s 
system and the suitability of the design and operating effectiveness of controls. Use of these 
reports is generally restricted to specified parties, such as management of user entities, cus- 
tomers of the service organizations, regulators, suppliers, and business partners. 


An SOC 3 report, Trust Services Report for Service Organizations, is similar to an SOC 2 
report except that the SOC 3 report is intended for wide distribution to current or 
potential users of the service organization. SOC 3 reports are prepared using the Trust 
Services principles and criteria shown in Table 25-2. While the distribution of an SOC 2 
report is generally restricted, an SOC 3 report is a general-use report, which allows the 


TABLE 25-2 


Five Trust Services Principles 


Principle The entity discloses and maintains compliance with its ... 


Security security practices, ensuring that the system is protected against unauthorized access (both 
physical and logical). 


Availability availability practices, ensuring that the system is available for operation and use as 
committed or agreed. 


Processing Integrity processing integrity, ensuring that system processing is complete, accurate, timely, and authorized. 


Confidentiality confidentiality practices, ensuring that information designated as confidential is protected 
as committed or agreed. 


Privacy online privacy practices, ensuring that personal information obtained as a result of 
e-commerce is collected, used, disclosed, and retained as committed or agreed. 


Arens, Alvin, et@|5AQditing and AssuRare SeWi@s BRO SIQDRIANIGE, AddiSo NEO AGBURAMCD SE RWIGLESt Ebook Central, 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-08-06 07:03:04. 


AICPA 
DISCONTINUES 
SYSTRUST 
SERVICES 


In October 2014, the AICPA and CPA Canada 
announced that they had discontinued the SysTrust 
seal program. In a SysTrust engagement, the SysTrust— 
licensed CPA evaluated a company’s computer system 
using Trust Services principles and criteria and deter- 
mined whether controls over the system existed. The 
CPA then performed tests to determine whether 
those controls were operating effectively during a 
specified period. If the system met the requirements 
of the Trust Services principles and criteria, an exami- 
nation-level unqualified attestation report was issued 


client engages a CPA to provide reasonable assur- 
ance that a company’s Web site complies with certain 
Trust Services principles and criteria for one or more 
aspects of e-commerce activities. A site that meets 
the Trust Services principles is eligible to display the 
WebTrust electronic seal on its transaction or order 
page, which is intended to give users of the site assur- 
ance about the site's credibility. At least once every 
12 months, the CPA firm updates its testing of the 
e-commerce aspects to ensure that the client’s site 
continues to comply with the Trust Services principles 


under AICPA attestation standards. Effective immedi- 
ately, the AICPA and CPA Canada will no longer issue 
new licenses to practitioners to use the SysTrust seal. 
While the WebTrust seal program continues, the 
program is being evaluated to determine if the ben- 
efits justify the resources necessary to continue the 
program. In a WebTrust attestation engagement, a 


and criteria. The CPA firm also updates its report. If 
the site does not comply, the seal can be revoked. 


Sources: |. Brian Loney and Amy Pawlicki, “Letter to 
SysTrust Licensees” (October 2, 2014) (www.webtrust.org); 
2. AICPA and CPA Canada, “Overview of Trust Services” 
(www.webtrust.org). 


service organization to share the report with current or prospective customers or to 
use it as a marketing tool to demonstrate that they have appropriate controls in place 
to mitigate risks, such as those related to security or privacy. 


PROSPECTIVE FINANCIAL STATEMENTS 
OBJECTIVE 25-5 


Understand special engagements 
to attest to prospective financial 
statements. 


As implied by the term, prospective financial statements refer to predicted or 
expected financial statements in some future period (income statement) or at some 
future date (balance sheet). An example is management’s predictions of the income 
statement and balance sheet one year in the future. 

Most CPAs believe there are significant opportunities and potential risks for audi- 
tors to provide credibility to prospective financial information. It is widely accepted 
that users want reliable prospective information to aid their decision making. If audi- 
tors can improve the reliability of the information, information risk may be reduced 
in the same way it is in audits of historical financial statements. The risks arise because 
the actual results obtained in the future may differ significantly from the results pre- 
dicted in the prospective financial statements. Regulators, users, and others may criti- 
cize and even sue auditors, even if the prospective statements were fairly stated, given 
the information available when they were prepared. 


AICPA attestation standards define two general types of prospective financial statements: 
Forecasts and 


1. Forecasts are prospective financial statements that present an entity’s expected Projections 


financial position, results of operations, and cash flows, to the best of the respon- 
sible party’s knowledge and belief. Banks commonly require this information as a 
part of loan applications. 

2. Projections are prospective financial statements that present an entity’s financial 
position, results of operations, and cash flows, to the best of the responsible party’s 
knowledge and belief, given one or more hypothetical assumptions. For example, 
projected financial statements might assume the company is able to increase the 
price of its primary product by 10 percent with no reduction in units sold. 


Considerable guidance is provided in the AICPA Guide for Prospective Financial Statements, 
which includes criteria against which an attestation engagement can be compared. 
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Prospective financial statements are prepared for one of two audiences: : 
Use of Prospective 


1. General use statements are prepared for use by any third party, such as the inclu- Financial Statements 


sion of a financial forecast in a prospectus for the sale of hospital bonds. 
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POTENTIAL 
LEGAL LIABILITY 
IN PROSPECTIVE 

FINANCIAL 

STATEMENTS 


A partner in one of the Big Four CPA firms stated incurred to defend against lawsuits involving these 
that his firm has decided not to do assurance engage- engagements. The firm discovered that legal costs 
ments for prospective financial statements because of exceeded revenues. The partner said, “You don’t have 


litigation costs. He reported that his firm calculated to be a rocket scientist to conclude that if legal costs 
their total revenues (not profits) from all prospec- exceed revenues it’s a bad business. Users sue when 
tive financial statement engagements and also calcu- actual profits are less favorable than those projected 
lated all legal costs, including partner and staff time regardless of what the CPA firm’s report says.” 


Types of Engagements 


Examination of 
Prospective Financial 
Statements 
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Define agreed-upon procedures 
engagements. 


2. Limited use statements are prepared solely for third parties with whom the re- 
sponsible party is dealing directly, such as the inclusion of a financial projection 
in a bank loan application document. 

Forecasts can be provided for both general and limited use. However, projections are 
restricted to the latter, because limited users are in a better position to understand the pro- 
spective statements and related assumptions than other parties. For example, a potential 
venture capital investor can ask the responsible party about hypothetical assumptions in 
a projection, whereas a removed user, such as a reader of a company prospectus, cannot. 
Because general users may have difficulty interpreting hypothetical assumptions without 
obtaining additional information, the standards prohibit their general use. There is an excep- 
tion to this rule: a projection may be issued as a supplement to a forecast for general use. 


AICPA attestation standards prohibit a CPA firm from performing a review of a forecast or 
projection, because a review service implies the CPA can be “moderately satisfied” about 
both the computational accuracy of the projections and the assumptions on which the 
projection is based. To avoid confusion among users, the AICPA created more specific 
attestation standards, prescribing the following types of engagements for prospective 
financial statements: 


¢ An examination engagement in which the CPA obtains satisfaction as to the 
completeness and reasonableness of all the assumptions. 

¢ Acompilation engagement in which the CPA is primarily involved with the compu- 
tational accuracy of the statements, and not the reasonableness of the assumptions. 

« An agreed-upon procedures engagement in which the CPA and all users of the 
statements agree on specific, limited attestation procedures. 


Only an examination of prospective statements is included in this chapter. 
In an examination level engagement, the CPA: 


1. Evaluates the preparation of the prospective financial statements 

2. Evaluates the support underlying the assumptions 

3. Evaluates the presentation of the prospective financial statements for conformity 

with AICPA presentation guidelines 

4. Issues an examination report 

The CPA is not attesting to the accuracy of the prospective financial statements. 
Instead, the CPA is accumulating evidence about the completeness and reasonableness 
of the underlying assumptions, as disclosed in the prospective financial statements. 
To make the evaluation, the CPA needs to become familiar with the client’s business 
and industry, identify the significant matters on which the client’s future results are 
expected to depend (“key factors”), and determine that appropriate assumptions have 
been included with respect to these key factors. 


AGREED-UPON PROCEDURES ENGAGEMENTS 
‘OBJECTIVE 25-6 When the auditor and management or a third-party user agree that the engagement 


will be limited to certain specific procedures, it is referred to as an agreed-upon proce- 
dures engagement. Many CPAs refer to these as procedures and findings engagements 
because the resulting reports emphasize the specific procedures performed and the 
findings of those completed procedures. 
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Agreed-upon procedures engagements appeal to CPAs because management, or 
a third-party user, specifies the procedures they want done and then the CPA issues 
a report describing the procedures agreed upon and the findings resulting from the 
procedures. Imagine the difficulty a CPA firm faces if it is asked to issue an opinion 
to a federal agency that a company complied with federal affirmative action laws 
for a two-year period under compliance attestation standards. Now assume that the 
federal agency is willing to identify 10 specific procedures the CPA firm will do to 
satisfy the agency. Obviously, the latter engagement will be much easier to manage. 
Assuming the CPA firm and federal agency can agree on the procedures, many CPA 
firms are willing to perform the procedures and issue a report of the related findings. 
Other agreed-upon procedures engagements might involve a CPA calculating internal 
rates of return and beta risk for measuring volatility for a mutual fund or gross sales 
amounts used to compute rent under a store lease for a retail firm. 


OTHER AUDITS OR LIMITED ASSURANCE ENGAGEMENTS 


Now that we have discussed compilation and review services for nonpublic compa- 
nies, as well as reviews of interim financial information for public companies, we will 
examine other types of audit and attestation services that fall within the auditing stan- 
dards but are not audits of historical financial statements in accordance with GAAP 
or IFRS. Some of these services include: audits of financial statements prepared on 
another comprehensive basis of accounting (OCBOA); audits of specified elements, 
accounts, or items; and debt compliance letters. 


Auditors often audit statements prepared on a basis other than GAAP or IFRS. 
Auditing standards apply to these audit engagements, but their reporting require- 
ments differ somewhat from those described in Chapter 3. Bases other than GAAP or 
IFRS for which reports may be issued include: 


* Cash or modified cash basis. With cash basis accounting, only cash receipts and 
disbursements are recorded. Under the modified cash basis of accounting, the 
cash basis is followed except for certain items, such as fixed assets and deprecia- 
tion. Physicians and attorneys often follow this accounting method. 

¢ Basis used to comply with the requirements of a regulatory agency. Common examples 
include the uniform system of accounts required of railroads, utilities, and some 
insurance companies. 

* Income tax basis. The same measurement rules used for filing tax returns are 
often used for financial statement preparation, even though this is not in accor- 
dance with GAAP or IFRS. Many small businesses use this method. 
Financial Reporting Framework for Small- and Medium-Sized Businesses. The AICPA 
has developed this special purpose framework for small- and medium-sized 
businesses that is a self-contained framework not based on accounting princi- 
ples generally accepted in the United States of America (GAAP). The framework 
draws upon a blend of traditional accounting principles and accrual income tax 
methods of accounting. 

° A definite set of criteria having substantial support. An example is the price-level 
basis of accounting. The method of accounting must be applied to all material 
items in the financial statements. 


Auditors usually do these audits in the same way as when clients follow GAAP or 
IFRS. Naturally, the auditor must fully understand the accounting basis that the client is 
required to follow. For example, in auditing a railroad, complex accounting requirements 
require the auditor to have specialized accounting knowledge to conduct the audit. 

When clients follow a comprehensive basis other than GAAP or IFRS, the auditor 
must make sure the statements clearly indicate that they are prepared using another 


Describe other audit and limited 
assurance engagements related 
to historical financial statements. 


Other Comprehensive 
Basis of Accounting 
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FIGURE 25-8 Example of a Report on Income Tax Basis 


Report on the 
Financial Statements 


Management’s 
Responsibility for the 
Financial Statements 


Auditor’s Responsibility 


Opinion 


Basis of Accounting 


Specified Elements, 
Accounts, or Items 


Debt Compliance 
Letters and Similar 
Reports 
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INDEPENDENT AUDITOR’S REPORT 


We have audited the accompanying financial statements of Triangle Partnership, which comprise the 
statement of assets, liabilities, and capital—income tax basis as of December 31, 2016, and the related 
statements of revenue and expenses—income tax basis and of changes in partners’ capital accounts—income 
tax basis for the year then ended, and the related notes to the financial statements. 


(same paragraph as shown in Figure 3-1 on page 48, except for the need to reference that the income tax basis of 
accounting has been used) 


(same three paragraphs as shown in Figure 3-1) 


In our opinion, the financial statements referred to above present fairly, in all material respects, the assets, 
liabilities, and capital of Triangle Partnership as of December 31, 2016, and its revenue and expenses and 
changes in partners’ capital accounts for the year then ended in accordance with the basis of accounting 
Triangle Partnership uses for income tax purposes described in Note X. 


We draw attention to Note X of the financial statements, which describes the basis of accounting. The 
financial statements are prepared on the basis of accounting the Partnership uses for income tax purposes, 
which is a basis of accounting other than accounting principles generally accepted in the United States of 
America. Our opinion is not modified with respect to this matter. 


basis of accounting. If the statements imply that GAAP is followed, the reporting 
requirements covered in Chapter 3 apply. Consequently, terms such as balance sheet and 
statement of operations must be avoided by the client. Instead, a title such as “Statement 
of assets and liabilities arising from cash transactions” is appropriate for a cash basis 
statement. Figure 25-8 illustrates those sections of a report prepared on a partnership 
following the income tax basis of accounting that differ from the auditor’s report on 
financial statements prepared in accordance with GAAP as illustrated in Figure 3-1 on 
page 48. 


Auditors are often asked to audit and issue reports on specific aspects of financial state- 
ments. A common example is a report on the audit of sales of a retail store in a shop- 
ping center to be used as a basis for rental payments. Other common examples include 
reports on royalties, profit participation, and provision for income taxes. The authority 
for auditing specified elements, accounts, or items is in the auditing standards. 

The audit of specified elements, accounts, or items is much like an ordinary audit 
of financial statements except it is applied to less than the full financial statements. 
Materiality is defined in terms of the elements, accounts, or items being audited rather 
than for the overall statements. The effect is to ordinarily require more evidence than if 
the item being verified is just one of many parts of the statements. For example, if the 
sales account is being reported on separately, a smaller misstatement will be considered 
more material than it is when sales are one of many accounts in a full financial state- 
ment audit. 

Auditors must extend their audit efforts to include other elements, accounts, or 
items that are interrelated with those that are being audited. For example, in express- 
ing an opinion on sales, the auditor must also consider the effect of accounts receivable 
on sales. 


Clients occasionally enter into loan agreements that require them to provide the 
lender with a report from a CPA about the existence or nonexistence of some condi- 
tion. For example, a bank may require a company to maintain a certain dollar amount 
of working capital at a specified date and to obtain an audit report that states whether 
the company complied with the stated working capital requirements. 

Auditors may issue reports on debt compliance and similar engagements as sepa- 
rate reports or, by adding a paragraph after the opinion paragraph, as part of a report 
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FIGURE 25-9 Example of Debt Compliance Report 


INDEPENDENT AUDITOR’S REPORT 


We have audited, in accordance with auditing standards generally accepted in the United States of America, 
the financial statements of Bollert Company, which comprise the balance sheet as of December 31, 2016, and 
the related statements of income, retained earnings, and cash flows for the year then ended, and the related 
notes to the financial statements, and have issued our report thereon dated February 16, 2017. 


In connection with our audit, nothing came to our attention that caused us to believe that the Company 
failed to comply with the terms, covenants, provisions, or conditions of sections | to IX, inclusive, of the 
Indenture dated July 21, 2014, with First Bank insofar as they relate to accounting matters. However, our 
audit was not directed primarily toward obtaining knowledge of such noncompliance. Accordingly, had we 
performed additional procedures, other matters may have come to our attention regarding the Company’s 
noncompliance with the above-referenced terms, covenants, provisions, or conditions of the Indenture, 
insofar as they relate to accounting matters. 


This report is intended solely for the information and use of the boards of directors and managements of 
Bollert Company and First Bank and is not intended to be and should not be used by anyone other than 
these specified parties. 


that expresses their opinion on the financial statements. In either case, the auditor 
must observe the following matters in such engagements: 


¢ Auditors must be qualified to evaluate whether the client has met the provisions 
in the engagement. In the audit of a debt compliance agreement, auditors are 
normally qualified to evaluate whether principal and interest payments were 
made when due; whether the proper limitations were maintained on dividends, 
working capital, and debt ratios; and whether the accounting records were ad- 
equate for conducting an ordinary audit. However, auditors are not qualified 
to determine whether the client has properly restricted its business activities 
to the requirements of an agreement or if it has title to pledged property. These 
are legal questions and the Code of Professional Conduct prohibits the auditor from 
practicing as an attorney in such circumstances. 

¢ The auditor should provide a debt compliance letter only for a client for whom 
the auditor has done an audit of the overall financial statements. A debt compli- 
ance letter on a matter such as the existence of a current ratio of 2.5 or better 
would be difficult to accomplish without having conducted a complete finan- 
cial statement audit. 

* The auditor’s opinion is a negative assurance, stating that nothing came to the audi- 
tor’s attention that would lead the auditor to believe there was noncompliance. 


Figure 25-9 provides an example of a separate report on debt compliance. Note that 
the final paragraph restricts distribution of the report to the directly affected parties. 


CONCEPT CHECK 


1. Define what is meant by attestation standards. Distinguish between attestation standards 
and auditing standards. 


2. Distinguish the three types of service organization reports. 


SUMMARY 


This chapter described many of the other assurance services offered by CPAs. The types 
of services offered continue to grow and expand as society demands assurance on new 
and different types of information. Depending on the nature of the service, the guidance 
for performing the service may come from auditing standards, accounting and review 
services standards, or attestation standards. Table 25-3 (p. 842) provides a summary and 
examples of the primary categories of services discussed in this chapter. 
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TABLE 25-3 


Type of Engagement 


Audits of historical financial statements 
prepared in accordance with accounting 
standards 


Example 


Primary Categories of Other Assurance Services Engagements 


Audit of General Mills’ financial statements 


Source of 
Authoritative Support 


Auditing standards 


Attestation engagements under the attesta- 
tion standards 


system availability 


Attestation of General Mills’ e-commerce 


Attestation standards and Trust Services 
availability principles and criteria 


Reviews or compilations of historical financial 
statements prepared in accordance with 
accounting standards 


financial statements 


Review of Ron’s Shoe Store’s quarterly 


Accounting and review services standards 
for nonpublic companies; auditing stan- 
dards for public companies 


Audits or limited assurance engagements 
other than audits, reviews, or compilations 
of historical financial statements prepared 
in accordance with accounting standards 


in inventory 


Audit of Ron’s Shoe Store’s ending balance 


Auditing standards 


ESSENTIAL TERMS 
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Agreed-upon procedures engagement— 
an engagement in which the procedures 
to be performed are agreed upon by the 
CPA, the responsible party making the as- 
sertions, and the intended users of the CPA’s 
report; the degree of assurance provided 
by the CPA will vary based on procedures 
agreed to and performed 


Attestation engagement—a type of 
assurance service in which the CPA firm is- 
sues a report about the reliability of informa- 
tion or an assertion made by another party 


Compilation service—a nonaudit engage- 
ment in which the accountant is engaged 
to assist management in the preparation of 
financial statements and issue a report to a 
client or third party without providing any 
CPA assurance about those statements 


Examination—an attest engagement that 
results in positive assurance expressed as 
an opinion as to whether or not the asser- 
tions under examination conform with the 
applicable criteria 


Forecasts—prospective financial  state- 
ments that present an entity’s expected fi- 
nancial position, results of operations, and 
cash flows for future periods, to the best of 
the responsible party’s knowledge and belief 


Preparation service—a nonattest engage- 
ment in which the accountant is engaged 
by the client to prepare or assist in prepar- 
ing financial statements, but the CPA does 
not provide any assurance on the financial 
statements or issue a report, even if the 
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financial statements are expected to be used 
by, or provided to, a third party 


Projections—prospective financial state- 
ments that present an entity’s financial posi- 
tion and results of operations and cash flows 
for future periods, to the best of the respon- 
sible party’s knowledge and belief, given one 
or more hypothetical assumptions 


Prospective financial statements— 
financial statements that deal with expected 
future data rather than with historical data 


Public company interim review— 
reviews of interim, unaudited financial in- 
formation performed to help public com- 
panies meet their reporting responsibili- 
ties to regulatory agencies 


Review—an attestation engagement that 
provides limited assurance expressed in 
the form of negative assurance as to the 
CPA’s awareness of any information indi- 
cating that the assertions are not presented 
in conformity with the applicable criteria 


Review service (SSARS review)—a review 
of unaudited financial statements designed to 
provide limited assurance that no material 
modifications need be made to the statements 
in order for them to be in conformity with 
accounting standards or, if applicable, with 
another comprehensive basis of accounting 


Service organization control (SOC) 
report—an engagement where a service 
organization’s auditor reports on internal 
controls at the service organization, with a 
type 1 report including information about 


management’s description of the service or- the CPA’s association with unaudited finan- 
ganization’s system and the suitability of the _ cial statements of nonpublic companies 


design of the organization’scontrolswhilethe statements on Standards for Attestation 
type 2 report also includes information about Engagements (SSAE)—statements issued 
the operating effectiveness of those controls by the AICPA to provide a conceptual frame- 
Statements on Standards for Account- work for various types of attestation services 
ing and Review Services (SSARS)— 
standards issued by the AICPA Accounting 
and Review Services Committee that govern 


REVIEW QUESTIONS 


25-1 (OBJECTIVE 25-1) What is meant by the term level of assurance? How does the level of as- 
surance differ for an audit of historical financial statements, a review, a compilation, and a 
preparation engagement? 


25-2 (OBJECTIVE 25-1) What is negative assurance? Why is it used in a review engagement report? 


25-3 (OBJECTIVE 25-1) Distinguish the three forms of compilation reports that a CPA can 
provide to clients. 


25-4 (OBJECTIVE 25-1) What are the similarities between review and audit of financial 
statements? 


25-5 (OBJECTIVE 25-1) What steps should auditors take if during a compilation engagement 
they become aware that the financial statements are misleading? 


25-6 (OBJECTIVE 25-1) What are the major differences between a compilation engagement 
and a preparation engagement? 


25-7 (OBJECTIVE 25-1) What should auditors do if during a review of financial statements 
they discover that applicable accounting standards are not being followed? 


25-8 (OBJECTIVES 25-1, 25-2) Why do public companies request their CPA firms to also con- 
duct interim review of financial information? 


25-9 (OBJECTIVE 25-2) What are the extra procedures conducted by the auditors of interim 
review but not by those auditors of review services under SSARS? 


25-10 (OBJECTIVE 25-3) You have been asked to provide assurance on information con- 
tained in New Dominion’s Corporate Sustainability Report. What standards would you 
use to perform this engagement? 


25-11 (OBJECTIVE 25-4) Describe the five Trust Services principles. 
25-12 (OBJECTIVE 25-4) Explain why companies require SOC1 report of their vendors. 


25-13 (OBJECTIVE 25-4) What type of report might a service organization use as a market- 
ing tool to provide potential customers information about the internal controls related to 
security at the service organization? 


25-14 (OBJECTIVE 25-4) An audit client has engaged a third-party service organization to host 
its payroll software package on servers located at the service organization. What options 
do you have to obtain assurance about the controls embedded in the payroll application? 


25-15 (OBJECTIVE 25-5) What is the major risk of prospective financial statements? Why are 
CPA firms reluctant to offer assurance services for prospective financial statements? 


25-16 (OBJECTIVE 25-7) The Absco Corporation has requested that Herb Germany, CPA, 
provide a report to the Northern State Bank as to the existence or nonexistence of certain 
loan conditions. The conditions to be reported on are the working capital ratio, divi- 
dends paid on preferred stock, aging of accounts receivable, and competence of manage- 
ment. This is Herb’s first experience with Absco. Should Herb accept this engagement? 
Substantiate your answer. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


25-17 (OBJECTIVE 25-1) The following are miscellaneous questions about compilation and 
review services. Choose the best response. 


a. A CPA is performing review services for a small, closely held manufacturing com- 
pany. As a part of the follow-up of a significant decrease in the gross margin for the 
current year, the CPA discovers that there are no supporting documents for $40,000 
of disbursements. The chief financial officer assures her that the disbursements are 
proper. What should the CPA do? 

(1) Include the unsupported disbursements without further work in the statements 
on the grounds that she is not doing an audit. 

(2) Modify the review opinion or withdraw from the engagement unless the unsup- 
ported disbursements are satisfactorily explained. 

(3) Exclude the unsupported disbursements from the statements. 

(4) Obtain a written representation from the chief financial officer that the 
disbursements are proper and should be included in the current financial 
statements. 


b. Which of the following best describes the responsibility of the CPA in performing 

compilation services for a company? 

(1) The CPA has to satisfy only himself or herself that the financial statements were 
prepared in conformity with accounting standards. 

(2) The CPA must understand the client’s business and accounting methods and 
read the financial statements for reasonableness. 

(3) The CPA should obtain an understanding of internal control and perform tests 
of controls. 

(4) The CPA is relieved of any responsibility to third parties. 


c. The standard compilation report includes which statement or phrase? 

(1) Management is responsible for the financial statements. 

(2) The accountant does not express an opinion but expresses only limited assur- 
ance on the compiled financial statements. 

(3) The objective of a compilation is to assist management in presenting financial 
information in the form of financial statements. 

(4) The accountant has compiled the financial statements in accordance with stan- 
dards established by the Auditing Standards Board. 


25-18 (OBJECTIVES 25-3, 25-4) The following questions concern attestation engagements. 
Choose the best response. 


a. A Type 1 service auditor’s report on internal controls at a service organization 

(1) includes an opinion about the suitability of the design of controls at the service 
organization. 

(2) is based on the performance of tests of controls and substantive tests of transac- 
tions at the service organization. 

(3) contains an opinion about the operating effectiveness of internal controls at the 
service organization. 

(4) provides an opinion about the fair presentation of the service organization’s fi- 
nancial statements in accordance with accounting standards. 


b. Which of the following professional services would be considered an attestation 

engagement? 

(1) Advocating on behalf of a client about trust tax matters under review by the 
Internal Revenue Service. 

(2) Providing financial analysis, planning, and capital acquisition services as a part- 
time, in-house controller. 

(3) Advising management in the selection of a computer system to meet business needs. 

(4) Preparing the income statement and balance sheet for one year in the future 
based on client expectations and predictions. 
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25-19 (OBJECTIVE 25-7) The following questions concern reports issued by auditors, other 
than those on historical financial statements. Choose the best response. 


a. An auditor is reporting on cash basis financial statements. These statements are best 
referred to in the opinion of the auditor by which of the following descriptions? 
(1) Cash receipts and disbursements and the assets and liabilities arising from cash 
transactions 
(2) Financial position and results of operations arising from cash transactions 
(3) Balance sheet and income statements resulting from cash transactions 
(4) Cash balance sheet and the source and application of funds 


b. When asked to perform an audit to express an opinion on one or more specified ele- 

ments, accounts, or items of a financial statement, the auditor 

(1) may not describe auditing procedures applied. 

(2) should advise the client that the opinion can be issued only if the financial state- 

ments have been audited and found to be fairly presented. 
) may assume that the standards of reporting with respect to GAAP do not apply. 

(4) should comply with the request only if they constitute a major portion of the finan- 
cial statements on which an auditor has disclaimed an opinion based on an audit. 


DISCUSSION QUESTIONS AND PROBLEMS 


25-20 (OBJECTIVE 25-1) Evaluate the following comments about compiled financial state- 
ments: “When CPAs associate their name with compiled financial statements, their only 
responsibility is to the client and that is limited to the proper summarization and presenta- 
tion on the financial statements of information provided by the client. The opinion clearly 
states that the auditor has not conducted an audit and does not express an opinion on this 
fair presentation. If users rely on compiled financial statements, they do so at their own risk 
and should never be able to hold the CPA responsible for inadequate performance. Users 
should interpret the financial statements as if they had been prepared by management.” 
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25-21 (OBJECTIVE 25-1) You are doing a review services and related tax work engagement 
for Murphy Construction Company. You have made extensive inquiries of management 
about their financial statements and have concluded that management has an excel- 
lent understanding of its business and is honest, but lacking in knowledge of technical 
accounting issues. In doing the review you determine the following: 


1. Repairs and maintenance expense has increased significantly compared to the pre- 
ceding year. The president states that this seems to have been a year with a lot of re- 
pairs, in part because their equipment is getting older. 

2. Property tax expense is the same as last year even though Murphy purchased a new 
building, including the land. The president states that there are no real estate taxes on 
the new building and land until next year. 

3. Based on your knowledge of the construction industry, you know that the pipes Mur- 
phy uses in construction have had a decrease in selling price to construction compa- 
nies near the end of the current year. The president states that even though they have 
a large pipe inventory, it will all be used in the next year or two, so the current price 
doesn’t matter because they won't need to buy any. 

4. Accounts receivable has increased almost 25% compared to the previous year, but the 
allowance for uncollectible accounts has stayed the same. The president states that 
even though receivables have increased, they still expect uncollectible accounts to be 
less than the stated allowance. 

5. In discussions with the president you determine that there is a material uninsured 
lawsuit against the company from a former customer. The president believes it is a 
frivolous lawsuit and will not permit a footnote about it for fear that it will result in 
similar lawsuits from other customers. 


Required a. Beyond inquiries and analytical procedures, what are the accountant’s responsibili- 
ties in performing review service engagements? 
b. Describe what you should do in each of the preceding situations, assuming each one 
is material. 


25-22 (OBJECTIVE 25-1) SSARS contain several procedures that are required when engaged 
to perform a compilation or review engagement. Below are ten statements that may or 
may not be relevant to a compilation or review engagement. For each of the ten statements, 
indicate whether the procedure is to be performed in a compilation or review engagement. 


Required for a 


Compilation Review 
Description of Procedure Engagement? Engagement? 


— 


Obtain a written engagement letter. 


Understand the client’s industry and the nature of 
the client’s business. 


Read the financial statements. 

Design and perform analytical procedures. 
Make inquiries of client management. 

Perform tests of controls. 

Assess fraud risk. 

Obtain a letter of representation from management. 
Prepare documentation in sufficient detail to pro- 
vide a clear understanding of the work performed. 
10. Issue a report that contains limited assurance about 
whether the accountant is aware of the need for 
material modification to the financial statements. 


N 


CP APNAM Sw 
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25-23 (OBJECTIVE 25-1) In this chapter you were exposed to the SSARS. Internationally the 
standards are called the International Standard on Review Engagements (ISRE). A similar 
standard is the International Standard on Review Engagements ISRE 2400: Engagements 
To Review Financial Statements (ISRE2400). 


Paragraph 3 of ISRE 2400 states that “the objective of a review of financial statements 
is to enable a practitioner to state whether, on the basis of procedures which do not provide 
all the evidence that would be required in an audit, anything has come to the practitio- 
ner’s attention that causes the practitioner to believe that the financial statements are not 
prepared, in all material respects, in accordance with the applicable financial reporting 
framework (negative assurance).” 


The auditor needs to look into the following when auditing the purchasing cycle: 


Cost of sales 


* Is cost of sales recognized in the correct accounting period? 


Payables 


Have inventory that have been received from the suppliers but not invoiced properly ac- 
crued for? Is there a proper cutoff for receiving from suppliers ? 


* Is there is a window period for suppliers to bill the company once the inventory has 
been accepted? Will the company reverse the accruals if the supplier fails to invoice 
the company within the window period? 


a. Provide other information about payables and cost of sales, besides the items listed 
above that the auditor has to obtain. 

b. Differentiate between the illustrative procedures for review services and those com- 
monly performed for audits. 

c. Who should the auditor talk to for information when auditing a small and controlled 
company? 

d. Describe the circumstances in which the procedures beyond those illustrated above 
will likely be performed. 


25-24 (OBJECTIVE 25-2) Jennifer Branson is a new staff auditor on the audit engagement of 
Greenville Light & Sound, which is a publicly traded company with a calendar year-end. 
The engagement team has completed its review of the third-quarter financial statements, 
and the firm has been asked to issue a review report on those statements. As the senior 
auditor on the engagement, you asked Jennifer to draft the firm’s report for your review. 
Here’s what she provided you: 


We have examined the accompanying balance sheet of Greenville Light & Sound as of 
September 30, 2016, and the related statement of operations for the three quarterly peri- 
ods then ended. A review includes primarily applying analytical procedures to manage- 
ment’s financial data, making inquiries of management, and testing internal controls over 
financial reporting. A review is substantially less in scope than an audit. These financial 
statements are the responsibility of the company’s management. 


We conducted our review in accordance with Statements on Standards for Accounting 
and Review Services issued by the American Institute of Certified Public Accountants. 
Those standards require us to perform procedures to obtain assurance that there are no 
misstatements in the financial statements in order to express our opinion on them. 


Based on our review, it is our opinion that the financial statements are in accordance 
with accounting standards generally accepted by the Securities and Exchange Commission 
for the quarter ended September 30, 2016. 


What changes are needed to the report draft provided by Jennifer? Required 
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Required 


Required 


Required 


25-25 (OBJECTIVE 25-3) With greater frequency, organizations are issuing sustainability 
reports that describe how they engage in socially responsible activities. Many believe that 
users will increasingly want assurances from CPAs about the reliability of the informa- 
tion presented by management in these reports. Visit the Web site for the Home Depot 
Company (www.homedepot.com) and locate the Company’s 2014 Sustainability Report. 


Read the report to answer the following: 


a. What are the key issues overseen by the company’s Sustainability Integration System? 

b. What assertions did the company make about the recycling of CFL bulbs and 
rechargeable batteries, and the water reclamation tanks? 

c. To what extent might users of the report demand more assurance about the informa- 
tion contained in the report? 

d. What challenges would CPAs face in providing assurance about information con- 
tained in this report? 


25-26 (OBJECTIVE 25-4) With the rapid growth of cloud computing, many organizations 
are contracting with third-party service providers to process and store all kinds of data 
off site. In doing so, entities are now dependent on the effectiveness of controls provided 
by external software providers and data centers that are used to generate and store a huge 
volume of important information for making critical business decisions. 


a. How might the use of an external service provider to process financial statement 
transactions affect the audit of the entity’s financial statements? 

b. What options are available to the auditor of the user entity’s financial statements to 
obtain information about the design of internal controls over financial reporting at 
the service organization? 

c. What kind of report could the auditor of the user entity obtain from the service orga- 
nization, if the user auditor needed information about the operating effectiveness of 
controls at the service organization? 

d. What type of report might the service organization provide to management of an en- 
tity that uses the service center to process quality control reports related to the user 
entity's manufacturing processes? 


25-27 (OBJECTIVE 25-5) Tau Sar Pao Pte Ltd, your audit client, is a small but successful baker 
in Singapore. Bill Kang, the founder, plans to franchise his business to potential franchisers 
in Malaysia and Indonesia and to take his company public in 5 years. The financial forecast 
is part of the information junkets that he wants to provide to potential franchisers. He plans 
to include in the junket the forecasted financial statements for the next five financial years. 
He does not plan to ask his accounts manager to prepare the forecast as he doubts the man- 
ager’s capabilities. 

Bill plans to include the forecasted sales and profits from the additional volume by 
opening franchised outlets in Malaysia and Indonesia. You are very skeptical about his 
plans in Indonesia as you are of the opinion he would not be able to manage franchisers 
opening up branches in remote areas of Indonesia such Kalimantan and Sulawesi. 

He plans to buy defunct central kitchens in Indonesia and Malaysia from an American 
fast food chain that have stopped their operations in South East Asia. This eases his entrance 
into the Indonesian and Malaysian markets. 


a. Provide circumstances which would allow you to undertake the Bill’s engagement. 

b. Why is it important that Bill understand the nature of your reporting requirements 
before the engagement proceeds? 

c. Explain what information Bill will have to provide to you before you can complete 
the forecasted statements. 

d. Discuss the nature of the report you will issue with the forecasts, assuming that you 
are able to properly complete them. 
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25-28 (OBJECTIVE 25-7) Bengston, CPA, is conducting the audit of Pollution Control Devices, 
Inc. In addition, a supplemental negative assurance report is required for a major mort- 
gage holder. The supplemental report concerns indenture agreements to keep the client 
from defaulting on the mortgage. Total assets are $14 million and the mortgage is for 
$4 million. The major provisions of the indentures are as follows: 


1. The current ratio must be maintained above 2.3 to 1. 
2. The debt/equity ratio must be maintained below 3.0. 
3. Net earnings after taxes must exceed dividends paid by at least $1 million. 


a. Write the appropriate supplemental report if all three indenture agreement provi- Required 
sions have been satisfied. 

b. How would the supplemental report change if net earnings after taxes were 
$1,010,000 and dividends paid were $60,000? 

c. Assume the same situation as in part b. and also assume that the client refuses to 
modify the financial statements or disclose the violation of the indenture agreement 
provisions on the grounds that the amount is immaterial. What is the nature of the 
appropriate auditor’s report? 

d. What is the nature of the appropriate supplemental report if all the indenture agree- 
ment provisions have been satisfied but there is a lawsuit against the company that 
has resulted in disclosure of the lawsuit in a footnote to the financial statements? 


25-29 (OBJECTIVE 25-7) Your firm has completed the audit of Clean Palm Oil Ltd. and have 
issued a standard unmodified report. As the company in producing palm oil which has 
been produced in a sustainable manner the company needs special audited report on sus- 
tainability. This is communicated to you after the audit completed as there was a sudden 
requirement from Clean Palm Oil Ltd’s customer to certify that the company is producing 
palm oil in a sustainable manner. 


a. Explain why your audit partner is unlikely to be able to issue the audit report on sus- Required 
tainability without additional audit tests or help by an expert. 

b. What are the possible issues pertaining to sustainability that Clean Palm Oil Ltd 
hopes will be included in the report? 
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CHAPTER 


LEARNING OBJECTIVES 


After studying this chapter, you should 
be able to 


26-1 Explain the role of internal 
auditors in financial auditing. 
26-2 Describe the auditing and 
reporting requirements under 
Government Auditing Standards 
and the Single Audit Act. 
26-3 Distinguish operational 


auditing from financial auditing. 


26-4 Provide an overview of 
operational audits. 

26-5 Plan and perform an 
operational audit. 


INTERNAL AND 

GOVERNMENTAL 

FINANCIAL AUDITING 
@AND OPERATIONAL 


AUDITING 


Good Auditing Often Results in Improved Cash Flows 


Sandy Previtz is an experienced internal audit staff person with Erhardt Freight Company 
(EFC), a long-haul trucking company. EFC has been growing rapidly, adding customers and ship- 
ping agents daily. Daily volume now exceeds several thousand shipments per day. To address the 
growing volume of freight bills and related receivables, EFC implemented a new, state-of-the-art 
computerized information system. 


Previtz was assigned to test the 
accuracy of the aging of the ac- 
counts receivable system and 
the adequacy of the allowance 
for doubtful accounts. She took 
an initial sample of 300 freight 
bills selected at random from a 
population of 20,000 outstand- 
ing freight bills. She used the 
sample to project an aging and 
develop an estimate of the re- 
quired allowance for doubtful 
accounts. Her tests indicated 
the allowance could be under- 
stated by as much as $1 million. 


Previtz informed Martha Harris, the head of internal audit, of the situation. Harris informed the 
chief financial officer that as long as the tests indicated there could be a material misstatement, 
EFC must expand the sample until it was clear whether the allowance was materially misstated. 


Previtz’s second sample increased the total sample to 600 items, with essentially the same 
results. However, at Harris’s request, she analyzed the items from both a management stand- 
point and an accounting standpoint. When Harris and Previtz met with the CFO to discuss the 
updated information, Harris pointed out that the real problem was not the allowance but that 
receivables were out of control, and EFC faced a significant loss in cash flows if management 
didn’t act quickly. The CFO agreed and responded by hiring a team of temporary workers to 
analyze the aging of all 20,000 freight bills and to institute a large-scale collection effort. Not 
only did the analysis and collection efforts improve cash flows, it also showed that Previtz’s 
estimate was right on target. 
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The last chapter discussed types of assurance services that external auditors provide. This chapter examines the 
activities of internal auditors and government auditors, who perform a significant amount of financial auditing 
similar to that done by external CPA firms. As Sandy Previtz of Erhardt Freight Company demonstrates in the intro- 
ductory story, internal auditors can have a significant impact on a company’s operational efficiency and effective- 


ness, as well as on earnings and cash flow. 


The concepts and methodologies studied in the preceding 25 chapters of this book apply to internal and gov- 
ernmental audits. We begin this chapter by examining the role of internal auditors in financial auditing. 


INTERNAL FINANCIAL AUDITING 


As discussed in Chapter 1, companies employ their own internal auditors to do both finan- 
cial and operational auditing. During the past two decades, the role of internal auditors has 
expanded dramatically, primarily because of the increased size and complexity of many 
corporations. Because internal auditors spend all of their time within one company, they 
have much greater knowledge about the company’s operations and internal controls than 
external auditors. That kind of knowledge can be critical to effective corporate governance. 
The New York Stock Exchange requires its registrants to have an internal audit function, 
and many other public and private companies also have an internal audit function. 

The Institute of Internal Auditors Professional Practices Framework provides the 
following definition of internal auditing: 


Internal auditing is an independent, objective assurance and consulting activity designed to add 
value and improve an organization’s operations. It helps an organization accomplish its objec- 


tives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness 
of risk management, control, and governance processes. 


This definition reflects the changing role of internal auditors. They are expected to 
provide value to the organization through improved operational effectiveness, while 
also performing traditional responsibilities, such as: 


¢ Reviewing the reliability and integrity of information 
¢ Ensuring compliance with policies and regulations 
* Safeguarding assets 


The objectives of internal auditors are considerably broader than the objectives of 
external auditors, providing flexibility for internal auditors to meet their company’s 
needs. At one company, internal auditors may focus exclusively on documenting and 
testing controls for Sarbanes—Oxley Act Section 404 requirements. At another com- 
pany, internal auditors may serve primarily as consultants, focusing on recommenda- 
tions that improve organizational performance. Not only may internal auditors focus 
on different areas, but the extent of internal auditing may vary from one company to 
another. Internal audit reports are not standardized because the reporting needs vary 
for each company and the reports are not relied on by external users. 


Professional guidance for internal auditors is provided by the Institute of Internal 
Auditors (IIA), an organization similar to the AICPA that establishes ethical and 
practice standards, provides education, and encourages professionalism for its 
approximately 180,000 worldwide members. The IIA has played a major role in the 
increasing influence of internal auditing. For example, the IIA has established a highly 
regarded certification program resulting in the designation of Certified Internal 
Auditor (CIA) for those who meet specific testing and experience requirements. 

The IIA Professional Practice Framework includes a code of ethics and IIA 
International Standards for the Professional Practice of Internal Auditing 
(known as the “Red Book”). All IIA members and Certified Internal Auditors agree to 
follow the Institute’s Code of Ethics, which requires compliance with the Standards. 
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Explain the role of internal audi- 
tors in financial auditing. 


Institute of Internal 
Auditors 
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FIGURE 26-| Institute of Internal Auditors Ethical Principles and Rules of Conduct 


ETHICAL PRINCIPLES 


Integrity The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 


Objectivity Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information 
about the activity or process being examined. Internal auditors make a balanced assessment of all the relevant circumstances 
and are not unduly influenced by their own interests or by others in forming judgments. 


Confidentiality Internal auditors respect the value and ownership of information they receive and do not disclose information without 
appropriate authority unless there is a legal or professional obligation to do so. 


Competency Internal auditors apply the knowledge, skills, and experience needed in the performance of internal auditing services. 


RULES OF CONDUCT 


I. Integrity Internal auditors: 
I.1. Shall perform their work with honesty, diligence, and responsibility. 
1.2. Shall observe the law and make disclosures expected by the law and the profession. 


1.3. Shall not knowingly be a party to any illegal activity or engage in acts that are discreditable to the profession of internal 
auditing or to the organization. 
1.4. Shall respect and contribute to the legitimate and ethical objectives of the organization. 


2. Objectvity Internal auditors: 
2.1. Shall not participate in any activity or relationship that may impair or be presumed to impair their unbiased assessment. 
This participation includes those activities or relationships that may be in conflict with the interests of the organization. 


2.2. Shall not accept anything that may impair or be presumed to impair their professional judgment. 
2.3. Shall disclose all material facts known to them that, if not disclosed, may distort the reporting of activities under review. 


3. Confidentiality Internal auditors: 
3.1. Shall be prudent in the use and protection of information acquired in the course of their duties. 
3.2. Shall not use information for any personal gain or in any manner that would be contrary to the law or detrimental to the 
legitimate and ethical objectives of the organization. 


4. Competency Internal auditors: 
4.1. Shall engage only in those services for which they have the necessary knowledge, skills, and experience. 
4.2. Shall perform internal auditing services in accordance with the International Standards for the Professional Practice of Internal 


Auditing. 


4.3. Shall continually improve their proficiency and the effectiveness and quality of their services. 


Source: The Institute of Internal Auditors’ Code of Ethics, The Institute of Internal Auditors, Inc., www.theiia.org. Reprinted by permission. 
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Relationship of Internal 
and External Auditors 


Figure 26-1 outlines the IIA Code of Ethics, which is based on the ethical principles of 
integrity, objectivity, confidentiality, and competency. 

As shown in Figure 26-2, the International Standards for the Professional Practice 
of Internal Auditing are divided into attribute standards for internal auditors and audit 
departments, and performance standards for the conduct and reporting of internal 
audit activities. 

The IIA created specific standards within each category. For example, Attribute 
Standard 1100 on Independence and Objectivity includes individual standards 
to address organizational independence (1110), individual objectivity (1120), and 
impairments to independence and objectivity (1130). 

In addition, the IIA developed specific implementation standards for assurance and 
consulting engagements. For example, Implementation Standard 1110.A1 provides guid- 
ance for applying Attribute Standard 1110 on organizational independence for assurance 
engagements, stating that the internal audit activity should be free from interference in 
determining the scope of internal auditing, performing work, and communicating results. 

You may want to compare these standards to the principles of the AICPA auditing 
standards, as detailed in Figure 2-2 on page 35, to note similarities and differences. 
Statements on Internal Auditing Standards (SIASs) are issued by the Internal 
Auditing Standards Board to provide authoritative interpretations of the standards. 


The responsibilities and conduct of audits by internal and external auditors differ in 
one important way. Internal auditors are responsible to management and the board, 
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FIGURE 26-2. International Standards for the Professional Practice of Internal Auditing 


ATTRIBUTE STANDARDS 

1000 Purpose, Authority, and Responsibility. The purpose, authority, and responsibility of the internal audit activity must be 
formally defined in an internal audit charter, consistent with the Definition of Internal Auditing, the Code of Ethics, and the Standards. 
The chief audit executive must periodically review the internal audit charter and present it to senior management and the board for 
approval. 

1100 Independence and Objectivity. The internal audit activity must be independent, and internal auditors must be objective in 
performing their work. 

1130 Impairment to Independence or Objectivity. If independence or objectivity is impaired in fact or appearance, the details of the 
impairment must be disclosed to appropriate parties. The nature of the disclosure will depend upon the impairment. 

1200 Proficiency and Due Professional Care. Engagements must be performed with proficiency and due professional care. 

1300 Quality Assurance and Improvement Program. The chief audit executive must develop and maintain a quality assurance 
and improvement program that covers all aspects of the internal audit activity. 


PERFORMANCE STANDARDS 

2000 Managing the Internal Audit Activity. The chief audit executive must effectively manage the internal audit activity to ensure it adds 
value to the organization. 

2100 Nature of Work. The internal audit activity must evaluate and contribute to the improvement of governance, risk management, and 
control processes using a systematic and disciplined approach. 

2200 Engagement Planning. Internal auditors must develop and document a plan for each engagement including the engagement’s objectives, 
scope, timing, and resource allocations. 

2300 Performing the Engagement. Internal auditors must identify, analyze, evaluate, and document sufficient information to achieve the 
engagement’s objectives. 

2400 Communicating Results. Internal auditors must communicate the results of engagements. 

2500 Monitoring Progress. The chief audit executive must establish and maintain a system to monitor the disposition of results communicated 
to management. 

2600 Communicating the Acceptance of Risks. When the chief audit executive concludes that management has accepted a level of risk 
that may be unacceptable to the organization, the chief audit executive must discuss the matter with senior management. If the chief audit 
executive determines that the matter has not been resolved, the chief audit executive must communicate the matter to the board. 


Source: From The International Standards for the Professional Practice of Auditing, Copyright © 2012 by The Institute of Internal Auditors, Inc., 247 Maitland Avenue, 
Altamonte Springs, FL 32701-4201 (www.theiia.org). Reprinted with permission. 


while external auditors are responsible to financial statement users, who rely on the 
auditor to add credibility to financial statements. Nevertheless, internal and external 
auditors share many similarities: 


* Both must be competent as auditors and remain objective in performing their 
work and reporting their results. 

* Both follow a similar methodology in performing their audits, including plan- 
ning and performing tests of controls and substantive tests. 

* Both consider risk and materiality in deciding the extent of their tests and 
evaluating results. However, their decisions about materiality and risks may differ 
because external users may have different needs than management or the board. 


External auditors rely on internal auditors when using the audit risk model to assess 
control risk. If internal auditors are effective, the external auditors can significantly 
reduce control risk and thereby reduce substantive testing. As a result, external auditors 
may reduce their fees substantially when the client has a highly regarded internal audit 
function. External auditors typically consider internal auditors effective if they: 


« Are independent of the operating units being evaluated 
« Are competent and well trained 
¢ Apply a systematic and disciplined approach, including quality control 


The independence and objectivity of the internal audit department depend on 
the organizational status of the department, for example, the reporting lines, and 
on whether the auditors can make impartial, unbiased judgments. To determine 
whether internal auditors are competent and well trained, external auditors consider 
training of the individuals in the internal audit function, such as their educational 
backgrounds and certifications. Finally, a systematic and disciplined approach refers 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance Servicch atten, DPhoidal INTHE NPAdrsQtNEOUGADONE RINE ROTA LPFA QUAI EH ek OAdBITING AND OPERATIONAL AUDITING 869 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-08-10 01:16:41. 


ROLE OF 
INTERNAL 
AUDIT IN ERM 
LEADERSHIP 


As expectations continue to grow for boards and 
senior executives to strengthen their oversight of 
risks arising across the enterprise, organizations 
are implementing enterprise risk management 
(ERM) processes to more robustly identify, assess, 
and manage all types of risks that might impact 
value for the organization. Recent research finds 
that in over 60 percent of organizations surveyed, 
the board of directors is delegating oversight of 
management’s ERM processes to the audit commit- 
tee. In about 20 percent of organizations surveyed, 
the chief internal audit executive is being tasked 
at the management level with leading the ERM 
process within those organizations. This approach 
makes sense given that audit committees and 
internal auditors already have established lines of 
reporting and internal audit standards use a risk- 
based approach to auditing. 

While assigning responsibilities for ERM 
leadership to internal audit may make sense, it 
does create challenges that might impair internal 
audit’s independence and objectivity from the 
ERM process. If internal audit assumes too much 
responsibility for the management of risks, it 
jeopardizes its ability to provide independent 
assurance to the audit committee about the 
effectiveness of ERM processes at the 
management level. 

The Institute of Internal Auditors’ Position 
Paper, “The Role of Internal Auditing in 


|. Core Internal Audit Roles in Regards to ERM 


e Giving assurance on the risk management 
processes 
Giving assurance on whether risks are cor 
rectly evaluated 

e Evaluating the reporting of key risks 

e Reviewing the management of key risks 


. Legitimate Internal Audit Roles with Safeguards 
Needed 


e Facilitating the identification and evaluation 
of risks 
Coaching management in responding to 
risks 
Coordinating ERM activities 
Consolidating reporting of risks 
Maintaining and developing the ERM frame- 
work 
Championing the establishment of ERM 
Developing the ERM strategy for board 
approval 


. Roles Internal Audit Should Not Undertake 


Setting the risk appetite 
Imposing risk management processes 
Management assurance on risks 
Taking decisions on risk responses 
Implementing risk responses on manage- 
ment’s behalf 

e Accountability for risk management 


Enterprise-wide Risk Management,” highlights 
various ERM-related activities along a spectrum 
ranging from those appropriate for internal audit 
to perform to those deemed not appropriate. 
The Position Paper categorizes various 
ERM-related tasks into three categories 

as follows: 


Sources: |. Mark Beasley, Bruce Branson, and Bonnie Hancock, 
“Report on the Current State of Enterprise Risk Oversight: 
Update on Trends and Opportunities,’ AICPA and NC State 
University, February 2015 (www.erm.ncsu.edu); 2. “IIA 
Position Paper: The Role of Internal Auditing in Enterprise- 
wide Risk Management,” The Institute of Internal Auditors, 
January 2009 (www.theiia.org). 


to how the internal audit department plans and performs their engagements and 
reports outcomes. For example, conducting their audits in accordance with the IIA 
International Standards for the Professional Practice of Internal Auditing as outlined 
in Figure 26-2 (p. 853) would be considered a systematic and disciplined approach. 

Auditing standards permit the external auditor to use the internal auditor for direct 
assistance on the audit. By relying on the internal audit staff for performing some of the 
audit testing, external auditors may be able to complete the audit in less time and at a 
lower fee. When internal auditors provide direct assistance, the external auditor should 
assess their competence and objectivity and supervise and evaluate their work. 


GOVERNMENTAL FINANCIAL AUDITING 


OBJECTIVE 26-200 Federal and state governments employ their own auditing staffs to perform audits in 
much the same way as internal auditors. Chapter 1 briefly discussed the United States 


Government Accountability Office (GAO). All states have their own audit agencies, 
similar to but smaller than the GAO. In addition, CPA firms do considerable financial 
auditing of governmental units. For example, some states require that all city and 
school district financial statements be audited by CPA firms. 

The primary source of authoritative literature for doing government audits is 
Government Auditing Standards, which is issued by the GAO. Because of the color 
of the cover, it is usually referred to as the “Yellow Book” rather than by its more 


Describe the auditing and 
reporting requirements under 
Government Auditing Standards 
and the Single Audit Act. 
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formal name. The initial Yellow Book standards were similar to the GAAS standards 
but have been expanded in subsequent revisions to provide guidance standards for 
performance audits. These standards are often called generally accepted government 
auditing standards (GAGAS). 

Financial auditing under the Yellow Book includes several categories of infor- 
mation to audit, including financial statements of governmental units, government 
contracts and grants, internal control, fraud, and other noncompliance with laws and 
regulations. Because governmental units are as concerned with compliance with laws 
and regulations as they are with the reliability of financial statements, these categories 
of information are broader than audits under auditing standards and encompass the 
types of attestation work outlined in Table 25-1 on page 808. 


The financial auditing standards of the Yellow Book are consistent with the principles 
of the AICPA auditing standards, and also contain extensive additional guidance, 
including the following additions and modifications: 


* Materiality and significance. The Yellow Book recognizes that in government au- 
dits the thresholds of acceptable audit risk and materiality may be lower than in 
an audit of a commercial enterprise. This is because of the sensitivity of govern- 
ment activities and their public accountability. 

* Quality control. CPA firms and other organizations that audit government enti- 
ties in compliance with the Yellow Book must have an appropriate system of 
internal quality control and participate in an external quality control review 
program. The latter requirement exists for some CPAs, but only as a require- 
ment for membership in the AICPA, and for the audit of public companies. 

Auditors involved in planning, performing, or reporting on audits under 
GAGAS must complete 80 hours of continuing professional education in each 
two-year period. At least 24 of these 80 hours of training must be in subjects 
related to the government environment and government auditing. 

* Compliance auditing. The audit should be designed to provide reasonable assur- 
ance of detecting material misstatements resulting from noncompliance with 
provisions of contracts or grant agreements that have a material and direct 
effect on the financial statements. 

* Reporting. The audit report must state that the audit was made in accordance 
with generally accepted government auditing standards (GAGAS). In addition, 
the report on financial statements must describe the scope of the auditors’ tests 
of compliance with laws and regulations and internal controls and present the 
results of those tests or refer to a separate report that includes the information. 


Financial Audit 
and Reporting 
Requirements— 
Yellow Book 


$54 MILLION 
EMBEZZLED FROM 
DIXON, IL, CITY 
GOVERNMENT 
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The small town of Dixon, Illinois, had a modest annual 
budget, yet City Treasurer Rita Crundwell embezzled 
a total of $54 million from the small town over a 
period of 22 years. The story in Dixon reads like 
many others where employees take advantage of the 
trust placed in them to divert funds for their personal 
use. In this case, Crundwell used the money to fund 
a lavish lifestyle and equestrian habit. At the time the 
fraud was detected, she owned approximately 400 
horses and had won several national championships. 
The fraud began when Crundwell opened up 
a bank account, presumably on behalf of the city 
of Dixon, although she was the only authorized 
check-signer on the account. She then diverted 
city funds to this account by creating over 180 fake 
invoices, and writing and signing the checks from 
the account to fund her lifestyle. In 2013, the bank 


, Déoidal INGER NPAdr se NEOUGADONE Rin tE BOTA LPFAQLASI Eck Sad BITING AND OPERATIONAL AUDITING 


http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=51 85606. 


Created from undip-ebooks on 2021-08-10 01:16:41. 


and the external auditors for the city settled law- 
suits filed against them for a total of $40 million. 
Crundwell, sentenced to 19 years in prison, has 
helped authorities recover the remainder of the 
money by selling her personal assets. The details of 
the case suggest the auditors should have detected 
the fake invoices. In addition, the external audit firm 
prepared Crundwell’s personal taxes, which should 
have alerted them to the fact that she was living 
well beyond the means of her $80,000 annual salary. 
The city officials, bank officials, and external audi- 
tors all share blame in allowing such a massive fraud 
to continue for decades without being detected. 


Source: Melissa Jenco, “Dixon Blames Phony Invoices, Lax 
Auditors for $54M Fraud,” Chicago Tribune, September 27, 
2013 (www.chicagotribune.com). 


871 


Audit and Reporting 
Requirements—Single 
Audit Act and OMB 
Circular A-133 


AICPA Guidance 
for Auditors 
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The Single Audit Act of 1984 provides for a single coordinated audit to meet the 
audit requirements of all federal agencies. Entities that receive more than $750,000 
in federal funds are subject to a single audit even if more than one agency provided 
funds. The Single Audit Act applied only to audits of state and local governments, 
but it was extended in 1990 to higher-education institutions and other not-for-profit 
organizations by the Office of Management and Budget (OMB) through the issuance 
of OMB Circular A-133, Audits of States, Local Governments, and Non-Profit Organizations. 
The guidance contained in OMB Circular A-133 is now incorporated into the Code of 
Federal Regulations in Section 200 (2 CFR part 200 subpart F). 


Audit Requirements The Single Audit Act as amended and OMB Circular A-133/2 
CFR 200 subpart F (hereafter referred to collectively as the Act) contain requirements 
for the scope of the audit, including: 


¢ The audit should be in accordance with GAGAS. 

¢ The auditor must obtain an understanding of internal control over federal pro- 
grams sufficient to support a low assessed level of control risk for major programs. 

¢ The auditor should determine whether the client has complied with laws, regu- 
lations, and the provisions of contracts or grant agreements that may have a 
direct and material effect on each of its major programs. 


The OMB regularly provides a Compliance Supplement that contains the relevant guid- 
ance in one source to help auditors understand the federal program’s audit objectives, pro- 
cedures, and compliance requirements, along with suggested audit procedures that should 
be considered in every audit. In addition, it lists specific requirements for individual federal 
programs. The following are examples of specific compliance objectives: 


¢ Whether the amounts reported as expenditures were for allowable services. 

¢ Whether the records show that those who received services or benefits were 
eligible to receive them. 

¢ Whether matching requirements (where the government unit matches federal 
funds), levels of effort, and earmarking limitations were met. 


Reporting Requirements The following reports are required under OMB Circular 
A-133/2 CFR 200 subpart F: 


¢ An opinion on whether the financial statements are presented fairly in all mate- 
rial respects in accordance with GAAP. 

¢ An opinion as to whether the schedule of federal awards is presented fairly in all 
material respects in relation to the financial statements as a whole. 

¢ A report on internal control related to the financial statements and major 
programs. 

¢ A report on compliance with laws, regulations, and the provisions of contracts or 
grant agreements, where noncompliance could have a material effect on the finan- 
cial statements. This report can be combined with the report on internal control. 

« A schedule of findings and questioned costs. 


Auditors doing government auditing often find it complex. The auditor must be famil- 
iar with both auditing standards and a series of government audit documents, laws, and 
regulations. Thus, the first step in preparing for such an engagement is extensive pro- 
fessional development. Two relevant resources are the AICPA audit guide, Government 
Auditing Standards and Single Audits, and the auditing standard, Compliance Audits. 


CONCEPT CHECK 
1. Explain the role of internal auditors for financial auditing. How is it similar to and differ- 
ent from the role of external auditors? 


2. Explain how governmental financial auditing is similar to and different from audits of 
commercial companies. Who does governmental auditing? 
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OPERATIONAL AUDITING 


Beyond financial auditing activities, internal auditors, government auditors, and CPAs also 
do operational auditing, which deals with efficiency and effectiveness of an organization. 
Other auditors use the terms management auditing or performance auditing instead of operational 
auditing to refer to these activities, while others do not distinguish among the terms perfor- 
mance auditing, management auditing, and operational auditing and use them interchangeably. 

We prefer to use operational auditing broadly, as long as the purpose of the test is to 
determine the effectiveness or efficiency of any part of an organization. Testing the effec- 
tiveness of internal controls by an internal auditor may therefore be considered part of 
operational auditing—if the purpose is to help an organization operate its business more 
effectively or efficiently. Similarly, determining whether a company has adequately trained 
assembly line personnel may also be operational auditing, if the purpose is to determine 
whether the company is effectively and efficiently producing products. 


The three major differences between operational and financial auditing are the pur- 
pose of the audit, distribution of the report, and inclusion of nonfinancial areas in 
operational auditing. 


Differences Between 
Operational and 


Financial Auditing 
Purpose of the Audit This is the most important difference. Financial auditing 


emphasizes whether historical information was correctly recorded, while operational ‘OBJECTIVE 26-3 
auditing emphasizes effectiveness and efficiency. Financial auditing is oriented to the _pjgtinguish operational auditing 
past, while operational auditing focuses on improving future performance. An opera- _ from financial auditing. 

tional auditor, for example, may evaluate whether a type of new material is being pur- 

chased at the lowest cost to save money on future raw material purchases. 


Distribution of the Reports Financial auditing reports are typically distributed to 
external users of financial statements, such as stockholders and bankers, while opera- 
tional audit reports are intended primarily for management. The widespread distribu- 
tion of financial auditing reports requires a well-defined structure and wording, as 
shown in Figure 3-1 on page 48. The limited distribution of operational reports and 
the diverse nature of audits for efficiency and effectiveness allow operational audit 
reports to vary considerably from audit to audit. 


Inclusion of Nonfinancial Areas Financial audits are limited to matters that directly affect 
the fairness of financial statement presentation, while operational audits cover any aspect 
of efficiency and effectiveness in an organization. For example, an operational audit might 
address the effectiveness of an advertising program or efficiency of factory employees. 


Before an operational audit can be performed, auditors must define specific criteria 
for measuring effectiveness and efficiency. In general, effectiveness refers to meeting 
objectives, such as producing parts without defects. Efficiency refers to determining 


the resources used to achieve those objectives, such as determining whether parts are OBJECTIVE 26-40 


produced at minimum cost. 


Effectiveness Versus 
Efficiency 


Provide an overview of 


Effectiveness In an operational audit for effectiveness, an auditor, for example, might gp erational audits. 


need to assess whether a governmental agency has met its assigned objective of achiev- 
ing elevator safety in a city. To determine the agency’s effectiveness, the auditor must 
establish specific criteria for elevator safety. For example, is the agency’s objective to 
inspect all elevators in the city at least once a year? Is the objective to ensure that no 
fatalities occurred as a result of elevator breakdowns, or that no breakdowns occurred? 


Efficiency Like effectiveness, there must be defined criteria for what is meant by 
doing things more efficiently before operational auditing can be meaningful. It is 
often easier to set efficiency than effectiveness criteria if efficiency is defined as 
reducing cost without reducing effectiveness. For example, if two different production 
processes manufacture a product of identical quality, the process with the lower cost 
is considered more efficient. Operational auditing commonly uncovers several types 
of typical inefficiencies, including: 
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Relationship Between 
Operational Auditing 
and Internal Controls 
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Types of Operational 
Audits 


Types of Inefficiency Example 


* Acquisition of goods and services is * Bids for purchases of materials are not 
excessively costly. required. 
¢ Raw materials are not available for * An entire assembly line must be shut 
production when needed. down because necessary materials were 
not ordered. 
* There is duplication of effort by * Identical production records are kept 
employees. by both the accounting and production 


departments because they are unaware 
of each other’s activities. 

* Work is done that serves no purpose. * Copies of vendors’ invoices and receiving 
reports are sent to the production de- 
partment, where they are filed without 
ever being used. 

¢ There are too many employees. * The office work could be done effectively 
with one less administrative assistant. 


Management establishes internal controls to help meet its goals. As we discussed in 
Chapter 11, effective internal controls are designed and implemented to help organi- 
zations achieve these objectives: 


1. Reliability of reporting 
2. Efficiency and effectiveness of operations 
3. Compliance with applicable laws and regulations 


Obviously, the second of these three objectives directly relates to operational auditing, 
but the other two also affect efficiency and effectiveness. For example, management 
needs reliable cost accounting information to decide which products to continue pro- 
ducing and the billing price of products. Similarly, failure to comply with a law, such 
as the Sarbanes—Oxley Act, can result in a large fine to the company. 

Two things distinguish internal control evaluation and testing for financial and 
operational auditing: purpose and scope. 


Purpose The purpose of operational auditing of internal control is to evaluate effi- 
ciency and effectiveness and to make recommendations to management. In contrast, 
internal control evaluation for financial auditing has two primary purposes: to deter- 
mine the extent of substantive audit testing required and, when applicable, to report 
on the effectiveness of internal control over financial reporting. 

For both financial and operational auditing, the auditors may evaluate the control 
procedures in the same way, but for different purposes. An operational auditor might 
test whether internal verification procedures for duplicate sales invoices are effective to 
ensure that the company does not offend customers, but also to collect all receivables. 
A financial auditor often does the same internal control tests, but the primary purpose 
is to reduce confirmation of accounts receivable or other substantive tests. (A second- 
ary purpose of many financial audits is also to make operational recommendations to 
management.) 


Scope The scope of operational auditing concerns any control affecting efficiency 
or effectiveness, while the scope of internal control evaluation for financial audits is 
restricted to the effectiveness of internal control over financial reporting and its effect 
on the fair presentation of financial statements. For example, an operational audit can 
focus on policies and procedures established in the marketing department to deter- 
mine the effectiveness of catalogs in marketing products. 


Operational audits fall into three broad categories: functional, organizational, and 
special assignments. In each case, part of the audit is likely to concern evaluating 
internal controls for efficiency and effectiveness. 
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Functional Audits Functions are a means of categorizing the activities of a business, 
such as the billing function or production function. Functions may be categorized 
and subdivided many different ways. For example, the accounting function may be 
subdivided into cash disbursement, cash receipt, and payroll disbursement func- 
tions. The payroll function may be subdivided into hiring, timekeeping, and payroll 
disbursement functions. A functional audit deals with one or more functions in an 
organization, concerning, for example, the efficiency and effectiveness of the payroll 
function for a division or for the company as a whole. 

A functional audit has the advantage of permitting specialization by auditors. 
Certain auditors within an internal audit staff can develop considerable expertise in 
an area, such as production engineering. They can be more efficient and effective by 
spending all their time auditing in that area. A disadvantage of functional auditing is 
the failure to evaluate interrelated functions. For example, the production engineering 
function interacts with manufacturing and other functions in an organization. 


Organizational Audits An operational audit of an organization deals with an entire 
organizational unit, such as a department, branch, or subsidiary. An organizational 
audit emphasizes how efficiently and effectively functions interact. The plan of orga- 
nization and the methods to coordinate activities are important in this type of audit. 


Special Assignments In operational auditing, special assignments arise at the 
request of management for a wide variety of audits, such as determining the cause of 
an ineffective IT system, investigating the possibility of fraud in a division, and mak- 
ing recommendations for reducing the cost of a manufactured product. 


Operational audits are usually performed by one of three groups: internal auditors, 
government auditors, or CPA firms. 


Internal Auditors Internal auditors are in such a unique position to perform opera- 
tional audits that some people use the terms internal auditing and operational auditing 
interchangeably. It is, however, inappropriate to conclude that all operational audit- 
ing is done by internal auditors or that internal auditors do only operational auditing. 
Many internal audit departments do both operational and financial auditing, often 
simultaneously. Because they spend all their time working for the company they are 
auditing, internal auditors have an advantage in doing operational audits. They can 
develop considerable knowledge about the company and its business, which is essen- 
tial to effective operational auditing. 

To maximize their effectiveness for both financial and operational auditing, 
the internal audit department should report to the board of directors or president. 
Internal auditors should also have access to and ongoing communications with the 
audit committee of the board of directors. This organizational structure helps internal 
auditors remain independent. If internal auditors report to the controller, it is difficult 
for them to do independent evaluations and make recommendations to senior man- 
agement about inefficiencies in the controller’s operations. 


Government Auditors Different federal and state government auditors perform 
operational auditing, often as a part of doing financial audits. As already discussed, 
the most widely recognized government auditor group is the GAO, but many state 
government auditors are also concerned with financial and operational audits. 

The Yellow Book defines and sets standards for performance audits, which 
are essentially the same as operational audits. Performance audits include the 
following: 


° Economy and efficiency audits. The purpose of an economy and efficiency audit 
is to determine: 
1. Whether the entity is acquiring, protecting, and using its resources economi- 
cally and efficiently 
2. The causes of inefficiencies or uneconomical practices 
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3. Whether the entity has complied with laws and regulations concerning mat- 

ters of economy and efficiency 
* Program audits. The purpose of a program audit is to determine: 

1. The extent to which the desired results or benefits established by the legisla- 
ture or other authorizing body are being achieved 

2. The effectiveness of organizations, programs, activities, or functions 

3. Whether the entity has complied with laws and regulations applicable to the 
program 


The first two objectives of each of these types of performance audits are clearly opera- 
tional in nature, while the final objective concerns compliance. 

To illustrate specific operational activities of a state governmental audit, the 2014 
Operational Audit report for the City of Hampton, Florida, disclosed 31 key findings in 
the Executive Summary. Here are three of those findings: 


* The city was not able to account for a high rate of water usage, with 46 percent 
of water pumped unaccounted for, most likely due to leaking pipes, faulty me- 
ters, and unmetered users. As a result, the city is unable to ensure whether the 
appropriate amount of water is being billed. 

* The city has not established policies and procedures regarding the assignment 
of vehicles to employees for 24-hour use. Employees assigned vehicles on a 24- 
hour basis were not required to maintain usage logs, restricting the ability to 
determine the extent of personal use of those vehicles. 

¢ The city did not use the adopted budget to control expenditures and the City 
Council was not provided budget-to-actual comparison reports. The lack of 
timely budget data resulted in the Council not having information necessary to 
gain an understanding of the city’s financial status. 


CPA Firms When a CPA firm does an audit of historical financial statements, part of 
the audit often consists of identifying operational problems and making recommen- 
dations that may benefit the audit client. The recommendations can be made orally, 
but they are typically included in a management letter. (For coverage of management 
letters, see page 787 in Chapter 24.) 

The background knowledge about a client’s business, which an external audi- 
tor must obtain while doing an audit, often provides useful information for giving 
operational recommendations. For example, suppose that the auditor determined 
that inventory turnover for a client slowed considerably during the current year. The 
auditor should determine the cause of the slower turnover to evaluate the possibility 
of obsolete inventory that would misstate the financial statements. In determining the 
cause of the reduced inventory turnover, the auditor may identify operational causes, 
such as ineffective inventory acquisition policies, that can be brought to the attention 
of management. An auditor who has a broad business background and experience 
with similar businesses is more likely to be effective at providing clients with relevant 
operational recommendations than a person who lacks those qualities. 

A client commonly engages a CPA firm to do operational auditing for one or 
more specific parts of its business. For example, a company can ask the CPA firm to 
evaluate the efficiency and effectiveness of its computer systems. Usually, manage- 
ment engages the CPA firm for these audits only when the company does not have an 
internal audit staff or if the internal audit staff lacks expertise in a certain area. In some 
cases, management or the board of directors outsources the entire internal audit func- 
tion to a CPA firm or co-sources select internal audit activities, such as IT operational 
auditing activities, to be done jointly by a CPA firm and certain members of the com- 
pany’s internal audit staff. In most cases, the CPA firm’s management consulting staff 


'Based on the City of Hamilton Operational Audit Report (Report No. 2014-100), issued by the State of Florida Auditor 
General, David W. Martin (February 2014). 
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performs these services. Note that CPA firms cannot provide these services to their 
public company audit clients. 


The two most important qualities for an operational auditor are independence and com- 
petence. The auditor should report to the appropriate level of management to ensure 
that investigation and recommendations are made without bias. Independence is sel- 
dom a problem for CPA firm auditors because they are not employed by the company 
being audited. The independence of internal auditors is enhanced by having the inter- 
nal audit department report to the board of directors or president. Similarly, govern- 
ment auditors should report to a level above the operating departments. The GAO, for 
example, reports directly to Congress as a means of enhancing independence. 

The responsibilities of operational auditors can also affect their independence. 
The auditor should not be responsible for operating functions in a company or for 
correcting deficiencies when ineffective or inefficient operations are found. For exam- 
ple, it would negatively affect auditors’ independence when they audit an IT system for 
acquisitions if they designed the system or are responsible for correcting deficiencies 
they found during the audit. 

While it is acceptable for auditors to recommend changes in operations, operat- 
ing personnel must have the authority to accept or reject those recommendations. If 
auditors had the authority to require implementation of their recommendations, their 
independence would be reduced. 

Competence is, of course, necessary to determine the cause of operational prob- 
lems and to make appropriate recommendations. When operational auditing deals 
with wide-ranging operating problems, however, competence can be a major obsta- 
cle. For example, imagine the difficulties of finding qualified internal auditors who 
can evaluate both the effectiveness of an advertising program and the efficiency of a 
production assembly process. The internal audit staff doing that type of operational 
auditing will presumably have to include some personnel with backgrounds in mar- 
keting and others in production. 


A major challenge of operational auditing is in selecting specific criteria for evaluating 
whether efficiency and effectiveness have occurred. In auditing historical financial state- 
ments, accounting standards provide the broad criteria for evaluating fair presentation, 
and audit objectives facilitate more specific criteria in deciding whether those standards 
have been followed. In operational auditing, there are no well-defined criteria. 

To establish criteria for operational auditing, auditors could define the objectives 
as determining whether some aspect of the entity could be made more effective or 
efficient, and recommending improvements. This approach may be adequate for expe- 
rienced and well-trained auditors, but it provides little guidance for most auditors. 


Specific Criteria More specific criteria are usually desirable before starting an 
operational audit. For example, suppose that you are doing an operational audit of the 
equipment layout in plants for a company. Here are some specific criteria, stated as 
questions, that might be used to evaluate plant layouts: 


¢ Were all plant layouts approved by home office engineering at the time of origi- 
nal design? 

* Has home office engineering done a reevaluation study of plant layout in the 
past five years? 

* Is each piece of equipment operating at 60 percent of capacity or more for at 
least three months each year? 

* Does layout facilitate the movement of new materials to the production floor? 

* Does layout facilitate the production of finished goods? 

* Does layout facilitate the movement of finished goods to distribution centers? 

* Does the plant layout effectively use existing equipment? 

* Is the safety of employees endangered by the plant layout? 


Created from undip-ebooks on 2021-08-10 01:16:41. 


Independence and 
Competence of 


Operational Auditors 


Criteria for Evaluating 


Efficiency and 
Effectiveness 


Plan and perform an operational 


audit. 


, Déoidal INGER NPAdr se NEOUGADONE Rin tE BOTA LPFAQLASIEHOok Sad BITING AND OPERATIONAL AUDITING 877 


Phases in Operational 
Auditing 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Sources of Criteria To develop specific evaluation criteria, the operational auditor 
can use several sources, including: 


* Historical performance. Criteria can be based on actual results from prior periods. 
By using these criteria, auditors can determine whether things have become 
“better” or “worse” in comparison. The advantage of this approach is that the 
criteria are easy to derive. However, they may not provide much insight into 
how good or bad the results are compared to what they could be. 

Benchmarking. Entities within or outside the client’s organization may be suf- 
ficiently similar to the client’s organization to use their operating results as cri- 
teria. Auditors should use care in selecting organizations to use as benchmarks. 
It makes little sense to benchmark with dissimilar organizations or those that 
perform at a substandard level. For internal comparable entities, the data are 
often readily available to use as criteria. Outside organizations are often will- 
ing to make their operating information available. Also, benchmarking data are 
often available through industry groups and governmental regulatory agencies. 
Engineered standards. It may be possible in some engagements to develop criteria 
based on engineered standards. For example, auditors can use time and motion 
studies to determine efficient production output rates. These criteria are often 
time-consuming and costly to develop because they require considerable exper- 
tise, but in some cases it may be worth the cost. Standards can be developed by 
industry groups for use by all their members, thereby spreading the cost. 
Discussion and agreement. Sometimes objective criteria are difficult or costly to 
obtain and are best developed through discussion and agreement. The parties 
involved should include management of the entity to be audited, the opera- 
tional auditor, and the entity or persons to whom the findings will be reported. 


The three phases in an operational audit are planning, evidence accumulation and 
evaluation, and reporting and follow-up. 


Planning Planning for operational audits is similar to the planning for audits of his- 
torical financial statements that we’ve discussed in earlier chapters. Like auditors of 
financial statements, the operational auditor must determine the scope of the engage- 
ment and communicate it to the organizational unit. It is also necessary to: 


¢ Staff the engagement properly 

¢ Obtain background information about the organizational unit 
¢ Understand internal control 

* Decide on the appropriate evidence to accumulate 


The major difference between planning an operational audit and a financial audit 
is the diversity created by the breadth of operational audits, which often makes it dif- 
ficult to decide on specific objectives. Auditors select objectives based on the criteria 
developed for the engagement, depending on the specific circumstances at hand. For 
example, the objectives for an operational audit of the effectiveness of internal con- 
trols over payroll will be dramatically different from those of an operational audit of 
the efficiency of a research and development department. Yet, these diverse objectives 
might be part of a single operational audit. 

The breadth of operational audits often makes staffing more complicated than in 
a financial audit. Not only are the areas diverse, such as production control and adver- 
tising, but the objectives within those areas often require special technical skills. For 
example, the auditor may need an engineering background to evaluate performance 
on a major construction project. 

Finally, unlike financial audits, operational audits require auditors to spend more 
time with the interested parties agreeing on the terms of the engagement and the cri- 
teria for evaluation. Regardless of the source of the criteria for evaluation, it is essen- 
tial that representatives of the entity to be audited, the operational auditor, and the 
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entity or persons to whom the findings will be reported are clear and in agreement on 
the objectives and criteria involved. 


Evidence Accumulation and Evaluation The eight types of evidence—physical 
examination, confirmation, inspection, analytical procedures, client inquiry, recal- 
culation, reperformance, and observation—introduced in Chapter 7 and discussed 
throughout this book are equally applicable to operational auditing. Because internal 
controls and operating procedures are critical parts of operational auditing, it is com- 
mon to use inspection, client inquiry, analytical procedures, and observation exten- 
sively. Confirmation, reperformance, and recalculation are used less extensively for 
most operational audits than for financial audits because the existence and accuracy 
objectives are not relevant for most operational audits. 

To illustrate evidence accumulation in operational auditing, consider an example 
of an agency evaluating the safety of elevators in a city. Assume the parties agree 
that the objective is to determine whether a competent inspector makes an annual 
inspection of each elevator in the city. To satisfy the completeness objective, auditors 
might examine blueprints of city buildings and elevator locations and trace them to 
the agency’s list to ensure that all elevators are included in the population. Additional 
tests on newly constructed buildings will be appropriate to assess the timeliness with 
which the central listing is updated. 

Assuming auditors determine that the agency’s list is complete, they can select 
a sample of elevator locations and collect evidence as to the timing and frequency of 
inspections. The auditor may want to consider inherent risk by doing greater sampling 
of older elevators or elevators with previous safety defects. The auditor may also want 
to examine evidence of the elevator inspectors’ competence by reviewing resumes, 
training programs, competency examinations, and performance reports. It is also 
likely that the auditor will want to reperform the inspection procedures for a sample 
of elevators to obtain evidence of inconsistencies in reported and actual conditions. 

Just like financial auditors, operational auditors must accumulate sufficient 
appropriate evidence to provide a basis for a conclusion about the objectives being 
tested. For an audit of elevator safety, the auditor must accumulate sufficient evidence 
about elevator safety inspections. After the evidence is accumulated, the auditor must 
decide whether it is reasonable to conclude that an inspection is made annually of 
each elevator in the city by a competent inspector. 


Reporting and Follow-Up Two major differences in operational and financial audit- 
ing reports affect operational auditing reports: 


1. In operational audits, the report is usually sent only to management, with a copy 
to the unit being audited. The lack of third-party users reduces the need for stan- 
dardized wording in operational auditing reports. 

2. The diversity of operational audits requires a tailoring of each report to address 
the scope of the audit, findings, and recommendations. 


Operational auditors often take a significant amount of time to clearly com- 
municate audit findings and recommendations. On performance audits, when 
reports are being prepared following Yellow Book requirements, specified content 
must be included, but considerable freedom is permitted in the form of the report. 
Follow-up is common in operational auditing when auditors make inquiries of 
management to determine whether the recommended changes were made, and if 
not, why not. 


CONCEPT CHECK 


1. Identify the three major differences between financial and operational auditing. 


2. Explain what is meant by the criteria for evaluating efficiency and effectiveness. Provide 
five possible specific criteria for evaluating effectiveness of an IT system for payroll. 
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Governments and governmental agencies often undergo operational audits to exam- 
ine the efficiency and effectiveness of programs. For example, the Auditor of State of 
Ohio—Ohio Performance Team—Annual Report dated March 30, 2015, provides examples 
of cost savings resulting from their operational audits. For example, the operational 
audit of the Ohio Department of Natural Resources resulted in recommendations 
with projected cost savings of over $12 million in areas such as capital investment 
management and fishing license pricing. The audit of the Ohio Department of Job and 
Family Services yielded recommendations resulting in savings of over $45 million by 
implementing changes in staffing ratios, greater use of electronic portals, and other 
suggested changes. Recommendations for the Department of Transportation include 
“right-sizing” various vehicle fleets and closing rest areas near viable alternatives. The 
annual report suggests that overall, the Ohio Performance Team has saved taxpayers 
$37 for every dollar spent on the operational audits of the agencies audited to date. 


SUMMARY 


This chapter discussed the financial auditing activities of internal auditors and the effect of 
internal auditors on external audits. We also discussed government auditors and the audit- 
ing and reporting requirements under Government Auditing Standards. Increasingly, internal 
auditors and government auditors, as well as CPA firms, are also asked to perform opera- 
tional audits of the efficiency or effectiveness of a company or government unit. In these 
engagements, the appropriate criteria for evaluating efficiency or effectiveness is essential. 


ESSENTIAL TERMS 


Economy and efficiency audit—a gov- 
ernment audit to determine whether an 
entity is acquiring, protecting, and using its 
resources economically and efficiently; the 
causes of any inefficiencies or uneconomical 
practices; and whether the entity has com- 
plied with laws and regulations concerning 
matters of economy and efficiency 


Effectiveness—the degree to which the 
organization’s objectives are accomplished 


Efficiency—the degree to which costs are 
reduced without reducing effectiveness 


Functional audit—an operational audit 
that deals with one or more specific func- 
tions within an organization, such as the 
payroll function or the production engi- 
neering function 

Government Auditing Standards (GAGAS)— 
see Yellow Book 

Government audits—financial or opera- 
tional audits of government agencies or 
government-funded institutions 


Institute of Internal Auditors (I[A)— 
organization for internal auditors that 
establishes ethical and practice standards, 
provides education, and encourages pro- 
fessionalism for its members 
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International Standards for the Profes- 
sional Practice of Internal Auditing— 
guidelines issued by the Institute of Inter- 
nal Auditors covering the attributes and 
performance of internal auditors 


Operational auditing—the review of an 
organization for efficiency and effective- 
ness. The terms management auditing, per- 
formance auditing, and operational auditing are 
often synonymous terms 


Organizational audit—an operational 
audit that deals with an entire organiza- 
tional unit, such as a department, branch, 
or subsidiary, to determine how efficiently 
and effectively functions interact 


Program audit—a government audit to 
determine the extent to which the desired 
results or benefits established by the legis- 
lature or other authorizing body are being 
achieved; the effectiveness of organizations, 
programs, activities, or functions; and 
whether the entity has complied with laws 
and regulations applicable to the program 


Single Audit Act—federal legislation that 
provides for a single coordinated audit to 
satisfy the audit requirements of all federal 
funding agencies 


Special assignments—management re- 
quests for an operational audit for a specific 
purpose, such as investigating the possibility 
of fraud in a division or making recommen- 
dations for reducing the cost of a manufac- 
tured product 


Statements on Internal Auditing Stan- 
dards (SIASs)—statements issued by the 


Internal Auditing Standards Board of the 
IIA to provide authoritative interpretations 
of the IIA Practice Standards 


Yellow Book—a publication of the GAO 
that is widely used as a reference by gov- 
ernment auditors and CPAs who do gov- 
ernmental audit work; the official title is 
Government Auditing Standards 


REVIEW QUESTIONS 


26-1 (OBJECTIVE 26-1) What is the nature of the two categories of standards in the IIA 
International Standards for the Professional Practice of Internal Auditing? 


26-2 (OBJECTIVE 26-1) Explain the difference between the independence of internal audi- 
tors and external auditors in the audit of historical financial statements. How can internal 
auditors best achieve independence? 


26-3 (OBJECTIVE 26-2) Explain what is meant by the Single Audit Act. What is its purpose? 


26-4 (OBJECTIVE 26-2) In what ways is the Yellow Book consistent with the principles in 
AICPA auditing standards, and what are some additions and modifications? 


26-5 (OBJECTIVE 26-2) Identify the primary specific objectives that must be incorporated 
into the design of audit tests under the Single Audit Act. 


26-6 (OBJECTIVE 26-2) Identify the key required reports of the Single Audit Act and OMB 
Circular A-133. 


26-7 (OBJECTIVE 26-3) Describe what is meant by an operational audit. 


26-8 (OBJECTIVE 26-4) Distinguish between efficiency and effectiveness in operational 
audits. State one example of an operational audit examining efficiency and another exam- 
ining effectiveness. 


26-9 (OBJECTIVE 26-4) Distinguish among the following types of operational audits: functional, 
organizational, and special assignment. State an example of each for a not-for-profit hospital. 


26-10 (OBJECTIVE 26-4) Explain why many people think of internal auditors as the primary 
group responsible for conducting operational audits. 


26-11 (OBJECTIVE 26-4) Explain the role of government auditors in operational auditing. 
How is this similar to and different from the role of internal auditors? 


26-12 (OBJECTIVE 26-4) Under what circumstances are external auditors likely to be involved 
in operational auditing? Give one example of operational auditing by a CPA firm. 


26-13 (OBJECTIVE 26-5) Identify the three phases of an operational audit. 


26-14 (OBJECTIVE 26-5) Explain how planning for operational auditing is similar to and dif- 
ferent from financial auditing. 


26-15 (OBJECTIVE 26-5) What are the major differences between reporting for operational 
and financial auditing? 


MULTIPLE CHOICE QUESTIONS FROM CPA, CIA, 
AND CMA EXAMINATIONS 


26-16 (OBJECTIVE 26-1) The following questions deal with internal auditing. Choose the best 
response. 
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a. The independence of the internal audit department will most likely be assured if it 
reports to the 
(1) president. 
(2) controller. 


(3) audit committee of the board of directors. 
(4) vice president of finance. 
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b. In assessing the competence of internal auditors, an independent CPA most likely 
would obtain information about the 
(1) influence of management on the scope of the internal auditors’ duties. 
(2) policies limiting internal auditors from communicating with the audit committee. 
(3) quality of the internal auditors’ working paper documentation. 
(4) entity’s ability to continue as a going concern. 


c. Which of the following is generally considered to be a major reason for establishing 

an internal auditing function? 

(1) To relieve overburdened management of the responsibility for establishing effec- 
tive systems of internal control 

(2) To ensure that operating activities comply with the policies, plans, and proce- 
dures established by management 

(3) To ensure the accuracy, reliability, and timeliness of financial and operating data 
used in management’s decision making 

(4) To evaluate and improve the effectiveness of control processes 


26-17 (OBJECTIVE 26-2) The following questions deal with governmental auditing. Choose 
the best response. 


a. Although the scope of audits of recipients of federal financial assistance in accor- 
dance with federal audit regulations varies, these audits generally have which of the 
following elements in common? 


(1) The auditor is to determine whether the financial assistance has been adminis- 
tered in accordance with applicable laws and regulations. 

(2) The materiality levels are lower and are determined by the governmental entities 
that provided the federal financial assistance to the recipient. 

(3) The auditor should obtain written management representations that the recipi- 
ent’s internal auditors will report their findings objectively and without fear of 
political repercussions. 

(4) The auditor is required to express both positive and negative assurance that il- 
legal acts that could have a material effect on the recipient’s financial statements 
are disclosed to the inspector general. 


b. A governmental audit may extend beyond an examination leading to the expression 
of an opinion on the fairness of financial statement presentation to include 


Program Economy 
Results Compliance and Efficiency 
(1) Yes Yes No 
(2) Yes Yes Yes 
(3) No Yes Yes 
(4) Yes No Yes 


c. Ward is auditing an entity's compliance with requirements governing a major federal 
financial assistance program in accordance with the Single Audit Act. Ward detected 
noncompliance with requirements that have a material effect on the program. Ward's 
report on compliance should express 
(1) no assurance on the compliance tests. 

(2) reasonable assurance on the compliance tests. 

(3) a qualified or adverse opinion. 

(4) an adverse opinion or a disclaimer of opinion. 

26-18 (OBJECTIVES 26-3, 26-4, 26-5) The following questions deal with operational auditing. 

Choose the best response. 

a. Which of the following best describes the operational audit? 
(1) It requires constant review by internal auditors of the administrative controls as 
they relate to the operations of the company. 
(2) It concentrates on implementing financial and accounting controls in a newly 
organized company. 
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(3) It attempts and is designed to verify the fair presentation of a company’s results 
of operations. 

(4) It concentrates on seeking aspects of operations in which waste would be 
reduced by the introduction of controls. 


b. The purpose of governmental effectiveness or program auditing is to determine if the 
desired results of a program are being achieved. The first step in conducting such an 
audit is to 
(1) evaluate the system used to measure results. 

(2) determine the time frame to be audited. 
(3) collect quantifiable data on the program’s success or failure. 
(4) identify the legislative intent of the program being audited. 


c. A means of limiting production delays caused by equipment breakdown and repair 
is to 
(1) schedule production based on capacity planning. 
(2) plan maintenance activity based on an analysis of equipment repair work orders. 
(3) pre-authorize equipment maintenance and overtime pay. 
(4) establish a preventive maintenance program for all production equipment. 
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Required 


DISCUSSION QUESTIONS AND PROBLEMS 


26-19 (OBJECTIVES 26-1, 26-4) Lajod Company has an internal audit department consisting of 
a manager and three staff auditors. The manager of internal audit, in turn, reports to the 
corporate controller. Copies of audit reports are routinely sent to the audit committee of 
the board of directors as well as to the corporate controller and the individual responsible 
for the area or activity being audited. 

The manager of internal audit is aware that the external auditors have relied on the 
internal audit function to a substantial degree in the past. However, recently the external 
auditors have suggested there may be a problem related to the objectivity of the internal 
audit function. This objectivity problem may result in more extensive testing and analysis 
by the external auditors. 

The external auditors are concerned about the amount of nonaudit work performed 
by the internal audit department. The percentage of nonaudit work performed by the 
internal auditors in recent years has increased to about 25% of their total hours worked. 
A sample of five recent nonaudit activities are as follows: 


1. One of the internal auditors assisted in the preparation of policy statements on in- 
ternal control. These statements included such things as policies regarding sensitive 
payments and standards of control for internal controls. 

2. The bank statements of the corporation are reconciled each month asa regular assign- 
ment for one of the internal auditors. The corporate controller believes this strength- 
ens internal controls because the internal auditor is not involved in the receipt and 
disbursement of cash. 

3. The internal auditors are asked to review the budget data in every area each year for 
relevance and reasonableness before the budget is approved. In addition, an internal 
auditor examines the variances each month, along with the associated explanations. 
These variance analyses are prepared by the corporate controller’s staff after consul- 
tation with the individuals involved. 

4. One of the internal auditors has recently been involved in the design, installation, and 
initial operation of a new computer system. The auditor was primarily concerned 
with the design and implementation of internal accounting controls and the com- 
puter application controls for the new system. The auditor also conducted the testing 
of the controls during the test runs. 

5. The internal auditors are often asked to make accounting entries for complex transac- 
tions before the transactions are recorded. The employees in the accounting depart- 
ment are not adequately trained to handle such transactions. In addition, this serves as 
a means of maintaining internal control over complex transactions. The manager of 
internal audit has always made an effort to remain independent of the corporate con- 
troller’s office and believes that the internal auditors are objective and independent in 
their audit and nonaudit activities. 


a. Define objectivity as it relates to the internal audit function. 

b. For each of the five situations outlined, explain whether the objectivity of Lajod 
Company’s internal audit department has been materially impaired. Consider each 
situation independently. 

c. The manager of internal audit reports to the corporate controller. 

(1) Does this reporting relationship result in a problem of objectivity? Explain your answer. 

(2) Would your answer to any of the five situations in requirement b. have changed 
if the manager of internal audit reported to the audit committee of the board of 
directors? Explain your answer.* 


*Based on CMA question paper. 
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26-20 (OBJECTIVE 26-1) The Institute of Internal Auditors (IIA) is an international professional imi, 
association of more than 180,000 members, with global headquarters in Altamonte Springs,  (@)B? 
Florida. Throughout the world, the IIA is recognized as the internal audit profession’sleader  #~*” 
in certification, education, research, and technical guidance. Visit the IIA Web site (www 
theiia.org) to answer questions about the IIA and certification of internal auditors. 


a. Why should an organization have an internal auditing department? (Hint: Click on Required 
the “About Us” link and review the information under the “About the Profession” 
link.) 
b. Visit the link for “Certifications” and identify the six steps to receiving a certification 
in internal auditing as a Certified Internal Auditor (CIA). 
c. What certifications are available to internal auditors? 
d. What are the three parts of the CIA exam? How are the requirements for passing the 
CIA exam similar to and different from those of the CPA exam? 


26-21 (OBJECTIVE 26-2) Like in the United States, many countries in the world have legisla- 
ture similar to the Single Audit Act, 1984. In Malaysia, it is the Audit Act 1957 and in the 
United Kingdom, The National Audit Act 1983. Why are such legislature needed? 


26-22 (OBJECTIVES 26-4, 26-5) Haskin Company was founded 40 years ago and now has sev- 
eral manufacturing plants in the Northeast and Midwest. The evaluation of proposed cap- 
ital expenditures became increasingly difficult for management as the company became 
geographically dispersed and diversified its product line. Thus, the Capital Budgeting 
Group was organized in 2015 to review all capital expenditure proposals in excess of 
$100,000. 

The Capital Budgeting Group conducts its annual planning and budget meeting each 
September for the upcoming calendar year. The group establishes a minimum return for 
investments (hurdle rate) and estimates a target level of capital expenditures for the next 
year based on the expected available funds. The group then reviews the capital expendi- 
ture proposals that have been submitted by the various operating segments. Proposals that 
meet either the return on investment criterion or a critical need criterion are approved to 
the extent of available funds. 

The Capital Budgeting Group also meets monthly, as necessary, to consider any proj- 
ects of a critical nature that were not expected or requested in the annual budget review. 
These monthly meetings allow the Capital Budgeting Group to make adjustments during 
the year as new developments occur. 

Haskin’s profits have been decreasing slightly for the past two years despite a small but 
steady sales growth, a sales growth that is expected to continue through 2017. As a result 
of the profit stagnation, top management is emphasizing cost control and all aspects of 
Haskin’s operations are being reviewed for cost reduction opportunities. 


Copyright © 2016. Pearson Education, Limited. All rights reserved. 


Arens, Alvin, et al. Auditing and Assurance Servicchaprrek, Péoidal TIER NPAdrs& NEOUGADONE RINE ROTA LPIQLANIEH Ak Pad BITING AND OPERATIONAL AUDITING 
http://ebookcentral.proquest.com/lib/undip-ebooks/detail.action?docID=5185606. 
Created from undip-ebooks on 2021-08-10 01:16:41. 


Required 


Haskin’s internal audit department has become involved in the companywide cost re- 
duction effort. The department has already identified several areas where cost reductions 
could be realized and has made recommendations to implement the necessary procedures 
to effect the cost savings. Tom Watson, internal audit director, is now focusing on the ac- 
tivities of the Capital Budgeting Group in an attempt to determine the efficiency and effec- 
tiveness of the capital budgeting process. 

In an attempt to gain a better understanding of the capital budgeting process, Watson 
decided to examine the history of one capital project in detail. A capital expenditure pro- 
posal of Haskin’s Burlington Plant that was approved by the Capital Budgeting Group in 
2016 was selected randomly from a population of all proposals approved by the group at 
its 2015 and 2016 annual planning and budget meetings. 

The Burlington proposal consisted of a request for five new machines to replace equip- 
ment that was 20 years old and for which preventive maintenance had become expensive. 
Four of the machines were for replacement purposes, and the fifth was for planned growth 
in demand. Each of the four replacement machines was expected to result in annual main- 
tenance cost savings of $20,000. The fifth machine was exactly like the other four and was 
expected to generate an annual contribution of $30,000 through increased output. Each 
machine had a cost of $110,000 and an estimated useful life of eight years. 


a. Identify and discuss the issues that Haskin Company’s internal audit department 
must address in its examination and evaluation of Burlington Plant’s 2016 capital 
expenditure project. 

b. Recommend procedures to be used by Haskin’s internal audit department in the au- 
dit review of Burlington Plant’s 2016 capital expenditure project.* 


26-23 (OBJECTIVES 26-4, 26-5) Lecimore Company has a centralized purchasing department that 
is managed by Meg Shen. Shen has established policies and procedures to guide the clerical 
staff and purchasing agents in the day-to-day operation of the department. She is satisfied 
that these policies and procedures are in conformity with company objectives and believes 
there are no major problems in the regular operations of the purchasing department. 

Lecimore’s internal audit department was assigned to perform an operational audit of 
the purchasing function. Their first task was to review the specific policies and procedures 
established by Shen. The policies and procedures are as follows: 


¢ All significant purchases are made on a competitive bid basis. The probability of 
timely delivery, reliability of vendor, and so forth, are taken into consideration on a 
subjective basis. 

* Detailed specifications of the minimum acceptable quality for all goods purchased 
are provided to vendors. 

¢ Vendors’ adherence to the quality specifications is the responsibility of the materials 
manager of the inventory control department and not the purchasing department. 
The materials manager inspects the goods as they arrive to be sure that the quality 
meets the minimum standards and then sees that the goods are transferred from the 
receiving dock to the storeroom. 

¢ All purchase requests are prepared by the materials manager based on the produc- 
tion schedule for a four-month period. 


The internal audit staff then observed the operations of the purchasing function and 
gathered the following findings: 


* One vendor provides 90% of a critical raw material. This vendor has a good delivery 
record and is reliable. Furthermore, this vendor has been the low bidder over the 
past few years. 

* As production plans change, rush and expedite orders are made by production di- 
rectly to the purchasing department. Materials ordered for cancelled production 
runs are stored for future use. The costs of these special requests are borne by the 
purchasing department. Shen considers the additional costs associated with these 
special requests as “costs of being a good member of the corporate team.” 


*Based on CMA question paper. 
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* Materials to accomplish engineering changes are ordered by the purchasing depart- 
ment as soon as the changes are made by the engineering department. Shen is proud 
of the quick response by the purchasing staff to product changes. Materials on hand 
are not reviewed before any orders are placed. 

¢ Partial shipments and advance shipments (that is, those received before the requested 
date of delivery) are accepted by the materials manager, who notifies the purchasing 
department of the receipt. The purchasing department is responsible for follow-up on 
partial shipments. No action is taken to discourage advance shipments. 


Based on the purchasing department’s policies and procedures and the findings of Required 
Lecimore’s internal audit staff: 
a. Identify deficiencies and/or inefficiencies in Lecimore Company’s purchasing 
function. 
b. Make recommendations for those deficiencies/inefficiencies that you identify.* 


Use the following format in preparing your response: 


Deficiencies/Inefficiencies Recommendations 


1. 1. 


26-24 (OBJECTIVES 26-4, 26-5) Superior Co. manufactures automobile parts for sale to the 
major U.S. automakers. Superior’s internal audit staff is to review the internal con- 
trols over machinery and equipment and make recommendations for improvements 
when appropriate. The internal auditors obtained the following information during the 
assignment: 


* Requests for purchase of machinery and equipment are normally initiated by the 
supervisor in need of the asset. The supervisor discusses the proposed acquisition 
with the plant manager. A purchase requisition is submitted to the purchasing de- 
partment when the plant manager is satisfied that the request is reasonable and that 
there is a remaining balance in the plant’s share of the total corporate budget for 
capital acquisitions. 

¢ Upon receiving a purchase requisition for machinery or equipment, the purchas- 
ing department manager looks through the records for an appropriate supplier. A 
formal purchase order is then completed and mailed. When the machine or equip- 
ment is received, it is immediately sent to the user department for installation. This 
allows the economic benefits from the acquisition to be realized at the earliest 
possible date. 

* The property, plant, and equipment ledger control accounts are supported by com- 
puterized depreciation lapse schedules organized by year of acquisition. These lapse 
schedules are used to compute depreciation as a unit for all assets of a given type 
that are acquired in the same year. Standard rates, depreciation methods, and salvage 
values are used for each major type of fixed assets. These rates, methods, and salvage 
values were set 10 years ago during the company’s initial year of operation. 

¢ When machinery or equipment is retired, the plant manager notifies the account- 
ing department so that the appropriate entries can be made in the accounting 
records. 

¢ There has been no reconciliation since the company began operations between the 
accounting records and the machinery and equipment on hand. 


Identify the internal control deficiencies and recommend improvements that the internal Required 
audit staff of Superior Co. should include in its report regarding the internal controls over 
fixed assets. Use the following format in preparing your answer:* 


Deficiencies Recommendations 


L. 1. 
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NOTE: Essential Terms appear in Boldface 


A 


Absence of causal connection, 146 
Acceptable audit risk, 262, 312-315, 584 
assessment of, 315t 
Acceptable risk 
of incorrect acceptance (ARIA), 608-609, 617 
of incorrect rejection (ARIR), 627 
of overreliance (ARO), 534-535 
specification of ARIA and ARIR, 627, 628-629 
Accountability, 382 
Accounting, 30 
comprehensive basis of, 855-856 
by CPA firms, 50 
distinguishing between auditing and, 30 
principles 
departure from, 80-81 
shopping for, 119-120 
Accounting system, walkthroughs of, 411 
Accounts payable 
designing tests of details of balances for, 656-663, 657f 
fraud risks, 357-358 
master file, 648 
risk of material misstatement, 656-657 
tests of details of balances, 656-663 
trial balance, 648 
Accounts receivable 
agreement with master file and general ledger, 
571-572 
auditing standards requirements, 577-578 
balance-related audit objectives, 566, 568f 
balances and transactions, 181f 
classification and, 573 
completing tests in, 564-603 
confirmation of, 577-583 
designing tests of details of balances for, 462f, 
463-464, 565-571, 565f 
fraud risks, 353-357 
inclusion of existing, 572-573 
lapping of, 506-508 
master file, 491 
population and, 607t, 616t 
risk of material misstatement, 566-567 
tests of details of balances audit program for, 466t 
trial balance, 491 
Accrued bonuses, 714 
Accrued commissions, 714 
Accrued interest, notes payable and, 760-761f 
Accrued liabilities, audit of, 688-689 
Accrued payroll expenses, 713 
Accrued payroll taxes, 714 
Accrued salaries and wages, 713-714 
Accrued vacation pay, sick pay, or other benefits, 714 
Accumulated depreciation, ending balance 
verification, 684-685 
Accuracy 
accounts receivable, 573 
as balance-related audit objective, 187 
recording of acquisitions, 653 
as transaction-related audit objective, 183t 
transaction-related audit objectives transaction 
file, 185 
ACL, 361, 429 
Acquisition and payment cycle 
accounts and classes of transactions in, 645-646 
accounts in, 645f 
audit of 
accrued liabilities, 688-689 


income and expense accounts, 689-693 
prepaid expenses, 685-687 
property, plant, and equipment, 677-685 
business functions in, 646-649 
misappropriations in, 358 
other account types in, 677 
tests of, 741-742 
tests of controls and substantive tests of 
transactions, 649-656, 650f, 691 
transactions and accounts associated with, 677t 
Acquisitions journal or listing, 648 
Adequate documents and records, 385, 495, 709 
Adjusted trial balance, 178f 
Adjusting entries, 243 
Adjustment to revenues, manipulation of, 355 
Adverse opinion, 83, 89, 422 
Advertising and solicitation rule, 125 
Aged trial balance, 571-572, 572f 
Agreed-upon procedures engagements, 850, 
854-855 
AICPA Clarity Projects, 57-58, 841, 849 
Allocation 
of expenditures, tests for, 691-693 
of preliminary judgment about materiality, 
279-281 
Alternative procedures, 582 
American Institute of Certified Public Accountants 
(AICPA), 40, 55-56 
Code of Professional Conduct, 109, 109t, 111t 
peer review program, 63, 463 
Professional ethics executive committee, 55 
American Institute of Certified Public 
Accountants (AICPA) 
auditing standards, 56 
guidance for auditors, 872 
principles underlying an audit, 59f 
Analysis of differences, 582-583 
Analysis of exceptions, 539, 541f 
Analytical procedures, 185-192, 228-229, 
232-236, 305, 679, 690, 712 
for accounts payable, 658 
for accounts receivable, 463, 569-571 
for acquisition and payment cycle, 658t 
appropriateness of types of evidence, 230-231 
during the audit engagement, 233 
cash receipts, 782 
common financial ratios, 236-239 
compare client data with similar prior-period data, 
234-235 
examples of planning, 272t 
final, 817 
financial instruments, 794 
for income and expense accounts, 690t 
inquiries of the client, 229 
for inventory and warehousing, 734-735, 734t 
for notes payable, 758-759, 759t 
for payroll and personnel cycle, 712-716, 713t 
preliminary, 271-274 
provide evidence supporting an account balance, 229 
relation to substantive tests, 452 
signaling of revenue frauds by, 355-356 
substantive, 191, 452-453, 461-462 
types of, 233 
Annual report, example of, 205-217 
balance sheet, 212 
company description, 206 
five-year financial summary, 217 
letter to shareholders, 205 
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management discussion and analysis, 216 
management responsibility for financial 
statement, 211 
notes to financial statements, 215 
report of accounting firm, 210 
statement of cash flows, 214 
statement of operations, 213 
statement of stockholders’ equity, 213 
Annual reports, information included in, 821 
Application controls, 389, 393-395 
automated controls, 393 
categories of, 390t 
general controls and, 389f 
input controls, 393-394 
processing controls, 394, 394t 
Application service providers (ASPs), 396 
Appropriateness of evidence, 222-224 
of types of evidence, 230-231, 230t 
Assertions. see Management Assertions 
Assessment inquiry, 359-363 
Assessment of control risk, 412 
related tests and, 712 
Asset custody, separation from other functions, 384, 650 
Assets 
and costs, transfer of, 729 
fixed, and fraud risk, 358 
misappropriation of, 170 
and records, physical control over, 386 
Association of Certified Fraud Examiners (ACFE), 37 
Assurance engagements, limited, 855-857 
Assurance services, 32—36, 35t, 839-858, 849 
attestation services, 33-34 
engagements, 858t 
nonassurance services, 35—36 
Attestation engagements, 847-850 
agreed-upon procedures, 850, 854-855 
examination, 849 
Attestation services, 33-35 
Attorneys, clients’, inquiry of, 811-813, 812f 
Attributes, 528 
and exception conditions, 531 
sampling, 543-551, 551f, 654-655 
Audit 
in acquisition and payment cycle, 644-664 
of capital stock and paid-in capital, 764 
communicate with audit committee and 
management, 472-473, 825-827 
completing, 806-836 
cycle approach to segmenting of, 177-180 
evaluate results, 821-825, 825f 
evidence. see Evidence 
final evidence accumulation, 472, 817-821 
of financial statements, 37-38, 167 
of historical financial statements, 33 
of internal control over financial reporting, 33 
in inventory and warehousing cycle, 730f 
objectives of, 166-202 
purpose, 167 
quality around the world, 62 
requirements, 872 
responsibilities and objectives, 166-202 
review for 
contingent liabilities and commitments, 808-813 
subsequent events, 813-816 
scope limitation, 82 
subsequent discovery of facts, 827-828, 828f 
types of, 36-37, 36f 
Audit assurance, 312, 457f 
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Audit committee, 118-119 
communicate with, 542-543, 825-827 
other communication with, 826 
oversight, 350-351 
participation in control environment, 381-382 
Audit documentation, 239-246 
preparation of, 244f, 246 
Audit failure, 140-141 
Audit file contents and organization, 241f 
Audit firm rotation in the European Union, 120f 
Auditing 
definition, 28 
distinguishing between accounting and, 30 
economic demand for, 30-32 
internal financial, 867-870 
in IT environments, 426-427 
nature of, 28-29 
operational, 873-880 
profession, response to legal liability, 155-156 
relation of U.S. and International standards, 57f 
reporting and, 29 
through the computer, 426 
Auditing procedures for finding contingencies, 
809 
Auditing Standards Board (ASB), 55-58 
Audit objectives, 166-202, 468 
balance-related, 181, 187-189, 189t, 466 
identifying, 414 
meeting, 190-192 


presentation and disclosure-related, 181, 189, 


189t, 466 
setting, 181-182 
steps to develop, 167f 
transaction-related, 185-186, 186t, 466 
Auditors, 38-39 

clients and, 32f 
decision process for audit reports, 90-92 
defenses against 

client suits, 144-146, 153f, 

third-party suits, 146-148, 147t, 151, 153f 
direct knowledge of, 223 
discovery of material misstatements, 169, 170 
evaluation of manaagement’s integrity, 314-315 
external users and, 32f 
independent, 28, 29 
legal liability, sources of, 142, 144f, 153t 
listening techniques, 360 
operational, 877 
opinion of, and supporting evidence, 822 
relationship of internal and external, 868-870 
reports involving other auditors, 81 
responsibilities, 169 

material vs immaterial misstatements, 169 


responsibilities for reporting on internal control, 


379 
restricted scope, 87-88 
utilization of monetary unit sampling, 622-623 
Audit plan development, 469 
evidence mix, 458-459 
selection of tests, 454-457 
types of tests, 449-454 
Audit planning, 261-262 
audit risk model for, 309 
key parts of, 261f, 284f 
materiality and, 260-299 


understanding client's business and industry, 309f 


Audit procedures, 460-461, 611 
design and performance, 503 
evidence decisions and, 221 
for finding commitments, 811 
performance of, 538 
terms used in, 231-232, 232t 

Audit process 


and financial statement cycles, 176-181, 177f, 179t, 


180f 
phases of, 190-192, 467 
summary of, 469-473, 470f 
Audit program, 222, 242 
design format, 503 


design of, 459-467 

evidence decisions and, 222 

illustrative, 466, 467t 

performance format, 503 

tests of details development, 583-586 
Audit report, 29, 70-101 

auditor’s decision process for, 90-91 

categories of, 75f 

conditions requiring departure, 85-90, 91t 

defined, 29 


international accounting and auditing standards, 


92-93 
international developments related to, 92 
issuance of, 188, 472-473, 825 
Section 404 reporting on internal control, 422, 
423-424 


separate report on internal control over financial 


reporting, 77f 
unmodified 
emphasis-of-matter paragraph, 78-81 
with explanatory paragraph or modified 
wording, 78-79 
nonstandard report wording, 78-79 
Audit risks, 302-303 
acceptable, 313-315 
assessing, 313-315 
audit failure vs., 140-141 
model, 309-313, 309f, 3108, 450f 
for segments, 318-319 
Audit sampling, 523, 530-531 
summary of steps, 545f 
terms used in, 529t 
for tests of controls and substantive tests of 
transactions, 522-563 
for tests of details of balances, 606-644 
Audit software, 361, 428, 429t 
Audit strategy, 264-265 
Audit tests 
expanded in specific areas, 613-614 
general cash in the bank and, 788f 
integration of, for inventory, 741-743, 742f 
IT effect on testing, 426-430 
of prepaid insurance, 686-688 
substantive tests of transactions. see Substantive 
tests of transactions 
tests of controls. see Tests of controls 
for uncollectible accounts, 508 
Authorization 
proper, 495, 709 
of purchases, 649 


Backup and contingency planning, 392-393 
Bad debt expense, 576 
Balance-related audit objectives, 181, 186-189, 
189t, 466, 468t, 566, 585t, 660t, 680t, 738t, 
7AOt, 762t, 784t, 795t 
Bank confirmation 
receipt, 784-786 
standard form, 784, 785f 
Bank reconciliation, 781-782, 783f 
tests of, 786-789 
Basic precision, 619 
Batch input controls, 394t 
Behavioral cues during inquiry, 360-361 
Benford’s Law, 37 
Bills not paid after year-end, 660 
Blank confirmation form, 578 
Block sample selection, 527—528 
Board of directors, participation in control 
environment, 381-382 
Bonuses, accrued, 714 
Bookkeeping services 
by CPA firms, 50 
Branch bank accounts, 777-779 
Breach of contract, 143t 
Budgets, 235 
Business failure, 140-141 
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Capital acquisition and repayment cycle, 756 
accounts in, 756-757 
notes payable, 757-761 
Capital stock 
audit of, 764 
certificate record, 763 
Cash accounts 
audit of, 776-804 
fraud-oriented procedures, 788-792 
imprest petty cash fund, 778 
types of, 777-779 
Cash disbursements, 648-649, 655t 
designing tests of controls and substantive tests of 
transactions for, 654 
processing and recording of, 648-649 
transaction file, 648-649 
Cash equivalents, 778 
Cash in the bank, and transaction cycles, 779-780, 
779f 
Cash receipts 
cutoff, 575 
designing tests of controls and substantive tests of 
transactions for, 504-508 
journal or listing, 492 
prelisting of, 491-492 
processing and recording of, 491-492 
proof of, 504-506 
subsequent, 582 
transaction file, 492 
Cenco Incorporated v. Seidman & Seidman (1982) Liability 
to clients, 144f 
Center for Audit Quality, 53, 64 
Certified Public Accountants. see CPAs 
Chart of accounts, 386 
Check, 648 
Civil liability under federal securities laws, 144f, 148-154 
Clarity Project, 57, 58, 841, 849 
Classification 
acquisitions, 653 
as balance-related audit objective, 187-188 
prepaid insurance-related expense, 687—688 
of recorded sales, 501 
as transaction-related audit objective, 183t, 
185-186, 185t 
Client business risk, 262 
affecting 
accounts payable, 656-657 
cash, 781 
financial instruments, 793 
payroll, 712 
Clients 
acceptance of, 262-266 
attorneys of, inquiry of, 811-813, 812f 
and CPA firms, litigation between, 116-117 
data comparisons of, as analytic procedures, 
233-236 
investigation of new, 263 
liability to, 145f 
objectives and strategies, 270-271 
personnel, inquiries of, 411 
rights to 
accounts receivable, 576-577 
all insurance policies, 687 
suits by, auditor defenses against, 144-146 
Client’s business and industry, understanding of, 228, 
266-270, 267f 
Client’s internal controls 
effectiveness of, 223 
Closely held corporation, 761 
Cloud computing environments, 396 
Code of Professional Conduct, 55, 59, 61, 109-110, 112 
AICPA, 109t 
American Institute of Certified Public Accountants 
(AICPA), 55, 109 
classification system, 126-127 
threats to compliance with rules under, 111t 
Codification of Auditing Standards, 58, 61 
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Collusion, 377 
Combined report on financial statements and 
internal control over financial 
reporting, 76 
Commissions 
accrued, 714 
rules of conduct and, 124-125 
Commitments, 809 
Committee of Sponsoring Organizations of the 
Treadway Commission. see COSO 
Common financial ratios, 236-239 
Common law, 143t 
Comparability, vs. consistency of financial statements, 
79-80 
Compensating control, 415 
Competence 
commitment to, 382 
of operational auditor, 877 
Compilation 
omission of disclosures in, 845f 
Compilation services, 844-846 
Completeness 
as balance-related audit objective, 187 
existing acquisitions and, 653 
as transaction-related audit objective, 185 
Completing the audit checklist, 822, 822f 
Complex transactions, 317 
Compliance audit, 37 
Computed upper exception rate (CUER), 529 
Computer-generated random numbers, 525-526, 526f 
Confidence factor, 618, 618t, 620t 
Confidence limits, calculation of, 630-631t 
Confidentiality, 122-123 
of audit files, 240 
need for, 122 
rules of conduct and, 122-123 
Confirmation, 226 
accounts payable, 660-661 
of accounts receivable, 577-583 
as audit evidence, 226, 227t 
bank, 784, 785f 
of code of conduct compliance, 349 
Consistency, explanatory paragraph for, 79-80 
Consulting services, 118f 
Content and Skill Specifications for the Uniform CPA 
Examination, 40 
Contingent fees rule, 123-124 
Contingent liabilities, 786 
review for, 808-813, 809f 
Contract labor, 715 
Contributory negligence, 145-146 
Control activities, 383-387 
adequate documents and records, 385 
adequate separation of duties, 384 
independent checks on performance, 386-387 
physical control over assets and records, 386 
proper authorization of transactions, 384-385 
Control deficiency, 414-417 
Control environment, 380-383 
control activities, 383-387 
information and communication, 387 
monitoring, 387-388 
risk assessment, 382-383 
Control risk, 311-312, 585 
acceptable risk of overreliance (ARO), 534-535 
assessment of, 408f, 411-417, 412, 420t, 431f, 542, 
649-651, 712, 781-782, 793-794 
matrix, 412, 413f, 414, 506f 
for payroll and personnel cycle, 707 
planned 
acquisitions, 649-651 
sales, 493-495 
for sales and collection cycle, 567-568 
Controls 
over classes of transactions, 379 
over reliability of financial reporting, 378-379 
related audit objectives and, 414 
Corporate governance oversight, to reduce fraud 
risks, 347-351 
Corporate minutes, 270 


Corporate Social Responsibility (CSR), 27 
Corporations 
closely held, 761 
general, of CPA firms, 51 
professional, 51 
publicly held, 761 
Correspondence 
with attorneys, 816 
with clients, 582 
COSO, 28 
components of internal control, 379-388, 380f, 388t 
principles, 380 
Cost 
of audit test types, 455 
of evidence types, 231 
persuasiveness and, 224-225 
Cost accounting 
audit of, 725-754 
controls, 731-732 
records, 727 
tests, 743 
tests of controls, 732-734 
Cost or market, 741 
Covered members rule, 114 
CPA 
examination of, 39f 
CPA exam, next version of, 39 
CPA firms, 38, 49-51, 876-877 
activities of, 50-51 
and client, litigation between, 116-117 
ethical conduct by, 108 
quality control, 62-64 
revenue and other data from US, 49 
size categories, 49-50, 49t 
structure of, 51-52 
CPAs, 40 
assurance services provided by, 32-36 
legal liability, 142, 143t 
nonassurance services provided by, 35-36 
profession of, 48-69 
requirements for becoming, 40f 
Credit Alliance, 147 
Credit approval, 489 
Credit memo, 492 
Criminal liability for accountants, 154-155, 154f 
Criteria 
established information and, 28 
for evaluating efficiency and effectiveness, 877-878 
Critical evaluation of evidence, 343 
Current files, 242 
adjusting entries, 243 
supporting schedules, 243-244 
working trial balance, 242 
Current year 
acquisitions and disposals, verifying, 679-682 
balance, comparison with preceding year’s, 234 
Customer 
billing and recording of sales, 489-491 
business risk for, 30 
order processing, 489 
Cutoff, 188 
for accounts payable, 661 
for accounts receivable, 573-575 
bank statement, 786 
for insurance transactions, 688 
misstatement, 573 
physical observation of inventory and, 661 
Cyberattacks, 375 
Cybersecurity, 392 
Cycle approach, 177-180, 179f 


D 


Database management systems, 395 
Data comparisons, client, 233-236 
Debit memo, 647 
Debt compliance letters, 856 
Debt compliance report, 857f 
Decisions 

audit evidence, 221-222 
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auditors’ 
in observation of inventory, 736-737 
regarding audit reports, 90 

materiality, 85-86 
Deduction authorization, 704 
Deficiencies in control 

identification of, 423f 

letter regarding, 423f 
Depreciation expense, verifying, 684 
Detail tie-in 

as balance-related audit objective, 188 
Difference estimation, 626, 628-631 
Digital signatures, 396 
Direct financial interest, 116 
Direction of testing, 499, 500f 
Disclaimer of opinion, 83, 423-424 

due to lack of independence, 90f 
Disclosure-related audit objectives, 466 
Discovery of facts, subsequent, 827-828, 828f 
Discreditable acts rule, 126 
Discussion among engagement team members, 

305-306 

Distribution of the reports, 873 
Dividends, audit of, 766 
Documentary discrepancies, 356 
Documentation 

audit, 239-246, 244f, 823-824 

evidence planning and, 543 

of fraud assessment, 363 

of understanding of internal control, 408-411 
Documents and records 

acquisition and payment cycle, 646-649 

adequate, 385, 709 

examination of, 411 

inventory and warehousing cycle, 726-728 

payroll and personnel cycle, 703-705 

sales and collection cycle, 488-492 

for transferring inventory, 732 
Dodd-Frank financial reform legislation, 345 
Dual-dated audit report, 816 
Dual dating, 816 


E 


Earnings management, 338 
Earnings, retained, 766-767 
Economy and efficiency audit, 875-876 
Effectiveness, 873 
criteria for evaluating, 877-878 
operating, of controls, 378 
ys. efficiency, 873-874 
Efficiency, 873-874 
Embedded audit module approach, 429-430 
Emphasis of other matters, 81 
Employees, appropriate, hiring and promoting, 348 
Employment relationships 
conflicts arising from, 121 
Encryption techniques, 396 
Enforcement 
action by AICPA professional ethics division, 127 
action by a State Board of Accountancy, 127 
PCAOB Enforcement actions, 127-129 
Engagement 
attestation, 847-850 
staff selection for, 266 
types of, 854 
Engagement letter, 264, 265f 
Engagement quality review, 824 
Engagement risk, 313 
Engagements 
types of and related reports, 850f 
Enron, 260 
Enterprise resource planning (ERP) 
systems, 395 
Entity-level controls, 388 
Equipment-related accounts, 678-679, 678f 
Error, 170 
Errors vs fraud, 170 
Escott et al. v. BarChris Construction Corporation (1968), 
149f 
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Estimated population exception rate (EPER), 535-536 


Estimated population misstatement, 618 
Ethical conduct 
elements of, 348t 
need for, 107-108 
Ethical dilemmas, 104-105 
Ethical values, as subcomponent of control 
environment, 381 
Ethics, 103-104 
code of, 270 
need for ethics, 103 
principles of, 103f 
and reducing fraud risks, 347-349 
unethical behavior and, 104-105 
Evaluating audit results, 530, 547, 629-630, 825f 
Evidence, 28, 219-258. see also Documentation; 
Information 
accumulation 
assurance and, 840f 
and evaluation of, 28-29, 879 
appropriateness of, 222-223 
decisions regarding, 221, 468 
differing, among cycles, 310t 
evaluation of, 824-825 
final, 817-821 
key terms, 469t 
nature of, 220 
persuasiveness of, 224-225 
from prior year’s audit, 419 
relationship to risk, 318-323, 321t, 322f 
reliability of, 222-223, 662-663 
sufficient appropriate, 60-61, 223-224, 821-822 
terms related to, 467-469 
types of, 225-230, 230t 
audit tests involving, 454-455, 454t, 468 
vs. legal and scientific evidence, 220, 220t 
Evidence mix, 458-459 
variations in, 458t 
Evidence-planning worksheet, 322f, 544f 
tests of details of balances and, 584f 
Examination, 849 
Examination report under attestation standards, 850 
Examine minutes issues subsequent to the balance 
sheet date, 816 
Exception rate, 528-529 
estimated population, 535-536 
tolerable, 533-534 
Existence 
as balance-related audit objective, 187 
occurrence as transaction-related audit 
objective, 185 
Expense account 
tests of details of balances for, 691, 713 
Expense account analysis, 691 
Explanatory paragraph, of unmodified audit report, 
80f, 81 
External document, 228 


F 


Fair Labor Standards Act (FLSA), 141 
Fair value estimates, 793 
Fees 
contingent and rules of conduct, 123-124 
referral and rules of conduct, 124-125 
unpaid, 117 
Fictitious revenues, 354, 358t 
Final evidence accumulation, 472, 817-821 
Financial audit and reporting requirements—Yellow 
Book, 871 
Financial instruments 
audit of, 776-804 
defined, 778-779 
types of accounts, 777-779 
Financial interests 
direct versus indirect, 114 
material or immaterial, 114-115 
rules of conduct and, 114 
Financial reporting 
fraudulent, 338, 357-359 


internal control over, 33 
risk assessment for, 382-383 
Financial statements 
audit documentation and, 243f 
audit of, 32, 36, 37-38, 190f 
audit of historical, 33 
cycles of, 176-181 
disclosure checklist, 822-823, 824f 
disclosures, 822-823 
information accompanying, 819-821 
preparation, GAAP departure, 82-86, 88-90 
prospective, 853-855 
Finished goods, storage and shipping of, 727-728 
Firewall, 396 
Fixed asset master file, 678 
Flowchart 
of internal control, 409 
of sales and cash receipts, 494f 
Follow-up on nonresponses, 581-582 
Forecasts, 853 
and projections, 853 
Foreign Corrupt Practices Act of 1977, 152 
charges against Walmart, 152 
Foreseeable users, 147-148 
Foreseen users, 146-147 
Fraud, 143t 
audit software analysis, 361-362 
characteristics of perpetrators, 341f 
conditions for, 339-343 
detection methods, 359f 
error vs., 169 
and general cash account audit, 788-792 
and illegal acts, communicate, 825 
material, 170 
other audit implications, 362-363 
responsibilities when fraud is suspected, 359-363 
risk factors, 339-340, 345 
suspected, 359-363 
types of, 338-339 
Fraud examiners 
big data and, 37 
Fraud risk, 307-308 
antifraud controls and fraud deterrence, 350f 
assessment of, 308, 337-350 
commonly cited conditions for, 341f 
management's responsibility to evaluate, 349-350 
mitigating, 349 
reduction by corporate governance oversight, 
347-351 
responding to, 351-353 
responsibility for mitigating, 351f 
specific areas of, 353-359 
Fraud triangle, 339, 339f 
Fraudulent expense reports, 711-712 
Fraudulent financial reporting, 169-171 
Fraudulent Financial Reporting 1998-2007, 269-270 
Frequency distribution of sample means, 624f 
Full disclosure, compilation with, 845f 
Functional audit, 875 
Further audit procedures, 449 
audit risk model and, 450f 
evidence and, 454t 


G 


General authorization, 385 
General cash account 
audit of, 777, 780-788 
other cash accounts and, 778f 
General controls, 389, 390-393 
administration of the IT function, 390 
application controls and, 389f 
backup and contingency planning, 392-393 
categories of, 390t 
physical and online security, 392 
separation of IT duties, 391f 
systems development, 391-392 
Generalized audit software (GAS), 429, 429f 
Generalizing 
from sample to population, 619-621 
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Generally accepted accounting principles (GAAP), 28 
lack of consistent application of, 79-80 
Generally Accepted Attestation Standards, 848t 
Generally accepted auditing standards (GAAS), 
56 
Principles, 58-62 
Generally Accepted Government Auditing Standards 
(GAGAS), 870, 871 
General Standards Rule, 121 
Global Reporting Initiative (GRI), 35 
Going concern 
entity’s ability to continue as, 228-229 
evaluate assumption about, 817 
substantial doubt about, 80, 80f 
Government accountability office auditor, 38 
Governmental financial auditing, 870-872 
Government Auditing Standards (GAGAS), 
871-872 
Government auditors, 875-876 
Government audits, 870 
Guidelines for ARO and TER for nonstatistical sam- 
pling: Substantive tests of transactions, 536t 
Guidelines for ARO and TER for nonstatistical sam- 
pling: Tests of controls, 536t 
Guidelines, for materiality, 277, 278f 


Haphazard sample selection, 527-528 
Hardware controls, 393 

Hierarchy of CPA firm, 52 

Hochfelder v. Ernst & Ernst (1976), 150f 
Horizontal analysis, 345, 346f 

Howard Sirota v. Solitron Devices, Inc. (1982), 151f 
Human resource records, 704 

Human resources, policies and practices, 704 


Idea, 361, 429 
Illegal acts, 171-172 
Imprest accounts, 777 
Imprest payroll account, 706 
Imprest petty cash fund, 778 
Income and expense accounts, audit of, 689-693 
Income smoothing, 338 
Independence 

in appearance, 113 

covered members and, 114 

in fact, 113 

financial interests and, 114 

in mental attitude, 29 

of mind, 113 

of operational auditor, 877 

of provider, evidence and, 223 

rule of conduct, 113-114 

and Sarbanes-Oxley Act, 117-120 
Independent auditors, 29 
Independent checks, 386-387 

performance and, 709 
Independent registrar, 764 
Independent review 

in completion of audit, 824 

of transactions, 650-651 
Indirect financial interest, 116 
Information 

about fraud risks, sources of, 344-346, 344f 

accompanying basic financial statements, 819-821, 

820f 

and communication, 387 

and established criteria, 28 

interim financial, review of, 846-847 

often confirmed, 227t 
Informational inquiry, 360 
Information risk, 30 

biases and motives of the provider, 31 

causes of, 30-31 

complex exchange transactions, 31 

reduction of, 31-32 

remoteness of information, 31 

voluminous data and, 31 
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Information technology (IT) 

internal controls specific to, 389-395 
Inherent limitations, 377 
Inherent risk, 311, 316-318, 585, 781 

for accounts receivable, 463 

assessing, 316-318, 712, 793 
Initial audit planning, 262-266 
Initial sample size, 536-537, 609-611, 629 
Input controls, 393-394 
Inquiry 

of client, 229 

of client’s attorneys, 811-813, 812f 

interrogative, 359 

of management, 816 

of management, regarding fraud, 304-305, 344-345 
Inspection, 226, 305 
Institute of Internal Auditors (IIA), 867-868 

Ethical principles and rules of conduct, 868f 
Insurance, prepaid, 685-686 
Insurance register, 686 
Integrity 

and objectivity rule, 121 

as subcomponent of control environment, 381 
Interbank transfers 

schedule, 792f 

tests of, 790-791 
Interest rate, risk-free, 30 
Interim proof of Cash, 790f 
Internal auditors, 39, 875 
Internal comparisons and relationships, 235t 
Internal control, 376, 762-764. see also Tests of 

controls 

auditor responsibilities for reporting on, 379 

communicate deficiencies in, 825-826 

COSO components of, 379-388, 381f, 388t 

COSO framework and, 375-406 

deficiencies in, 416f 

design of, 378 

evaluating implementation of, 411 

financial reporting and, 33 

IT enhancement of, 395-396 

management and auditor responsibilities for, 377-378 

for non-public companies, 425-426 

objectives of, 376 

over financial reporting, 33 

for prepaid insurance, 686 

procedures to obtain an understanding of, 450 

questionnaire, 409 

relationship to operational auditing, 874 

understanding, 408f 

in acquisition and payment cycle, 649 
in outsourced systems, 420 
in payroll and personnel cycle, 707 
summary of, 431f 
Internal document, 227 
Internal financial auditing, 867-870 
Internal Revenue Agents, 38-39 
Internal Revenue Service (IRS), 28 
Internal verification procedures, 495 
International and AICPA assertions, 182 
International Auditing and Assurance Standards 
Board (IAASB), 56 
International Business Machines Corporation's report 
of management, 168f 
International Ethics Standard Board for Accountants 
(IESBA) 

Code of Ethics for Professional Conduct, 113f 
International Federation of Accountants (IFAC), 56 
International Federation of Independent Audit Regu- 

lators (IFIAR), 62 
International Financial Reporting Standards (IFRS), 28 
International Standards for the Professional Prac- 
tice of Internal Auditing, 867-868, 869f 
International Standards on Auditing (ISAs), 56-58 
Interrogative inquiry, 360 
Inventory 

audit of, 729-731 

compilation tests, 730, 737-741 

and costs, flow of, 726f 

fraud risks, 357, 357t 


and fraudulent payroll considerations, 710-711 
master file, perpetual, 728, 732-733 
observation requirements, 735-737 
price and compilation of, 730-731 
price tests, 737 
pricing and compilation of, 737-741, 740t 
in transit, 661-662 
valuation of, 739-741 
Inventory and warehousing cycle, 726 
audit of, 725-754 
cost accounting, 731-734 
pricing and compilation of, 737-741 
business functions in, 726-728 
functions in, 729f 
integration of tests, 741-743 
physical observation of inventory, 730, 735-737 
Invoice 
sales, 490 
vendors’, 647 
Invoice confirmation, 578-579 


J 


Job cost system, 727 
JOBS Act of 2012, 765 
Job time ticket, 705 
Joint and several liability, 143t 
Journal or listing 
acquisitions, 648 
payroll, 705 
sales, 490 
Judgment, professional, 60, 174-176, 550-551 
common biases, 176, 176t 
elements of effective process, 174f 
framework, 174-176, 174f 
strategies to mitigate common judgment 
tendencies, 176t 
traps, 176, 176t 


K 


Key controls, 414, 502, 708t 
Kiting, 791 


L 


Lack of duty to perform, 145 
Laws and regulations, 171-172 
Lawsuits, opposed by CPA firms, 155 
Lead schedule, 242 
Legal concepts affecting liability, 141-143 
Legal expense 
expense analysis for, 692f 
Legal liability, 138-164 
for the acts of others, 142 
business failure and, 140 
changed legal environment, 139-140 
of CPAs, 142, 143t 
legal terms affecting, 143t 
protection from, 155-156 
lack of privileged communication, 142 
profession’s response to, 155-156 
prudent person concept, 141 
sources of, 142, 144f 
Lending procedures, independence and, 117 
Letter of representation, 816 
Level of disaggregation of planning activities, 
465-466, 465f 
Liability 
accrued, audit of, 688-689 
civil, under federal securities laws, 148-154 
civil, under the federal securities laws, 142 
to clients, 142-146, 145f 
criminal, 142, 144f 
legal concepts affecting, 141-143, 143t 
out-of-period liability tests, 659 
payroll, tests of details of balances for, 713 
recognition of, 647-648 
to third parties under common law, 142, 144f, 
146-148, 147t 
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Limited liability company (LLC), 52 
Limited liability partnership (LLP), 52 
Liquidity activity ratios, 238 
Listening techniques, auditors’, 360 
Litigation 
between CPA firm and client, 116-117 
Local area networks (LANS), 395 
Long-term debt obligations, ability to meet, 238 


M 


Madoff, Bernie, 342 
Management 
communication with, 542-543, 825-827 
and governance, 269-270 
information risk shared with, 31-32 
inquiries of, 304-305 
inquiries of, regarding fraud, 344-345 
letter, 422, 827 
override of controls, 352-353 
payment of audit fees, 120 
representation letter, 816, 817-819 
responsibilities, 168 
related to internal control, 377 
section 404 reporting responsibilities, 377-378 
Management assertions, 182-184, 183t, 189, 189t 
about account balances, 184 
about classes of transactions and events, 183 
about presentation and disclosure, 184 
audit objectives and, 184 
International and AICPA assertions, 182 
Management consulting services, 50-51 
PCAOB assertions, 182 
Management letters, 422, 827 
Manual controls, 393 
Manufactured inventory, pricing of, 740-741 
Materiality, 83-86, 274-275 
applying, steps in, 275f 
decisions, 85-86 
for financial statements as a whole, 275-278 
levels of, 60, 84-86, 85t 
performance, 567, 584, 657,781 
preliminary judgment about, 276-277 
as relative concept, 276 
revised judgment about, 276 
Material weakness, 414-417, 424f 
McKesson-Robbins, 337 
Mean-per-unit estimation, 627 
Measurement limitations, 320-321 
Minutes of meetings, 270 
Misappropriation 
in acquisition and payment cycle, 358 
of assets, 169-171, 338-339, 354 
of receipts involving revenue, 356-357 
Misstatement bound, 617 
Misstatements, 606-607 
analysis of, 613 
comparison with preliminary judgment, 281-283 
cutoff, 573 
known, 281 
likely, 281 
material, 60, 73, 84 
discovery by auditors, 169-170 
and monetary unit sampling, 620-622 
in population, 629 
possible, 229 
as a result of fraud, 352, 359-363 
in sales, 498 
tolerable, 618 
Monetary unit sampling (MUS), 615-623 
acceptability of population using, 617 
audit uses of, 622-623 
comparison with nonstatistical sampling, 
615-617 
defined, 615 
generalizing 
from sample to population, 617 
when misstatements are found, 620-622 
when no misstatements found, 619-620 
sample size determined using, 616, 617-619, 619t 
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Monitoring 

fraud risk prevention programs, 349 

of internal control performance, 387-388 
Monthly statements, 491, 495 


Name and form of organization rule, 125-126 
Narrative, describing internal controls, 409 
National Association of State Boards of Accountancy 
(NASBA), 40 
Negative confirmation, 579-580, 580f 
Negligence 
constructive fraud, 143t 
gross negligence, 143t 
ordinary negligence, 143t 
Nonassurance services, 35—36 
Nonaudit services, 117-118 
Noncompliance with laws and regulations, 
171-172 
Nonexistent payroll, tests for, 711 
Nonexistent transactions, 499 
Nonnegligent performance, 145 
Nonprobabilistic sample selection, 525 
methods, 527-528 
Nonpublic companies, internal control for, 
425-426 
Nonresponses, follow-up on, 581-582 
Nonroutine transactions, 308, 317 
Nonsampling risk, 524, 552 
Nonstatistical sampling 
application of, 529-543 
comparison with 
monetary unit sampling, 615-617 
variables sampling, 623 
defined, 525 
for tests of details of balances, 606-615 
Nonverbal cues, during inquiry, 361t 
Notes payable, 757-761 
analytic procedures, 758-759, 759t 
internal controls, 758 
and related interest accounts, 757f 
tests of controls and substantive tests of 
transactions, 758 
tests of details of balances, 759-760, 762t 


0 


Objectivity 
and evidence, 223 
and integrity rule, 121 
Obligations long-term debt, 238 
Observation, 305 
as audit evidence, 230 
of entity activities and operations, 411 
physical, of inventory, 735-737 
Occurrence 
rate of. see Exception rate 
recorded acquisitions and, 653 
of recorded sales, 498-499 
as transaction-related audit objective, 185 
Office of Management and Budget (OMB) 
Circular A-133, 872 
Officer’s compensation, 714-715 
Omitted transactions, 499 
Online security, 392 
Operational auditing, 36, 873-880 
criteria for evaluating efficiency and effectiveness, 
877-878 
difference from financial auditing, 873 
effectiveness vs. efficiency, 873-874 
examples of findings, 880 
independence and competence of 
auditor, 877 
performance of, 875-876 
phases in, 878-879 
types of, 874-875 
Opinion paragraph, 75 
of separate report on internal control, 77f 
of unmodified shared report, 81, 82f 
Organizational audit, 875 


Organizational structures 
and control environment, 382 
of CPA firms, 51-52, 52t 
Out-of-period liability tests, 659 
Output controls, 394 
Outsourced systems, understanding internal 
controls in, 420 
Owner’s equity, 761-767 
dividend accounts and, 763f 
Ownership interests, 119 
Ownership of audit files, 240 


P 


Parallel simulation testing, 428-429 
Parallel testing, 392 
Partner rotation, 119 
Partnerships 
general, of CPA firms, 51 
limited liability (LLP), 52 
Payments, authorization of, 651 
Payroll 
payment of, 706 
preparation of, 704-705 
Payroll and personnel cycle, 703 
accounts and classes of transactions in, 705t 
accounts and transactions in, 703, 704f 
audit of, 702-723 
business functions in, 703-706 
integration of, for inventory, 742 
Payroll bank account reconciliation, 706 
Payroll expenses, and fraud risk, 358-359 
Payroll master file, 705 
Payroll taxes, 706, 709-710, 715 
PCAOB Staff alert on professional skepticism, 173 
Peer review, 62 
exceptions to confidentiality and, 123 
Percent of misstatement, 620t 
Performance 
independent checks on, 386-387 
Performance materiality, 275, 278-281, 280f, 463, 
567, 584, 657, 712, 781, 793 
planned evidence and, 323f 
Permanent files, 241-242 
Perpetual inventory master files, 728, 
732-733 
Persuasiveness of evidence, 222-225 
appropriateness of evidence, 222-223 
Petty cash, 778 
Phantom inventory (chapter opener), 725-726 
Phases of the audit process, 190-192, 469-473 
Physical control 
over assets and records, 386, 709 
over computer equipment, 392 
over inventory, 732 
Physical examination, as audit evidence, 226 
Physical inventory, pricing and compilation, 743 
Physical observation of inventory, 
735-737 
Pilot testing, 392 
Planned detection risk, 311, 421-422 
and planned audit evidence, 586 
Planning and supervision, adequate, 60 
Planning phase 
of audit process, 190-191, 469 
in operational auditing, 878-879 
Plan the sample, 530, 546-547 
Pocketing parking cash, 356 
Point estimate, 611-612 
Ponzi, Charles, 342 
Ponzi scheme, 342 
Population 
defining, 531-532, 607-608 
effect of size, 547-548 
generalize from sample to, 539, 611-612, 619-622, 
629-631 
misstatements in, 609, 629 
recorded dollar, 607, 615-616 
rejected, subsequent action, 613-615 
requesting client to correct, 614-615 
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Positive confirmation, 578-579, 579f 
Preliminary judgment about materiality, 275, 
276-277 
Premature revenue recognition, 354-356, 
490, 574 
Prenumbered documents, for sales, 495 
Prepaid expenses, audit of, 685-688 
Prepaid insurance 
related accounts and, 686f 
Preparation services, 846 
Prepare proof of cash receipts, 504-506 
Presentation and disclosure-related audit 
objectives, 187-189, 715, 807t 
for accounts receivable, 577 
for capital stock, 765 
and completing the audit, 472, 807-808 
Pricing and compilation 
audit of, 737-741 
controls, 738-739 
procedures, 739 
Principles 
performance, 60-61 
reporting, 61 
responsibilities, 59-60 
underlying an audit, 58 
underlying GAAS, 58-62 
Private Companies Practice Section (PCPS), 64 
Private Securities Litigation Reform Act of 1995, 
155 
Privileged information, 123 
Probability proportional to size sample selection 
(PPS), 527, 616-617 
Procedures suggested for reviews, 841-842 
Procedures to obtain an understanding, 409 
Process cost system, 727 
Processing controls, 394, 394t 
Professional conduct. see also Ethical conduct 
code of, 109-112 
by CPAs, 110f 
principles of, 112, 112t 
Professional ethics, 31, 102-137 
Professional judgment, 174-176 
common biases, 176, 176t 
elements of effective process, 174f 
framework, 174-176, 174f 
strategies to mitigate common judgment 
tendencies, 176t 
traps, 176, 176t 
Professional skepticism, 60, 172-174, 343-344 
Profitability ratios, 238-239 
Program audit, 876 
Projections, 853 
Prompt and accurate recording, 647 
Proof of cash, 789-791 
Proper authorization of transactions and activities, 
384-385 
Property, plant, and equipment 
audit of, 677-685 
classification of accounts, 678t 
Property taxes, accrued, audit of, 688-689, 688f 
Proprietorship, 51 
Prospective financial statements, 853-855 
potential legal liability in, 854 
use of, 853-854 
Prudent person concept, 141 
Public Company Accounting Oversight Board 
(PCAOB), 53 
auditing standards, 57-58 
considering changes to the audit report, 78 
report on internal control, 76-77, 77f, 421 
sanctions and, 151-152 
unqualified report, 75-76, 76f 
Public company interim review, 846-847, 847f 
Publicly held corporation, 761 
Purchased inventory, pricing of, 739-740 
Purchase orders, processing of, 646, 727 
Purchase requisition, 646 
Purchases 
authorization of, 649 
fraud risks for, 357-358 
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Q 


Qualifications of individuals providing information, 
223 

Qualified opinion, 82-84, 87-90, 88f, 89f, 423-424 
Quality control, 62 

of CPA firms, 62-64 

elements of, 63, 63t 

peer review, 63 

relationships, 64f 
Questionaire, internal control, 409-410, 410f, 411 
Questioning mind, 343 


Random sample, 525-526 
Ratio estimation, 626-627 
Raw materials 
receipt and storage of, 727 
Realizable value 
of accounts receivable, 575-576 
as balance-related audit objective, 188 
Reasonable assurance, 169, 377 
Recalculation, 229 
Receipts involving revenue, misappropriation of, 
356-357 
Receiving report, 646-647 
Recorded population value, 617 
Related party, 268-269 
Related party transaction, 268-269 
Relating performance materiality and risks to balance 
audit objectives, 320 
Relevance of evidence, 222 
Relevant assertions, 184 
Reliability of evidence, 222-223, 662-663 
Remittance advice, 491 
Reperformance, 229-230 
Report on income tax basis, example of, 856f 
Reports on Controls at Service Organizations 
(SOC Reports), 851-853 
Type | report, 851 
Type 2 report, 852 
Type 3 report, 852-853 
Reports on internal control over financial reporting 
management assertions, 33 
separate or combined report, 76 
Representative sample, 523-524 
Resolving ethical dilemmas, 106-107 
Restatement of Torts, 147 
Retained earnings, 766-767 
Revenue fraud risks, 353-357 
Review accounting estimates for biases, 352-353 
Review attestation engagement 
review of, 849-850 
Review for subsequent events, 813-816, 814f 
Review internal statements prepared subsequent to 
the balance sheet date, 815-816 
Review of audit documentation, 823-824 
Review of historical financial statements, 34 
Review records prepared subsequent to the balance 
sheet date, 815 
Review report, 843, 843f 
Review services, 840-844 
Review services (SSARS review), 840-844 
Rights and obligations 
as balance-related audit objective, 188 


Risk, 302. see also Acceptable risk; Client business risk; 


Control risk 
evidence and, 309, 319t 
inherent. see Inherent risk 
of material misstatement, 60, 262, 
301-336, 462 
of material misstatement at the assertion 
level, 303 
of material misstatement at the overall financial 
statement level, 303 
relationship to materiality, 323 
sampling 
and nonsampling, 523-524 
in variables sampling, 627-628 


Risk advisory services, 50 
Risk assessment 
for financial reporting, 382-383 
procedures, 267, 303-307, 304f, 449-450 
update process, 353 
Risk factors 
for fraudulent financial reporting, 316-317, 339, 
340t, 353-359 
for misappropriation of assets, 316-317, 340-343, 
342t 
Rules of conduct, 111-112, 120-127 
advertising and solicitation, 125 
applicability of, 112 
commissions and referral fees, 124-125 
conceptual framework of, 110-111 
confidentiality, 122-123 
discreditable acts, 126 
enforcement of, 127-129 
form of organization and name, 125 
independence, 113-114 
integrity and objectivity, 121 
interpretations of, 112 
safeguards, 111 
summary of, 128t 
technical standards, 121 
threats to compliance, 110-111 
Rusch Factors v. Levin (1968)-Liability to third parties, 
147 


S 


Salaries and wages, accrued, 713-714 
Sales 
cutoff, 573-574 
designing substantive tests of transactions for, 498 
designing tests of controls and substantive tests of 
transactions for, 493f 
internal control, 493 
journal or listing, 490 
recorded, existing, 499-501 
returns and allowances, 492, 503, 574 
summary of methodology for, 502-503 
transaction file, 490 
Sales and collection cycle, 488 
accounts and classes of transactions in, 488f 
accounts in, 487-488, 487f 
analytical procedures for, 569t 
business functions for, 488-492 
classes of transactions in, 487-488 
control risk for, 463 
integration of tests, for inventory, 741-743 
role of audit tests in audit of, 451f 
substantive tests of transactions and, 463 
tests of controls and, 463 
tests of controls and substantive tests of transac- 
tions, 486-520 
transaction-related audit objectives, 568f 
types of audit tests for, 509f 
Sales order, 489 
Sample exception rate (SER), 539 
Sample selection, 525, 537-538 
evidence decisions and, 221 
methods, 525-528 
probabilistic, 525-527 
probabilistic vs. nonprobabilistic, 525 
probability proportional to size, 527, 616-617 
stratified, 527 
Sample size, 618 
for accounts payable tests, 663 
for attributes sampling, 548t 
calculation with difference estimation, 628-629 
for confirming accounts receivable, 581 
determination using monetary unit sampling, 
617-618 
effect of, 537t 
evidence decisions and, 221 
expanding, 541-542 
increasing, 614 
initial, 536-537 
in physical observation, 736-737 
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for small populations, 537 
tests of details of balances, 610t 
Sampling 
attributes, 543-551 
audit, 523 
decisions about, 581 
for exception rates, 528-529, 546t 
monetary unit, 615-623 
nonstatistical, 525, 529-543, 544, 606-615 
statistical, 524 
statistical vs. nonstatistical, 524-525 
variables, 623-628 
Sampling distribution, 544-546, 624t 
for a population distribution, 625f 
Sampling interval, 618-619 
Sampling risk, 282, 523 
in monetary unit sampling, 621-622 
in variables sampling, 627-628 
Sampling unit, defining of, 532-533, 608 
Sarbanes-Oxley Act, 33, 56, 152-153 
and audit documentation, 240 
independence and, 117-120 
and PCAOB, 53 
Section 404, 33, 75-76, 421-422 
Scienter, 150 
Scientific evidence, 220t 
Scope limitation 
of audit, 82 
Scope paragraph, 75 
of unmodified shared report, 82f 
Section 404 of the Sarbanes—Oxley Act of 2002 
auditor responsibilities, 378-379 
management responsibilities, 377-378, 378f 
report on internal control over financial reporting, 
75-77 
types of audit opinions, 422-424 
Securities Act of 1933, 54, 148-149, 153f 
Securities Act of 1934, 151f, 153f 
Securities and Exchange Commission (SEC), 54 
authority to sanction, 151-152 
provisions addressing auditor independence and, 
117-118 
Securities Exchange Act of 1933, 149-150, 149f 
Securities Exchange Act of 1934, 149-151, 150f 
Rule 10b-5 of, 150 
Segregation of IT duties, 391f 
Separate and proportionate liability, 143t 
Separate report on internal control over financial 
reporting, 75-77, 77f 
Separation of authorization of transactions from 
custody of related assets, 384 
Separation of duties 
adequate, 384, 494-495, 709 
and proper record keeping for owners’ equity, 763-764 
Separation of IT duties, 390-391 
from user departments, 384 
Separation of operational responsibility from record- 
keeping responsibility, 384 
Service auditor, 420-421 
Service center, 396, 420-421 
Service organization control (SOC), 851-853 
Shareholders’ capital stock master file, 763 
Shipping contract 
FOB destination, 661 
FOB origin, 661 
Shipping document, 489, 582 
Short-term debt-paying ability, 236-238 
Significant deficiency, 414-417, 415f 
Significant risks, 308, 419, 462 
Simple random sample selection, 525-526 
Single Audit Act of 1984, 872 
Six-step approach to resolving ethical dilemmas, 
106-107 
Skepticism, professional, 172-174, 343-344 
Special assignments, in operational auditing, 875 
Specialists, 266 
Specific authorization, 385 
Specified elements, accounts, or items, 856 
Standard bank confirmation form, 784, 785f 
Standard cost records, 738 
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Standards 
accounting principles, 122 
attestation, 848 
compliance with, 110-111, 122 
of conduct, 112f 
performance, 60-61 
reporting, 61 
responsibilities, 59-60 
set by AICPA, 55-56 
Standard unmodified opinion audit report, 71, 
76, 82-83 
conditions for, 74 
for nonpublic entities, 71-74 
parts of, 71-72 
for public companies, 75 
Statements on Auditing Standards (SASs), 55, 64 
Statements on Internal Auditing Standards 
(SIASs), 868 
Statements on Standards for Accounting and 
Review Services (SSARS), 840 
Statements on Standards for Attestation 
Engagements (SSAE), 848 
Statistical inferences, 625-626 
Statistical sampling, 524 
Statistical versus nonstatistical sampling, 524-525 
Statutory law, 143t 
Stock transfer agent, 764 
Stratified sampling, 527, 607-608 
Stratified statistical methods, 627 
Subpoenas, 125 
Subsequent discovery of facts, 827-828, 828f 
Subsequent events, 814 
audit tests, 815-816 
dual dating, 816 
review for, 814f 
types of, 814-815 
Substantive analytical procedures, 191, 229, 586 
for equipment, 679-681 
sales and collection cycle, 570t 
Substantive testing, 451 
expanded when fraud is suspected, 362 
Substantive tests of transactions, 191, 451-452, 
502-503, 568, 586 
audit sampling for, 522-563 
designing, 460f, 461f 
designing for 
acquisitions and payment cycle, 649-656, 650f 
financial instruments, 782, 794 
payroll and personnel cycle, 706-712 
sales, 493f 
effect of results of, 508-509 
for notes payable, 758 
in phase II of audit process, 191-192 
relationship to tests of controls, 460-461 
trade-off with tests of controls, 456-457 
Sufficiency of evidence, 223-224, 821-822 
Supporting schedules, 243-245 
Sustainability reporting, 849 
Systematic sample selection, 526-527 
Systems development, 391-392 
SysTrust services, 853 


T 


Tainting, 620 
Tax return 
audit of, 29f 
payroll, 706, 713 
Tax services, by CPA firms, 50 
Test data approach, 426-428, 427f 
Tests of controls, 417-421, 502, 568 


in audit plan development, 450-451 
audit sampling for, 522-563 
cash receipts, 504 
designing, 460f, 461f 
acquisition and payment cycle, 649-656, 650f, 
657-658 
cash receipts, 504-508 
financial instruments, 794 
payroll and personnel cycle, 706-711 
sales, 496-498 
effect of results of, 508-509 
extent of, 418-419, 495-496 
illustration of, 452t 
in phase II of audit process, 191-192 
procedures for, 417-418 
purpose of, 417 
relationship to 
substantive tests, 456 
substantive tests of transactions, 460-461 
trade-off with substantive tests, 456-457 


Tests of details of balances, 192, 462-465, 680t, 


759-760 

for accounts payable, 656-663, 657f 
in audit plan development, 453 
audit program, 583-586 
of cash, 782-784, 784t, 794-795 
designing, 464f 

accounts receivable, 462-464, 565-577, 565f 

payroll and personnel cycle, 712-716 
evidence-planning worksheet, 321-322 
expense account analysis, 714-715 
for financial instruments, 794-795, 795t 
inventory and, 738t 
for inventory pricing and compiliation, 740t 
for notes payable, 759-760 
for notes payable and interest, 762t 
in phase III of audit process, 191-192 


The Uniform CPA Examination Candidate Bulletin, 40 
Third parties 


legal liability to, 144f, 147t 
suits by, auditor defenses against, 146-148 


Third-party beneficiary, 143t 

Those charged with governance, 382, 422 
Tick marks, 246 

Timekeeping 


payroll preparation and, 704-705 


Time record, 705 
Timing 


of audit tests, 471t 

of confirmations, 580-581 

difference, 575 

evidence decisions and, 221 

as transaction-related audit objective, 186 


Tolerable exception rate (TER), 533-534 
Tolerable misstatement, 608, 617, 618 
Total payroll, 715 

Tracing, 228 

Training, fraud awareness, 349 

Transaction classes 


in sales and collection cycle, 487-488 


Transaction cycles, 180f 


cash in the bank and, 779-780, 779f 


Transaction file 


acquisitions, 647-648 
payroll, 705 


Transaction-related audit objectives, 181, 185-186, 


466, 468t, 497t, 502, 505t, 652t, 655t, 708t 


Transactions 


flow of from journals to financial 
statements, 177f 
timely recording of, 650-651 


Trial balance 
accounts payable, 648 
working, 242 
Trust Services, five principles of, 852t 
Type 1 report, 851 
Type 2 report, 852 
Types of attestation engagements, 848-849 
Types of tests, 449-454, 468 


U 


Ultramares Corporation v. Touche (1931), 146f 

Ultramares doctrine, 146 

Unadjusted misstatement audit schedule, 822, 

823f 

Unasserted claim, 811 

Uncollectible accounts, 576f 

audit tests for, 508 

authorization form, 492 

Unethical behavior, 103-104 

Unit cost records, 733-734 

United States v. Andersen (2002), 154f 

Unmodified audit report with explanatory 
paragraph or modified wording, 78-79 

nmodified opinion, refusal to give, 615 

nqualified opinion on internal control over 
financial reporting, 422 

Unusual fluctuations, 229 

Unusual transactions, significant, 308, 353 

U.S. Government Accountability Office (GAO), 38 


V 


Vacation pay, accrued, 714 
Valuation 
of inventory, 739-741 
Variables methods, 626-627 
Variables sampling, 623-628 
comparison with nonstatistical sampling, 623 
difference estimation, 626 
mean-per-unit estimation, 627 
ratio estimation, 626-627 
sampling distributions, 623-625 
sampling risks, 627-628 
statistical inference, 625-626 
stratified statistical methods, 627 
Vendor’s invoice, 647, 660 
Vendor’s statement, 648, 660 
Verbal cues, during inquiry, 360t 
Verification 
of addresses, 581 
in audit of property, plant, and equipment, 
679-685 
of information, by user, 31 
Vertical analysis, 346 
Voucher, 647 
Vouching, 228 


WwW 


Walkthrough, 411 

WebTrust assurance services, 853 

W-2 Form, 706 

whistleblower, 345 

Wide area networks (WANS), 395 
Working trial balance, 242 
Workplace environment, positive, 348 


Y 


Yellow Book, 870 
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